Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3133382e39342e362e302f32342d3234203d3e203532393031.roa
File:                     3133382e39342e362e302f32342d3234203d3e203532393031.roa (raw, json)
Hash identifier:          7dpczo0ssY40MwVb99b/wdrBjH2XNF0wzQb7erFwMoQ=
Subject key identifier:   B2:7B:08:4C:50:CF:FE:D1:78:3C:DF:95:FC:88:93:89:0C:FC:A6:3C
Certificate issuer:       /CN=E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0
Certificate serial:       5381AABC15E4782E342A4FCB8859FF88D4FD1059
Authority key identifier: E0:A6:82:53:39:F3:C5:96:9B:A4:AF:86:BA:70:BD:AF:FE:F4:D3:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3133382e39342e362e302f32342d3234203d3e203532393031.roa
Signing time:             Fri 13 Mar 2026 12:31:20 +0000
ROA not before:           Fri 13 Mar 2026 12:26:20 +0000
ROA not after:            Fri 12 Mar 2027 12:31:20 +0000
asID:                     52901
IP address blocks:        138.94.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.crl
                          rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:81:aa:bc:15:e4:78:2e:34:2a:4f:cb:88:59:ff:88:d4:fd:10:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0
        Validity
            Not Before: Mar 13 12:26:20 2026 GMT
            Not After : Mar 12 12:31:20 2027 GMT
        Subject: CN=B27B084C50CFFED1783CDF95FC8893890CFCA63C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:56:92:20:4a:04:fd:ae:12:f2:55:9f:0b:e0:
                    02:a3:0a:8b:34:f2:bb:07:6c:9f:10:30:49:3f:30:
                    ce:78:27:45:4b:b0:33:b2:2d:21:b5:a7:f7:16:ee:
                    4a:80:ed:d1:92:6c:ca:bd:27:f0:0e:2d:91:3f:9b:
                    a7:5e:40:1b:23:fa:41:1d:48:b7:96:3f:fa:03:a2:
                    e5:5f:f3:41:e4:75:38:ce:ad:fb:78:ce:83:37:ce:
                    3b:c9:e8:5a:99:fa:3a:87:dc:92:d3:b0:63:52:b3:
                    41:5e:15:17:67:1d:39:e4:d1:10:07:bb:67:ef:0b:
                    e3:4c:db:50:1c:48:f5:a1:43:d8:45:52:d2:49:71:
                    05:36:2b:9d:d8:22:02:32:42:46:28:ab:34:ae:aa:
                    57:95:e7:15:a5:75:d9:c3:cf:0f:61:6e:74:d4:16:
                    54:4a:6b:71:08:a3:49:78:31:c9:00:8f:9e:d6:2d:
                    7f:33:a3:ed:60:09:c8:05:70:7a:ef:c0:f8:0a:81:
                    9e:01:77:ed:86:6d:f1:56:29:97:30:15:ce:fa:ee:
                    ea:49:8b:1b:e8:c6:f4:e5:5b:c9:55:ad:a2:a5:3d:
                    7c:bd:79:71:05:92:ac:f6:a6:24:1c:f6:89:1c:40:
                    82:e6:5b:64:77:87:2c:75:ca:e3:e8:a6:b4:5c:20:
                    c5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7B:08:4C:50:CF:FE:D1:78:3C:DF:95:FC:88:93:89:0C:FC:A6:3C
            X509v3 Authority Key Identifier:
                keyid:E0:A6:82:53:39:F3:C5:96:9B:A4:AF:86:BA:70:BD:AF:FE:F4:D3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3133382e39342e362e302f32342d3234203d3e203532393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:97:a7:10:ab:af:1e:6c:0b:44:d4:6d:cb:a9:37:65:0f:cf:
         ee:9c:58:f8:63:d3:4f:79:d6:7e:73:84:d2:fe:ee:fa:2b:69:
         da:ed:07:54:57:72:34:10:3a:0d:38:fd:93:6f:1f:19:2a:c8:
         ea:6f:ea:29:f5:67:c5:78:65:fa:1d:f2:e1:fd:bd:54:23:99:
         7c:e9:f7:bc:23:18:6c:86:75:25:82:79:08:51:d7:f8:d4:76:
         3c:de:32:8c:10:86:39:c7:55:1d:01:17:f0:86:c6:b4:e2:d3:
         cc:34:b8:18:7b:d9:4b:aa:9b:f8:3d:5d:f0:70:22:52:a5:9a:
         ce:cf:1f:32:50:93:ce:21:ce:e8:e1:a6:33:30:6b:20:20:e5:
         8e:22:d1:75:7d:28:b1:ee:54:5e:0c:54:aa:32:5d:89:7f:43:
         60:b4:44:e4:20:85:8f:c2:99:30:14:48:51:ed:02:b8:a6:87:
         50:e1:7a:d7:e8:97:10:c5:ca:fc:0f:62:18:a4:38:d4:e6:e2:
         ad:ab:37:4b:40:e2:c5:f7:4d:e2:fc:5c:74:e1:6b:39:30:d2:
         4c:e5:b6:b4:82:47:5e:b0:bf:4b:f8:f7:77:27:fe:3b:4c:a3:
         d5:0a:37:6b:bc:9e:6f:e3:9f:dc:a0:3d:2e:aa:5f:d3:da:1e:
         f2:bf:f1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:58 2026 by rpki-client