Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137392e3139312e33362e302f32322d3234203d3e203238313436.roa
File:                     3137392e3139312e33362e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          J6Nauqo/7PmJeTJY44pfH3gF1WA6Dzby1KnEUAyISpA=
Subject key identifier:   34:DD:E4:27:95:82:B3:6A:6B:6C:C7:5B:23:88:BA:07:AC:18:39:2E
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       556E8BEB8426BFC4485798D573D2603CF9342256
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137392e3139312e33362e302f32322d3234203d3e203238313436.roa
Signing time:             Mon 13 Apr 2026 13:48:35 +0000
ROA not before:           Mon 13 Apr 2026 13:43:35 +0000
ROA not after:            Mon 12 Apr 2027 13:48:35 +0000
asID:                     28146
IP address blocks:        179.191.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 05:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6e:8b:eb:84:26:bf:c4:48:57:98:d5:73:d2:60:3c:f9:34:22:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: Apr 13 13:43:35 2026 GMT
            Not After : Apr 12 13:48:35 2027 GMT
        Subject: CN=34DDE4279582B36A6B6CC75B2388BA07AC18392E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:69:01:6f:3c:fb:25:e2:68:55:2d:6a:19:
                    6f:05:2c:ef:d3:13:39:79:48:bc:08:ca:5c:2a:f1:
                    9c:3d:08:15:f2:39:38:bc:9d:58:12:fb:f7:8c:00:
                    5c:6a:0c:aa:82:5e:50:65:ec:b7:31:50:ed:25:79:
                    0b:92:d4:8a:51:c9:2d:87:3f:f2:8c:54:55:11:cf:
                    04:8b:f1:97:19:7a:0a:ca:cb:66:25:f9:35:9d:5a:
                    29:f6:84:5c:78:19:e8:b2:de:64:5a:43:d9:3b:d2:
                    27:86:a6:45:d1:57:a8:74:62:b8:83:ad:ad:b6:d8:
                    c1:1e:f1:73:f6:c5:eb:fd:8a:cd:ab:07:d1:94:df:
                    fa:26:99:ac:0e:a4:ba:f0:05:b1:de:8f:f9:95:75:
                    4a:5b:ef:8b:fa:3e:b6:f3:60:ab:19:d1:83:bd:03:
                    74:ae:bc:39:2a:b0:08:91:88:c6:e3:d5:88:b7:39:
                    2e:a8:cc:dc:fd:5b:f2:4d:9d:70:91:06:b8:13:f5:
                    6e:6e:79:d4:98:de:3a:01:ee:5c:e1:81:55:a2:87:
                    da:5e:71:1f:cb:43:84:f8:47:a3:99:8c:58:dc:5c:
                    86:64:d2:1d:cd:59:e7:64:82:d8:db:7b:51:44:25:
                    f5:52:fd:26:4a:24:bb:3d:5d:3b:87:e1:7d:7e:20:
                    5a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DD:E4:27:95:82:B3:6A:6B:6C:C7:5B:23:88:BA:07:AC:18:39:2E
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137392e3139312e33362e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:0e:31:88:f2:e3:e6:98:dc:bf:ca:f8:12:36:41:a6:60:6e:
         e8:5f:86:2a:82:8b:f9:ef:59:7e:c2:31:e1:ee:26:4c:20:b7:
         b8:8d:99:c5:2d:77:fb:7d:f9:79:e9:c5:bc:cc:09:d3:f2:99:
         6a:76:91:5a:a1:17:e3:82:fa:ee:15:73:0f:f2:db:f0:3b:f2:
         7d:58:c6:18:30:df:de:82:e1:24:d8:06:3c:80:65:16:c7:02:
         31:b1:1a:7d:8b:7d:b1:11:52:01:0e:25:de:8b:55:9c:8d:1d:
         35:20:d0:cf:6f:51:e7:98:0d:27:ab:1a:e1:d8:41:46:ef:29:
         ff:d0:a5:ca:ef:87:ae:a3:97:39:8f:fe:d2:7a:3d:34:d0:9e:
         47:26:a4:2a:a8:36:9b:b6:0a:ab:3a:e8:b6:8f:35:6d:d3:87:
         c4:31:3f:98:99:8f:58:6b:68:17:78:d3:8b:c6:79:68:38:f8:
         82:fa:76:5f:0f:89:58:af:10:6c:d4:be:34:5e:b9:9b:46:45:
         8e:8e:a5:71:1a:c1:75:be:3a:59:dd:fb:a2:43:3d:cf:c2:c1:
         83:84:bf:e2:6e:d2:4d:40:cf:09:98:b6:ac:c1:95:bf:a3:89:
         3b:93:24:b2:51:f8:1e:cd:4f:cb:0a:11:1b:3d:eb:ef:0c:f1:
         42:84:80:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:35:54 2026 by rpki-client