Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137392e3132372e3232342e302f32302d3234203d3e20323632363838.roa
File:                     3137392e3132372e3232342e302f32302d3234203d3e20323632363838.roa (raw, json)
Hash identifier:          zlSq6HI4gpnHvlW3w8uMi320xwTcitKV3gqLr2C2ly0=
Subject key identifier:   51:1F:8E:CD:57:E3:9A:A7:B2:00:07:E1:DB:8A:D6:7F:74:03:7B:00
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       03255AE386871C8A4CB1BBA979FAB0366D486924
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137392e3132372e3232342e302f32302d3234203d3e20323632363838.roa
Signing time:             Mon 13 Apr 2026 13:48:37 +0000
ROA not before:           Mon 13 Apr 2026 13:43:37 +0000
ROA not after:            Mon 12 Apr 2027 13:48:37 +0000
asID:                     262688
IP address blocks:        179.127.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 01:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:25:5a:e3:86:87:1c:8a:4c:b1:bb:a9:79:fa:b0:36:6d:48:69:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: Apr 13 13:43:37 2026 GMT
            Not After : Apr 12 13:48:37 2027 GMT
        Subject: CN=511F8ECD57E39AA7B20007E1DB8AD67F74037B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:48:b7:10:b4:82:a0:1a:fe:5b:eb:3d:39:22:
                    01:a8:c6:86:9d:ad:38:f0:f1:eb:f6:ca:27:f3:ec:
                    11:e1:09:62:c4:f9:4d:33:a0:d3:75:d4:6a:22:8d:
                    84:a4:95:22:56:8d:56:9a:62:71:1c:c9:50:8a:e9:
                    72:56:dc:ac:2e:79:e4:d3:23:21:52:85:ca:be:ad:
                    78:0c:35:5f:6f:ab:12:0f:d6:36:17:58:f6:a6:f0:
                    f3:7a:38:43:08:d6:f1:98:00:18:5e:2b:23:5c:58:
                    3e:7c:76:c6:2a:09:f5:03:ed:fa:be:36:16:a3:c6:
                    23:da:d1:95:e8:f2:71:01:1f:1e:4c:bf:b7:e2:8a:
                    99:8a:22:1d:b9:0d:32:a2:cc:93:0f:bf:85:91:39:
                    ac:c5:ed:fd:a3:01:54:70:4e:14:6e:f4:48:cf:ba:
                    f2:9b:ee:87:71:81:59:16:01:15:12:50:17:fe:47:
                    6c:7c:b6:cd:c9:df:f6:fd:65:19:86:53:95:4f:50:
                    fe:b7:0c:73:6c:36:c1:92:46:c5:28:99:e0:ed:d0:
                    92:73:c8:20:13:2d:27:d0:5a:5b:e7:fb:04:c5:c4:
                    3a:ae:62:1a:53:10:70:a7:3c:06:69:39:d7:20:19:
                    6c:33:f7:af:5e:8a:43:50:53:e0:75:3c:c7:be:4c:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1F:8E:CD:57:E3:9A:A7:B2:00:07:E1:DB:8A:D6:7F:74:03:7B:00
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137392e3132372e3232342e302f32302d3234203d3e20323632363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:3a:cd:f7:b1:f3:9b:ba:8e:8e:9f:0b:af:12:60:07:29:e6:
         4b:de:a4:45:6b:6c:3f:20:42:a6:9c:ef:fd:7c:7b:0c:97:ac:
         9c:6f:30:7a:ff:04:e0:f2:d1:70:30:29:0e:bc:e8:3f:8c:57:
         e9:f4:41:38:b2:cd:95:93:c4:71:2f:b3:28:af:ef:28:59:a7:
         ea:8e:be:ba:ac:59:ed:8c:20:34:b9:90:c0:32:0d:57:18:bc:
         b3:55:4f:53:a4:dc:95:db:7e:6a:c3:14:d7:da:03:0c:e0:65:
         e8:06:7a:52:18:27:55:c2:fd:b2:ec:2c:9b:ae:7f:f0:ae:a7:
         fa:26:5a:de:e9:00:52:bd:25:80:51:e5:45:e7:3a:cd:c6:1a:
         0f:d5:e9:8e:7e:d7:73:7f:c5:95:ad:a2:e0:eb:0c:fd:9e:9d:
         9f:a5:61:e6:85:e3:c3:2c:1e:25:49:bb:34:ea:19:11:ed:1c:
         4f:3c:b0:4c:91:13:85:b6:e3:5f:6b:05:48:35:81:d8:b9:73:
         f3:5e:7e:e9:57:86:52:4a:f4:24:b1:c2:64:f4:08:5b:cb:cd:
         43:ca:24:1c:43:37:00:4a:28:ac:3b:0b:6a:35:13:30:d6:56:
         11:6b:ba:4c:96:d7:0a:6d:96:7d:e2:73:03:ba:0e:b2:ab:fd:
         bf:8e:b3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:07:13 2026 by rpki-client