Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131372e302f32342d3234203d3e20323730373630.roa
File:                     3137392e3130392e3131372e302f32342d3234203d3e20323730373630.roa (raw, json)
Hash identifier:          jXWhQxBODlXXnQvm3ILMom1PIxBDlbM/9xGSu/f5AsE=
Subject key identifier:   3A:69:90:A0:20:E9:D5:32:9E:8D:1C:54:1B:92:74:86:6F:9C:28:6E
Certificate issuer:       /CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
Certificate serial:       01919B76076AE29B61B2F29EB00F95D6203D54BD
Authority key identifier: 04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131372e302f32342d3234203d3e20323730373630.roa
Signing time:             Mon 14 Sep 2026 03:11:19 +0000
ROA not before:           Mon 14 Sep 2026 03:06:19 +0000
ROA not after:            Mon 13 Sep 2027 03:11:19 +0000
asID:                     270760
IP address blocks:        179.109.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 21:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:9b:76:07:6a:e2:9b:61:b2:f2:9e:b0:0f:95:d6:20:3d:54:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
        Validity
            Not Before: Sep 14 03:06:19 2026 GMT
            Not After : Sep 13 03:11:19 2027 GMT
        Subject: CN=3A6990A020E9D5329E8D1C541B9274866F9C286E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:76:6a:f0:96:13:c4:e6:5b:95:9c:ac:99:7c:
                    fd:21:f6:23:d9:b1:4d:d2:6c:4f:e3:19:71:7e:fc:
                    56:4e:45:ab:be:25:42:6e:a7:d8:b3:0d:da:ad:b1:
                    2d:09:bf:28:54:28:72:49:81:3d:30:bf:1a:c1:fa:
                    14:c3:85:32:bf:34:a7:0c:2c:4a:d3:36:78:0e:f0:
                    bc:ae:c8:cb:77:0b:b0:2b:59:2d:a3:41:57:ef:0f:
                    28:20:90:3c:74:8c:19:57:73:ba:b7:8b:ed:df:e9:
                    cd:8a:de:66:e1:63:44:43:c7:45:2d:0c:78:2a:2d:
                    03:2b:56:ff:20:24:ca:53:bd:bc:30:45:d2:3c:fd:
                    80:4d:76:9f:ec:8f:ea:0a:f6:b8:af:85:b8:24:98:
                    c8:6e:41:fa:28:66:e5:ad:1d:59:90:86:d2:62:6d:
                    5d:5e:cb:5a:7b:e7:f5:26:c9:db:c6:18:b9:08:e0:
                    6e:5d:c9:2a:c7:2f:1b:a9:93:5b:6f:99:f9:31:ae:
                    3d:dd:f3:a5:ac:01:20:9f:63:2c:3d:53:5d:a8:b0:
                    32:5a:54:d6:bb:70:fd:7b:c5:e9:14:94:54:44:b1:
                    07:bd:5e:66:53:a3:41:fa:9c:3b:9b:db:c5:1d:5f:
                    30:8d:dd:b2:28:92:82:0a:5c:e9:9f:d9:55:d2:83:
                    fc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:69:90:A0:20:E9:D5:32:9E:8D:1C:54:1B:92:74:86:6F:9C:28:6E
            X509v3 Authority Key Identifier:
                keyid:04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131372e302f32342d3234203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:dd:7e:b8:b2:5a:7b:fc:c6:87:3d:be:ee:69:d7:c8:84:79:
         0f:5d:49:54:ed:97:55:74:13:1c:79:53:26:92:48:cc:31:47:
         9a:d3:c9:ac:12:08:d4:ba:29:e6:bf:81:c0:1e:c7:9b:d1:cb:
         58:59:dd:73:b1:4e:59:3e:b9:54:17:85:e5:32:f2:a0:9f:4b:
         f1:d7:20:82:cb:a1:45:16:6f:65:b9:1d:fb:1a:dd:5c:c6:a8:
         79:6a:40:93:5a:83:08:c9:5f:0a:a7:b7:8e:63:61:1d:8f:cf:
         f7:e4:fb:6d:03:62:af:dc:92:4e:80:ae:13:3a:70:26:97:30:
         34:9e:25:9e:ce:a9:96:e7:8d:58:7c:31:61:96:3e:c8:6c:6d:
         82:ac:d0:5f:be:07:80:12:ec:1c:03:fd:18:8a:52:b0:19:6a:
         03:d9:dc:bb:e6:d6:be:40:d6:4a:e8:ad:77:a8:7a:e1:0a:0b:
         c7:15:05:88:bc:84:d9:70:fc:62:13:a9:70:0c:ba:2a:03:73:
         b7:cd:7c:c7:8c:f1:84:c7:f9:39:74:82:8d:79:f7:b8:91:bf:
         70:f9:3c:e5:5a:7a:d6:7a:8e:e3:a0:02:78:2d:ce:ed:03:1c:
         dd:a3:d3:eb:b8:62:23:4e:0f:a5:cc:84:19:ca:64:d7:e8:c4:
         6a:5d:85:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:14:49 2026 by rpki-client