Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137392e3132372e3132382e302f32302d3234203d3e203238313436.roa
File:                     3137392e3132372e3132382e302f32302d3234203d3e203238313436.roa (raw, json)
Hash identifier:          4ZDVwgRUnrbndoL3kwQIj+rgkVFwBM7x+08e1akiLsg=
Subject key identifier:   04:E9:3A:D5:67:68:B8:54:E3:52:08:5F:08:BD:F6:CB:58:15:44:B8
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       3703FD3EACC89742D3466E875CD23BE72F51CB24
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137392e3132372e3132382e302f32302d3234203d3e203238313436.roa
Signing time:             Mon 13 Apr 2026 13:48:37 +0000
ROA not before:           Mon 13 Apr 2026 13:43:37 +0000
ROA not after:            Mon 12 Apr 2027 13:48:37 +0000
asID:                     28146
IP address blocks:        179.127.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 05:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:03:fd:3e:ac:c8:97:42:d3:46:6e:87:5c:d2:3b:e7:2f:51:cb:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: Apr 13 13:43:37 2026 GMT
            Not After : Apr 12 13:48:37 2027 GMT
        Subject: CN=04E93AD56768B854E352085F08BDF6CB581544B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:ab:2f:f8:86:fb:33:b7:c2:03:dd:ec:03:
                    75:1b:1b:39:ac:f3:2c:3c:10:bf:fd:1e:dc:68:33:
                    18:7f:26:81:2e:76:cc:df:be:f0:a4:5f:fc:10:ee:
                    6a:6a:35:78:e9:3b:ac:d2:fd:a9:4c:f6:ee:bf:95:
                    35:84:67:d5:78:f5:eb:b2:7c:ad:47:ca:f2:6f:83:
                    fd:1f:f5:b4:2c:f3:b4:9d:fd:de:d0:fb:fe:41:90:
                    9f:90:c5:c1:90:94:0e:ef:13:ad:11:11:cf:95:53:
                    55:3e:ec:59:e5:70:5e:5b:ed:23:67:9f:20:1e:a1:
                    bf:4a:92:87:2e:56:b1:83:e3:25:80:17:7a:6c:2d:
                    dd:46:70:63:a6:d9:81:79:4c:01:ed:59:9e:50:ed:
                    1e:bd:73:ec:0a:46:ca:ea:4e:50:e8:03:42:b5:ab:
                    d1:bf:71:e2:85:91:3a:c5:89:be:b5:ca:76:fc:38:
                    4b:12:4a:5b:d6:6a:ff:fd:70:50:c4:e2:29:7f:b0:
                    2c:a9:f3:3f:02:46:7c:0b:17:1e:c6:d2:ad:4d:b7:
                    b9:18:c1:ac:ee:7c:0a:0d:38:04:eb:42:2c:46:47:
                    6a:6b:dd:36:99:75:e8:22:7e:10:bb:c3:62:4f:9b:
                    52:a9:2f:ef:8b:ed:c5:39:47:c1:e9:39:0d:fc:8b:
                    3f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E9:3A:D5:67:68:B8:54:E3:52:08:5F:08:BD:F6:CB:58:15:44:B8
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137392e3132372e3132382e302f32302d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:11:c0:d2:8b:1a:2d:51:40:8c:90:c4:20:ad:6c:20:4c:2c:
         e6:92:be:5f:24:84:17:36:a4:dc:d1:30:d1:89:f8:69:32:1e:
         97:a4:89:31:b4:ef:85:f5:2b:91:66:a6:cc:e6:8d:16:3a:b4:
         f8:d7:87:bd:09:72:41:e0:05:00:ce:4c:5b:22:19:56:a1:5c:
         31:c5:8a:23:4d:5f:8b:fa:9e:40:5c:40:c6:92:62:ac:31:3d:
         7c:dd:63:17:be:df:8b:9c:0c:0d:05:ec:02:29:4e:ea:b3:bc:
         bf:e9:d1:3f:67:ff:d2:01:24:88:52:e7:f2:47:b4:b3:4f:2e:
         43:88:cc:ed:e3:30:08:97:30:95:85:5b:bd:98:56:54:43:d6:
         99:19:df:25:21:ef:61:2f:95:66:67:57:5f:3b:e2:04:a7:df:
         3a:7c:c3:65:c9:69:dc:56:f3:25:d8:3b:51:fe:51:d2:79:47:
         93:08:a0:1a:02:2a:dd:65:02:78:3d:8a:46:46:25:71:52:3f:
         e8:ac:34:79:14:a8:d2:d1:fc:90:fe:d6:b8:9d:89:08:dd:e0:
         ff:86:eb:86:64:8f:be:09:af:76:e3:53:cd:af:ca:60:7f:dd:
         b1:d4:35:e3:66:9e:8c:28:d6:ce:46:0e:65:a5:50:01:74:f3:
         f2:a9:2f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:35:37 2026 by rpki-client