Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/3137392e34382e3232332e302f32342d3234203d3e20323638353738.roa
File:                     3137392e34382e3232332e302f32342d3234203d3e20323638353738.roa (raw, json)
Hash identifier:          tPL44/AXg9ax+TE5W6v2yXi+m2ok+mO1f4w2yV3W9jc=
Subject key identifier:   14:3A:61:CD:99:3F:20:43:E2:51:E4:94:E1:07:2E:7B:A3:71:A0:97
Certificate issuer:       /CN=FB912D881E96AFBCA81349F5CF3E9D289995A954
Certificate serial:       04034AFC66ED8E1103AF798F6FF90CA1392271B2
Authority key identifier: FB:91:2D:88:1E:96:AF:BC:A8:13:49:F5:CF:3E:9D:28:99:95:A9:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB912D881E96AFBCA81349F5CF3E9D289995A954.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/3137392e34382e3232332e302f32342d3234203d3e20323638353738.roa
Signing time:             Sat 25 Jul 2026 19:04:41 +0000
ROA not before:           Sat 25 Jul 2026 18:59:41 +0000
ROA not after:            Sat 24 Jul 2027 19:04:41 +0000
asID:                     268578
IP address blocks:        179.48.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/FB912D881E96AFBCA81349F5CF3E9D289995A954.crl
                          rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/FB912D881E96AFBCA81349F5CF3E9D289995A954.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB912D881E96AFBCA81349F5CF3E9D289995A954.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 03:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:03:4a:fc:66:ed:8e:11:03:af:79:8f:6f:f9:0c:a1:39:22:71:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB912D881E96AFBCA81349F5CF3E9D289995A954
        Validity
            Not Before: Jul 25 18:59:41 2026 GMT
            Not After : Jul 24 19:04:41 2027 GMT
        Subject: CN=143A61CD993F2043E251E494E1072E7BA371A097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:c0:4c:fa:70:23:f2:d8:c1:ce:fb:b1:79:
                    8b:95:75:77:d9:cf:76:c5:52:7b:8d:e2:c9:98:14:
                    f6:f4:b2:35:a3:9f:0b:4e:67:6f:6b:c6:66:78:1e:
                    85:f2:31:1e:42:c8:24:da:80:cc:2f:07:ae:80:f0:
                    50:f8:bc:df:bb:3d:ad:2a:e6:6c:b5:66:00:3d:8a:
                    9a:bd:3d:54:30:a3:3c:63:50:40:c9:8d:0c:13:5f:
                    73:93:0b:61:a0:2a:fc:64:fe:b9:90:2a:d5:0c:c4:
                    1a:27:a9:11:1a:f5:d7:28:1e:85:50:4a:78:19:51:
                    6b:29:99:08:dd:3e:b4:bb:cc:49:51:d4:12:d4:94:
                    c7:17:da:05:8c:71:d3:16:f1:40:57:2c:8c:45:5b:
                    ea:cc:e1:6e:8e:43:20:ca:66:34:54:1b:19:51:b0:
                    82:9c:7a:8f:2c:a0:47:5f:ac:67:45:2f:31:76:4e:
                    c4:80:e8:1d:63:46:c5:3c:4c:7f:12:cd:95:73:14:
                    4c:13:e9:d6:4e:ba:72:dc:53:34:35:47:dc:a2:d6:
                    02:5a:13:c7:37:fd:71:dd:11:2f:5b:3e:a2:70:bf:
                    b1:bb:ca:2a:8c:64:f4:90:56:2d:06:e8:6c:cd:f4:
                    6b:63:87:6a:01:01:d7:36:59:5d:f5:bf:58:21:23:
                    dc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3A:61:CD:99:3F:20:43:E2:51:E4:94:E1:07:2E:7B:A3:71:A0:97
            X509v3 Authority Key Identifier:
                keyid:FB:91:2D:88:1E:96:AF:BC:A8:13:49:F5:CF:3E:9D:28:99:95:A9:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/FB912D881E96AFBCA81349F5CF3E9D289995A954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB912D881E96AFBCA81349F5CF3E9D289995A954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/3137392e34382e3232332e302f32342d3234203d3e20323638353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:0c:61:2b:f7:2e:cc:56:60:ac:5d:22:af:2b:c0:28:84:89:
         53:33:e9:23:0c:99:2f:3a:ca:13:f3:c7:c4:91:de:14:40:ce:
         ca:ec:41:7a:4b:1b:99:60:bc:f9:1f:ae:25:a0:df:cf:ad:42:
         ca:97:48:6d:eb:bd:6e:4b:43:78:2b:a7:d5:4e:e6:ca:ec:d2:
         06:f0:0f:88:f7:07:5f:8f:b3:9c:f6:7a:0b:fe:e6:3b:c4:f9:
         e3:a6:7f:fb:72:4a:ac:1a:7b:4f:70:55:dd:e6:58:b8:d2:d7:
         b9:f8:68:3f:a9:5f:b2:6b:e3:69:8b:05:0e:0b:fb:9d:10:09:
         d4:4d:72:97:71:1c:ef:d0:cd:73:1a:5a:20:ba:38:9c:d9:d4:
         3a:e6:87:a6:0a:8e:cb:e7:5c:7d:0a:8b:1b:6c:bc:c0:0c:c5:
         09:92:6c:60:8d:68:e3:d8:8d:20:61:14:a1:1d:f2:0d:f6:00:
         55:48:b5:a2:db:a9:3b:80:60:98:3e:89:5e:34:8b:6d:cd:7f:
         53:38:42:1d:b9:45:46:82:c4:9f:53:aa:2d:89:5a:74:ed:74:
         05:0e:cc:0d:4b:c0:19:d0:0f:e9:37:7a:3d:44:a6:c1:8e:b0:
         f5:37:6f:67:f5:d4:cb:17:43:9d:90:3c:8c:db:ac:03:b7:ea:
         14:66:95:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:34:04 2026 by rpki-client