Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CA84aVXiKZSTswffYCnuREPoCtZFCsaqJ3Fc6QqyFzV3/0/3137392e36332e3130342e302f32322d3332203d3e20323731353436.roa
File:                     3137392e36332e3130342e302f32322d3332203d3e20323731353436.roa (raw, json)
Hash identifier:          kZ2nyXe2EmhqqAvWa/hk8hgNQKNHt/6oKVpx4SXt9HE=
Subject key identifier:   80:CC:01:01:69:EA:05:E9:65:A3:E5:97:68:C9:2E:9A:4A:7B:D4:94
Certificate issuer:       /CN=E4325B03CA2BE25316784765CE5068ED63977A36
Certificate serial:       608B01880453F87C3AD846D1312CF8996BEB1E90
Authority key identifier: E4:32:5B:03:CA:2B:E2:53:16:78:47:65:CE:50:68:ED:63:97:7A:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4325B03CA2BE25316784765CE5068ED63977A36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CA84aVXiKZSTswffYCnuREPoCtZFCsaqJ3Fc6QqyFzV3/0/3137392e36332e3130342e302f32322d3332203d3e20323731353436.roa
Signing time:             Fri 10 Apr 2026 22:34:20 +0000
ROA not before:           Fri 10 Apr 2026 22:29:20 +0000
ROA not after:            Fri 09 Apr 2027 22:34:20 +0000
asID:                     271546
IP address blocks:        179.63.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CA84aVXiKZSTswffYCnuREPoCtZFCsaqJ3Fc6QqyFzV3/0/E4325B03CA2BE25316784765CE5068ED63977A36.crl
                          rsync://rpki-repo.registro.br/repo/CA84aVXiKZSTswffYCnuREPoCtZFCsaqJ3Fc6QqyFzV3/0/E4325B03CA2BE25316784765CE5068ED63977A36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4325B03CA2BE25316784765CE5068ED63977A36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 22:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8b:01:88:04:53:f8:7c:3a:d8:46:d1:31:2c:f8:99:6b:eb:1e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4325B03CA2BE25316784765CE5068ED63977A36
        Validity
            Not Before: Apr 10 22:29:20 2026 GMT
            Not After : Apr  9 22:34:20 2027 GMT
        Subject: CN=80CC010169EA05E965A3E59768C92E9A4A7BD494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:c4:83:9c:66:de:72:cd:49:bd:15:56:f7:
                    be:b8:1a:d8:fd:55:64:85:3b:f3:4d:60:3a:a3:80:
                    42:2f:0f:0a:e6:25:e2:a6:2a:60:9c:85:46:66:6b:
                    74:bd:06:77:cd:b7:86:a7:27:50:05:f6:ff:8c:b1:
                    4d:34:05:82:2e:a1:44:2a:d7:06:2a:4b:2b:d9:11:
                    f0:68:6a:5c:9f:be:85:4c:04:dd:ec:44:10:e3:61:
                    49:9e:06:ef:64:f0:ac:31:b3:58:e1:c8:33:e1:7a:
                    cf:1b:10:4a:68:37:61:e0:9e:b7:35:7d:cc:ed:3b:
                    1d:c3:39:27:16:9b:97:7c:86:ef:aa:cd:d0:e8:0f:
                    e8:6c:7b:d9:ba:7d:14:d2:07:f1:f0:e3:14:e4:ab:
                    47:96:9f:fb:84:bf:d6:27:86:13:3c:76:60:d7:c9:
                    08:6a:39:0e:6b:f7:86:4e:64:2f:73:33:54:dc:4e:
                    42:4e:3c:53:ce:cb:2d:f4:74:f5:fe:51:9d:cc:c1:
                    72:f6:48:7b:69:c6:03:15:df:b2:aa:2b:89:f4:9c:
                    48:65:6a:29:de:29:0f:3a:a6:a5:87:95:14:38:89:
                    9e:73:8f:fc:91:23:d1:78:74:e3:c6:7d:cc:18:d3:
                    45:ca:a5:ee:4a:ea:d0:61:46:14:1d:c9:db:4c:29:
                    93:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CC:01:01:69:EA:05:E9:65:A3:E5:97:68:C9:2E:9A:4A:7B:D4:94
            X509v3 Authority Key Identifier:
                keyid:E4:32:5B:03:CA:2B:E2:53:16:78:47:65:CE:50:68:ED:63:97:7A:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CA84aVXiKZSTswffYCnuREPoCtZFCsaqJ3Fc6QqyFzV3/0/E4325B03CA2BE25316784765CE5068ED63977A36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4325B03CA2BE25316784765CE5068ED63977A36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CA84aVXiKZSTswffYCnuREPoCtZFCsaqJ3Fc6QqyFzV3/0/3137392e36332e3130342e302f32322d3332203d3e20323731353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:76:32:09:cd:9e:03:44:95:cc:88:78:3a:1f:38:ce:fb:c9:
         d4:e1:88:a6:b7:7a:03:11:54:8d:7a:17:ca:65:05:8f:66:e2:
         e9:68:a8:ec:43:2f:92:39:65:a8:d7:69:74:07:92:f4:0a:a9:
         44:3e:9a:33:5a:51:2f:e3:80:14:be:93:b2:67:87:a3:fb:22:
         6a:a9:20:3f:79:ec:75:ec:ce:0b:74:ce:4c:f5:0f:2f:0f:78:
         5e:d7:71:5e:4b:38:00:d6:bc:75:87:ae:d0:1a:91:1e:02:e1:
         04:f9:78:59:91:6a:d1:e1:dc:56:3e:67:6a:57:46:4f:68:28:
         ed:3b:b9:e7:19:bc:53:3b:25:50:94:d7:92:2b:da:a5:79:ab:
         25:fc:ee:9c:d2:fc:a8:e1:2c:eb:3c:0a:b0:b3:94:8a:33:68:
         ad:1d:81:9e:80:7c:f6:b1:14:ba:40:9a:9b:8b:01:b1:96:1d:
         d5:80:ae:00:13:2f:31:10:f0:f8:ee:60:e4:ca:14:33:71:b9:
         b8:67:98:06:a6:d7:2d:79:30:35:65:36:49:94:ec:f0:b5:f2:
         72:76:23:0b:54:88:64:3a:94:e4:82:c2:84:7c:f3:75:23:96:
         ec:b0:d3:cf:80:90:6b:96:3d:18:71:4c:4e:f7:44:90:0a:ac:
         96:52:66:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:31:17 2026 by rpki-client