Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233362e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233362e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          qhexoOqLx97fSpOjP3mEmZzrY2yDUJv1JJPDbBGhZW4=
Subject key identifier:   F9:70:5E:E0:1C:6E:10:91:B3:F3:B4:E4:2C:06:EB:9D:A4:B7:0D:E4
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       5E822549B0B64DC40BC3CEF0A64893745A741663
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233362e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 18 Mar 2026 14:00:00 +0000
ROA not before:           Wed 18 Mar 2026 13:55:00 +0000
ROA not after:            Wed 17 Mar 2027 14:00:00 +0000
asID:                     28338
IP address blocks:        189.84.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:82:25:49:b0:b6:4d:c4:0b:c3:ce:f0:a6:48:93:74:5a:74:16:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Mar 18 13:55:00 2026 GMT
            Not After : Mar 17 14:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e5:dd:ea:e2:cc:a2:a1:b1:bf:75:5b:29:64:
                    65:7a:36:fd:e8:08:3c:dd:0d:5b:de:e5:d6:65:1c:
                    c6:9a:75:d6:28:26:a4:54:de:f4:5e:00:d0:21:75:
                    fc:82:fd:e8:db:41:89:82:e5:6f:62:50:e9:43:94:
                    58:40:e4:c1:47:32:d7:b3:be:35:31:59:71:46:65:
                    25:07:ce:11:f7:72:88:92:2b:dc:d3:ec:31:ec:8a:
                    83:a8:cb:e2:0d:0f:f3:63:46:72:8d:e4:75:4f:bc:
                    81:16:ff:1e:ee:28:05:73:f6:35:7c:3f:90:15:73:
                    c7:19:6d:60:36:2b:2e:52:eb:d6:5c:39:ca:23:30:
                    c0:52:56:76:c4:53:1c:d8:d2:84:18:a6:84:46:78:
                    02:c3:df:e3:f0:23:f4:ec:cc:66:46:b8:fe:8f:15:
                    dc:ba:68:d0:c5:34:df:d8:4d:36:81:cd:88:c1:ab:
                    db:7d:ec:d8:89:a9:73:31:6e:f2:ac:a7:3f:7b:bf:
                    d8:21:ba:8b:1a:04:d9:9c:03:a7:f0:ff:d6:f8:3a:
                    a8:b7:61:07:c3:3f:e5:17:40:ac:c2:13:2e:a7:0d:
                    31:27:33:9e:84:f5:6c:6c:d1:46:9b:25:9a:dc:af:
                    24:15:40:7f:e4:07:b9:67:bb:4c:4d:c1:88:33:ce:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:70:5E:E0:1C:6E:10:91:B3:F3:B4:E4:2C:06:EB:9D:A4:B7:0D:E4
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233362e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:c7:72:3f:98:d7:b3:3c:92:6f:ca:26:c9:de:4c:5d:9e:61:
         c9:9f:0c:84:0f:45:fd:35:ce:63:dc:65:0b:e6:4a:85:e9:63:
         b1:a3:58:64:30:6f:d5:62:ed:12:85:6e:c9:f1:60:96:df:ed:
         84:bd:9d:e2:00:e0:56:27:0c:8c:25:e3:8e:59:96:d4:27:77:
         74:51:c8:a2:45:31:9a:4d:30:ba:9c:a0:2b:e6:6c:74:4b:49:
         b4:95:96:93:b3:5b:13:d9:a7:da:b7:14:ff:98:53:a9:54:dd:
         fa:cb:f8:aa:bf:e3:1e:dd:bf:13:e7:7b:ff:bc:52:1a:0e:e7:
         2d:7e:dd:2e:ca:82:53:c6:f4:0e:94:7c:42:1b:c8:ff:61:e4:
         87:b6:ad:e6:20:12:d9:ff:3e:f9:4b:30:04:85:39:86:e4:2c:
         15:71:e9:18:12:cb:7a:ee:a5:fb:00:3d:a1:34:74:25:28:9a:
         09:ed:55:3f:fb:7a:14:a9:65:d4:c6:65:50:5f:ac:61:5f:08:
         11:ae:71:28:9d:c0:db:ea:58:4f:42:14:68:3e:7f:63:77:6c:
         0e:02:67:63:74:f5:01:58:e9:fd:95:8d:7e:3a:1d:bc:f3:14:
         e3:f9:ec:ea:d5:e6:a5:30:a3:b8:cc:7d:a0:e5:8a:75:56:fc:
         d3:35:23:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:28:01 2026 by rpki-client