Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/3137392e3132352e31352e302f32342d3234203d3e20323731373337.roa
File:                     3137392e3132352e31352e302f32342d3234203d3e20323731373337.roa (raw, json)
Hash identifier:          uR97X2ADKH4fz3uCUyHWZWSFYQX29ITAKW2FlFPESck=
Subject key identifier:   BB:28:90:9F:F1:81:08:D8:CE:EE:76:BE:14:66:C6:03:38:7F:83:1E
Certificate issuer:       /CN=92BA065C85B5C2643E0FD27F0C42051FDB399AC5
Certificate serial:       413AA7B600808058380915060092487558D736E5
Authority key identifier: 92:BA:06:5C:85:B5:C2:64:3E:0F:D2:7F:0C:42:05:1F:DB:39:9A:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/3137392e3132352e31352e302f32342d3234203d3e20323731373337.roa
Signing time:             Fri 17 Apr 2026 12:27:59 +0000
ROA not before:           Fri 17 Apr 2026 12:22:59 +0000
ROA not after:            Fri 16 Apr 2027 12:27:59 +0000
asID:                     271737
IP address blocks:        179.125.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.crl
                          rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 16:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3a:a7:b6:00:80:80:58:38:09:15:06:00:92:48:75:58:d7:36:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BA065C85B5C2643E0FD27F0C42051FDB399AC5
        Validity
            Not Before: Apr 17 12:22:59 2026 GMT
            Not After : Apr 16 12:27:59 2027 GMT
        Subject: CN=BB28909FF18108D8CEEE76BE1466C603387F831E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:de:51:64:b1:12:b4:51:9f:97:de:01:0c:
                    8e:f7:a5:0b:63:53:78:1c:30:0e:f2:8a:3c:49:79:
                    da:31:d8:67:20:07:80:24:cb:a4:8e:55:b0:0a:4e:
                    a2:c0:32:38:e4:67:e1:e6:54:72:1a:63:ca:a8:cf:
                    8c:b4:ee:8b:6c:01:bf:86:07:b9:57:4c:9b:1e:dc:
                    ef:d2:18:c1:26:50:d2:26:23:99:c4:da:27:ca:dd:
                    f8:6d:af:b4:e0:ac:7f:90:cb:97:52:f7:43:e3:18:
                    f8:47:3a:f9:42:66:4c:1d:6e:6b:84:b6:45:72:61:
                    de:e2:5b:22:91:82:28:38:d1:88:f7:13:cd:49:b7:
                    88:d8:63:20:f7:22:b3:a3:5d:51:d2:b9:4b:2f:62:
                    c3:c7:9e:89:85:81:bc:ee:7d:9c:68:0e:aa:e3:38:
                    8a:e7:dd:3b:7c:02:9a:85:ed:c6:43:e7:2c:d4:32:
                    b4:a1:27:05:34:e1:5f:20:be:b0:8a:3e:65:74:d2:
                    46:b9:76:9c:18:7b:6a:2b:eb:03:b0:68:68:b0:06:
                    ba:92:8d:46:9e:7e:50:64:60:79:f3:58:39:2a:8b:
                    e5:f8:e8:b3:4d:80:cf:7c:2f:c1:03:9f:e0:22:e5:
                    ac:6c:85:50:a3:f4:95:c1:aa:7b:e5:3a:76:c7:b9:
                    31:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:28:90:9F:F1:81:08:D8:CE:EE:76:BE:14:66:C6:03:38:7F:83:1E
            X509v3 Authority Key Identifier:
                keyid:92:BA:06:5C:85:B5:C2:64:3E:0F:D2:7F:0C:42:05:1F:DB:39:9A:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/3137392e3132352e31352e302f32342d3234203d3e20323731373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:6f:22:87:d8:a1:d9:4c:1f:88:34:e2:8b:5e:a0:ce:8c:f5:
         c2:ae:ec:e9:47:a9:e0:f6:2a:77:31:6c:49:4f:27:7e:b9:f3:
         ee:df:94:6c:1f:44:69:9f:e9:e2:52:be:c4:72:ef:58:2e:8e:
         b4:70:6e:00:47:01:c9:9d:bb:58:fd:97:4c:e4:44:20:94:57:
         b8:9d:64:52:48:b9:5c:c0:33:3f:1d:dd:d1:c1:f0:1a:f7:56:
         82:ab:77:48:5a:cc:aa:86:e1:77:a7:7d:f2:5d:67:ad:2b:44:
         5e:c3:72:49:f5:29:e1:cd:6c:a5:ab:b5:db:35:67:e0:72:bb:
         88:cb:ed:2f:36:df:89:5b:87:f5:5a:c8:d3:98:5b:61:8a:91:
         72:73:65:44:bd:f5:ff:fa:52:5f:12:bf:e3:50:ec:0a:88:d2:
         41:b7:a2:3e:9b:b0:c2:09:ab:e7:f5:11:aa:df:4f:49:ae:04:
         2e:db:e2:2e:cd:8c:ee:2a:15:8d:d7:2c:97:8f:e9:fd:b8:92:
         35:de:3c:a5:81:0a:ba:27:f9:e3:52:93:23:ed:42:24:15:35:
         02:b8:4e:bd:0b:ca:18:c2:de:e8:a7:48:dc:a7:42:ba:83:80:
         78:46:10:33:f4:f2:24:2f:80:bd:03:b2:b9:82:ba:06:9f:35:
         50:f5:28:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:37:18 2026 by rpki-client