Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3w1tTRMEYDVXYzzJ2TxQR7Nb6xCqjH4SYseZDmgYK2MM/0/3138372e38372e3135322e302f32322d3234203d3e20323735363332.roa
File:                     3138372e38372e3135322e302f32322d3234203d3e20323735363332.roa (raw, json)
Hash identifier:          I6WvyKvYD54ydr3YpauLOIULG0P5zzi2I9hvdHjj/1g=
Subject key identifier:   C7:50:30:D8:D7:C3:5D:64:C4:F3:CF:D5:26:56:ED:6B:DE:D3:76:A5
Certificate issuer:       /CN=FCE6D39F7B6BFFD350DE533049962A9AB4C2B7B9
Certificate serial:       6DAD8810A6337AD3477D616C312A23F2E17A7988
Authority key identifier: FC:E6:D3:9F:7B:6B:FF:D3:50:DE:53:30:49:96:2A:9A:B4:C2:B7:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE6D39F7B6BFFD350DE533049962A9AB4C2B7B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3w1tTRMEYDVXYzzJ2TxQR7Nb6xCqjH4SYseZDmgYK2MM/0/3138372e38372e3135322e302f32322d3234203d3e20323735363332.roa
Signing time:             Thu 23 Jul 2026 14:50:47 +0000
ROA not before:           Thu 23 Jul 2026 14:45:47 +0000
ROA not after:            Thu 22 Jul 2027 14:50:47 +0000
asID:                     275632
IP address blocks:        187.87.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3w1tTRMEYDVXYzzJ2TxQR7Nb6xCqjH4SYseZDmgYK2MM/0/FCE6D39F7B6BFFD350DE533049962A9AB4C2B7B9.crl
                          rsync://rpki-repo.registro.br/repo/3w1tTRMEYDVXYzzJ2TxQR7Nb6xCqjH4SYseZDmgYK2MM/0/FCE6D39F7B6BFFD350DE533049962A9AB4C2B7B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE6D39F7B6BFFD350DE533049962A9AB4C2B7B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 16:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ad:88:10:a6:33:7a:d3:47:7d:61:6c:31:2a:23:f2:e1:7a:79:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE6D39F7B6BFFD350DE533049962A9AB4C2B7B9
        Validity
            Not Before: Jul 23 14:45:47 2026 GMT
            Not After : Jul 22 14:50:47 2027 GMT
        Subject: CN=C75030D8D7C35D64C4F3CFD52656ED6BDED376A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:52:33:f0:47:11:9b:7b:1f:99:6a:63:31:bb:
                    a9:d3:ce:d6:ff:9a:11:b5:9c:e5:f0:35:21:72:d3:
                    2a:4b:f9:eb:d1:e7:26:42:4d:39:57:9f:fd:74:34:
                    8b:25:cb:b2:ac:1e:f0:e7:15:3e:25:5f:37:22:eb:
                    2e:b7:97:19:0b:c4:d2:2b:2d:b1:a0:f1:4a:d4:12:
                    36:be:f1:f7:61:89:96:2b:06:86:47:00:fc:6f:86:
                    e1:ab:5e:61:66:44:23:b0:8d:47:2e:68:41:e4:9a:
                    3f:e3:97:49:93:2c:76:e6:d7:78:89:91:e8:63:d7:
                    22:6a:fb:ad:ca:bc:d5:82:da:53:02:a6:9f:6b:d1:
                    a9:51:d7:7b:e3:07:b0:5f:a9:40:69:92:fb:59:5d:
                    d1:66:b0:1a:49:01:77:d4:77:12:6a:bc:21:37:28:
                    f6:b8:81:b7:0d:16:b6:2e:f9:67:46:71:81:01:85:
                    dd:22:db:84:59:a2:eb:37:a8:fc:b3:91:34:40:da:
                    99:54:d6:0f:ab:99:68:b6:7c:7f:70:e9:42:0b:dd:
                    20:79:6c:4b:f0:60:6f:91:30:f6:55:07:97:d9:b7:
                    7c:7f:53:53:f1:7d:e5:af:2f:dd:b9:89:e0:97:69:
                    25:ce:14:b1:72:a7:ba:98:95:5b:da:1c:c1:8a:36:
                    4c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:50:30:D8:D7:C3:5D:64:C4:F3:CF:D5:26:56:ED:6B:DE:D3:76:A5
            X509v3 Authority Key Identifier:
                keyid:FC:E6:D3:9F:7B:6B:FF:D3:50:DE:53:30:49:96:2A:9A:B4:C2:B7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3w1tTRMEYDVXYzzJ2TxQR7Nb6xCqjH4SYseZDmgYK2MM/0/FCE6D39F7B6BFFD350DE533049962A9AB4C2B7B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE6D39F7B6BFFD350DE533049962A9AB4C2B7B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3w1tTRMEYDVXYzzJ2TxQR7Nb6xCqjH4SYseZDmgYK2MM/0/3138372e38372e3135322e302f32322d3234203d3e20323735363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:d3:04:4a:ea:be:c1:5b:c7:0f:e2:8a:a6:0b:3b:5e:a4:68:
         3c:b6:f6:3c:ac:f6:45:d7:e8:45:b0:61:4c:04:41:19:f3:19:
         7f:e0:aa:30:8d:bd:5e:d4:91:0a:31:e6:7c:dd:41:cf:72:25:
         0f:57:e4:bc:d5:bc:c0:21:93:74:f7:67:4b:4e:d5:c2:14:3f:
         07:a2:cc:82:a1:38:1c:b7:a1:a0:4b:7e:7c:48:af:83:4d:6f:
         a7:51:0f:e7:ba:ef:4a:19:8b:ac:ea:f6:e9:a1:73:11:d1:6b:
         2b:9b:7d:18:b4:51:ac:18:ae:7f:28:a8:08:04:ca:09:99:e3:
         19:c9:86:f5:03:cf:8e:0d:60:a9:50:30:4e:5a:51:84:1c:60:
         d3:36:8b:df:4d:49:1e:82:89:57:3b:b5:dc:22:be:0e:4e:11:
         21:5d:8f:36:97:32:17:44:06:1e:ac:6c:d6:42:63:c7:14:d2:
         4a:54:f2:08:9a:f7:a1:69:f1:99:22:66:17:23:4d:9a:4c:02:
         03:98:e7:e5:33:e5:cf:3b:77:6b:b0:5e:6f:83:a2:b7:d6:7c:
         9b:c4:6b:1d:7a:fc:26:17:60:d4:6b:eb:14:77:53:35:1a:db:
         5f:db:b8:8a:59:67:74:7d:ca:e5:c5:b4:d0:33:cd:cc:17:b7:
         74:9e:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:34:37 2026 by rpki-client