Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38312e302f32342d3234203d3e20323731353536.roa
File:                     3137392e36332e38312e302f32342d3234203d3e20323731353536.roa (raw, json)
Hash identifier:          WiA+fdE8bnG887/G/+ayDu1KJMYxChVBqe5WzOPJpvw=
Subject key identifier:   48:9D:50:E6:5B:66:78:77:BF:81:12:C5:F7:1A:60:94:B3:F7:E1:11
Certificate issuer:       /CN=790CDB25F92375A77BEE4926A0F919ECA374CD1D
Certificate serial:       5D0AA1A1E64240DD879E358D33A257C9E040B51B
Authority key identifier: 79:0C:DB:25:F9:23:75:A7:7B:EE:49:26:A0:F9:19:EC:A3:74:CD:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/790CDB25F92375A77BEE4926A0F919ECA374CD1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38312e302f32342d3234203d3e20323731353536.roa
Signing time:             Tue 24 Feb 2026 23:10:47 +0000
ROA not before:           Tue 24 Feb 2026 23:05:47 +0000
ROA not after:            Tue 23 Feb 2027 23:10:47 +0000
asID:                     271556
IP address blocks:        179.63.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/790CDB25F92375A77BEE4926A0F919ECA374CD1D.crl
                          rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/790CDB25F92375A77BEE4926A0F919ECA374CD1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/790CDB25F92375A77BEE4926A0F919ECA374CD1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0a:a1:a1:e6:42:40:dd:87:9e:35:8d:33:a2:57:c9:e0:40:b5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790CDB25F92375A77BEE4926A0F919ECA374CD1D
        Validity
            Not Before: Feb 24 23:05:47 2026 GMT
            Not After : Feb 23 23:10:47 2027 GMT
        Subject: CN=489D50E65B667877BF8112C5F71A6094B3F7E111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:36:26:db:cc:9d:35:92:94:cb:ac:ca:85:27:
                    cf:04:b3:5d:e3:cd:01:e3:4d:d8:8c:18:1c:d0:6b:
                    5c:eb:d4:58:de:4f:60:a8:78:60:7c:dc:4f:bb:03:
                    a4:ab:03:8c:ec:30:fe:5e:dc:af:b3:5c:06:42:ca:
                    b5:0e:01:07:4e:94:f4:aa:2f:6c:08:55:b3:98:a4:
                    3d:f1:97:9d:93:6e:c6:ce:60:c7:02:b4:67:d3:1f:
                    c7:69:cd:f1:f1:6f:9d:1d:24:05:aa:1f:6b:85:d3:
                    52:5f:04:7b:2e:bc:4a:4b:1f:13:ff:ab:57:e0:ce:
                    44:46:b7:41:eb:ae:5e:c7:a6:01:24:ce:bb:33:85:
                    b6:dd:dc:08:83:56:ed:6c:86:d7:a1:fe:b7:31:d1:
                    6c:e6:39:37:97:92:d2:6c:8c:ee:fd:4a:8d:76:0c:
                    db:02:6d:79:fb:4d:c4:2f:7c:15:e1:b2:c4:5d:55:
                    7c:75:bf:79:ca:d7:69:85:94:cc:10:26:b1:a0:cf:
                    6d:ff:bf:48:7e:24:b4:0d:56:67:85:4f:ad:56:d5:
                    69:65:e9:c1:7d:f9:eb:4c:a7:c4:bb:48:a5:38:c9:
                    4d:0b:c1:1e:f6:c7:05:f7:b5:40:e7:f7:12:4b:06:
                    bd:e5:d0:59:f6:ad:30:fd:04:e3:1f:6b:f8:ee:a0:
                    3d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9D:50:E6:5B:66:78:77:BF:81:12:C5:F7:1A:60:94:B3:F7:E1:11
            X509v3 Authority Key Identifier:
                keyid:79:0C:DB:25:F9:23:75:A7:7B:EE:49:26:A0:F9:19:EC:A3:74:CD:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/790CDB25F92375A77BEE4926A0F919ECA374CD1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/790CDB25F92375A77BEE4926A0F919ECA374CD1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38312e302f32342d3234203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:83:c9:5c:08:13:f7:b2:c4:75:82:8c:84:54:9b:13:e8:dd:
         cb:04:5e:83:db:f9:c3:8f:16:b0:69:27:ee:bb:3a:79:be:7c:
         1d:ad:ae:42:d9:49:a4:8d:a8:23:08:ff:8f:58:a6:ec:76:fe:
         79:29:a7:ee:7a:37:f5:d1:4a:49:30:ed:df:55:bf:de:f3:69:
         4c:4a:cd:27:e5:e3:28:ed:07:7d:81:9a:be:be:f1:ca:b4:b0:
         f5:a7:ce:90:b4:31:5a:82:7a:b2:b6:08:0c:bc:e8:7f:96:44:
         0f:ee:bf:d8:4f:37:57:a0:86:58:2d:57:6a:c4:2a:50:dc:6f:
         a5:a1:1f:9b:9e:08:83:f7:80:ee:c1:36:ce:bd:37:dd:49:90:
         e5:88:e5:5e:cf:43:45:10:de:53:b7:a3:2f:98:1f:7e:7f:14:
         21:a9:b7:c3:69:9c:7f:02:6b:1a:18:46:c4:72:9c:3a:10:4b:
         b7:4a:5c:88:61:fa:68:e1:54:3a:c4:24:5f:14:0d:c5:0f:67:
         d2:9a:80:53:37:04:74:66:40:6b:5b:ca:b7:92:c4:0d:36:81:
         a5:58:d2:ca:35:8f:0a:e0:2c:a4:45:44:5f:9c:1a:36:fd:66:
         a9:3c:42:ad:37:e9:9a:64:f8:28:04:00:67:fd:0c:6a:db:84:
         3d:08:9d:69
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXQqhoeZCQN2HnjWNM6JXyeBAtRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwQ0RCMjVGOTIzNzVBNzdCRUU0OTI2QTBGOTE5RUNB
Mzc0Q0QxRDAeFw0yNjAyMjQyMzA1NDdaFw0yNzAyMjMyMzEwNDdaMDMxMTAvBgNV
BAMTKDQ4OUQ1MEU2NUI2Njc4NzdCRjgxMTJDNUY3MUE2MDk0QjNGN0UxMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCNibbzJ01kpTLrMqFJ88Es13j
zQHjTdiMGBzQa1zr1FjeT2CoeGB83E+7A6SrA4zsMP5e3K+zXAZCyrUOAQdOlPSq
L2wIVbOYpD3xl52TbsbOYMcCtGfTH8dpzfHxb50dJAWqH2uF01JfBHsuvEpLHxP/
q1fgzkRGt0Hrrl7HpgEkzrszhbbd3AiDVu1shteh/rcx0WzmOTeXktJsjO79So12
DNsCbXn7TcQvfBXhssRdVXx1v3nK12mFlMwQJrGgz23/v0h+JLQNVmeFT61W1Wll
6cF9+etMp8S7SKU4yU0LwR72xwX3tUDn9xJLBr3l0Fn2rTD9BOMfa/juoD0lAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSJ1Q5ltmeHe/gRLF9xpglLP34REwHwYDVR0j
BBgwFoAUeQzbJfkjdad77kkmoPkZ7KN0zR0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm91WkFaZEF0UTNZTGFqRjU2NndoWDdMZGplUEJkdldLZFM1YXJjWXB0
ZFgvMC83OTBDREIyNUY5MjM3NUE3N0JFRTQ5MjZBMEY5MTlFQ0EzNzRDRDFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5MENEQjI1RjkyMzc1QTc3
QkVFNDkyNkEwRjkxOUVDQTM3NENEMUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZvdVpBWmRBdFEzWUxhakY1NjZ3aFg3TGRqZVBCZHZXS2RTNWFyY1lwdGRYLzAv
MzEzNzM5MmUzNjMzMmUzODMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzUzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsz9RMA0GCSqGSIb3DQEBCwUAA4IBAQBWg8lcCBP3
ssR1goyEVJsT6N3LBF6D2/nDjxawaSfuuzp5vnwdra5C2UmkjagjCP+PWKbsdv55
Kafuejf10UpJMO3fVb/e82lMSs0n5eMo7Qd9gZq+vvHKtLD1p86QtDFagnqytggM
vOh/lkQP7r/YTzdXoIZYLVdqxCpQ3G+loR+bngiD94DuwTbOvTfdSZDliOVez0NF
EN5Tt6MvmB9+fxQhqbfDaZx/AmsaGEbEcpw6EEu3SlyIYfpo4VQ6xCRfFA3FD2fS
moBTNwR0ZkBrW8q3ksQNNoGlWNLKNY8K4CykRURfnBo2/WapPEKtN+maZPgoBABn
/Qxq24Q9CJ1p
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:32:44 2026 by rpki-client