Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/3138392e3132362e31312e302f32342d3234203d3e20323730333938.roa
File:                     3138392e3132362e31312e302f32342d3234203d3e20323730333938.roa (raw, json)
Hash identifier:          LYo/XmJ5yd9A52WBoNa/TSMEtUk66cdo5nupKLmmCPs=
Subject key identifier:   09:B0:7A:4F:05:2C:26:9C:39:6A:88:99:C8:00:74:E0:07:59:B9:26
Certificate issuer:       /CN=0B87152C81608FF3E967A3FEF41277E924CC8816
Certificate serial:       5FBAA0F64DE7F3EE587F31BBE2A776CC2ADF6517
Authority key identifier: 0B:87:15:2C:81:60:8F:F3:E9:67:A3:FE:F4:12:77:E9:24:CC:88:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B87152C81608FF3E967A3FEF41277E924CC8816.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/3138392e3132362e31312e302f32342d3234203d3e20323730333938.roa
Signing time:             Wed 29 Apr 2026 12:22:35 +0000
ROA not before:           Wed 29 Apr 2026 12:17:35 +0000
ROA not after:            Wed 28 Apr 2027 12:22:35 +0000
asID:                     270398
IP address blocks:        189.126.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/0B87152C81608FF3E967A3FEF41277E924CC8816.crl
                          rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/0B87152C81608FF3E967A3FEF41277E924CC8816.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B87152C81608FF3E967A3FEF41277E924CC8816.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 08:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ba:a0:f6:4d:e7:f3:ee:58:7f:31:bb:e2:a7:76:cc:2a:df:65:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B87152C81608FF3E967A3FEF41277E924CC8816
        Validity
            Not Before: Apr 29 12:17:35 2026 GMT
            Not After : Apr 28 12:22:35 2027 GMT
        Subject: CN=09B07A4F052C269C396A8899C80074E00759B926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:44:95:26:c5:89:2e:41:83:a4:3b:b8:c4:1d:
                    5a:7b:b8:52:68:69:b9:5f:73:0c:04:11:c6:6a:ea:
                    bc:ce:80:70:8e:06:4a:bc:3d:0c:ae:b4:8c:e2:ad:
                    69:a5:ee:03:22:6e:fb:9f:4a:c1:ec:ac:80:76:9d:
                    a5:2e:42:88:67:c1:94:e4:56:bc:ee:eb:86:71:3d:
                    0a:94:82:75:23:f7:c9:01:3b:41:37:5e:36:1e:95:
                    88:13:69:74:43:5b:3a:94:15:43:b6:6a:40:e8:3c:
                    6c:73:90:95:53:a4:62:a0:97:84:b3:81:42:09:ff:
                    d8:67:ff:a8:20:ca:6e:ab:96:43:3a:74:76:4b:83:
                    e3:7a:d2:e9:61:db:65:73:30:fb:30:35:63:32:8d:
                    99:99:85:7c:52:5f:a1:0d:99:9f:7e:08:d2:24:56:
                    ce:6e:d7:92:86:57:9e:fa:39:a8:bf:0d:d2:f0:e8:
                    c7:46:68:6b:57:1d:fe:66:0c:ff:a3:21:8d:74:26:
                    62:6b:f8:7b:0a:1d:27:28:ae:bb:e3:00:25:a0:bc:
                    24:e2:28:b8:d7:1c:84:6b:c9:6c:76:b1:c7:1d:b6:
                    b9:0f:ab:e4:15:c3:23:d6:e0:01:0e:44:5d:1a:50:
                    f3:92:f0:5b:00:2d:9a:4d:2b:26:dc:94:02:82:de:
                    8d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B0:7A:4F:05:2C:26:9C:39:6A:88:99:C8:00:74:E0:07:59:B9:26
            X509v3 Authority Key Identifier:
                keyid:0B:87:15:2C:81:60:8F:F3:E9:67:A3:FE:F4:12:77:E9:24:CC:88:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/0B87152C81608FF3E967A3FEF41277E924CC8816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B87152C81608FF3E967A3FEF41277E924CC8816.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/3138392e3132362e31312e302f32342d3234203d3e20323730333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:c4:ee:d2:21:7c:ba:29:21:4f:ee:94:3e:5a:ca:45:2f:6a:
         32:1f:7e:1d:c7:c5:6b:da:1e:be:b2:5b:86:84:18:1c:3c:90:
         70:7c:e1:44:73:4d:54:53:fb:a7:83:68:2a:39:6d:4c:69:84:
         b2:56:12:a5:6d:3d:87:1b:44:5a:73:d9:b9:c3:c6:fc:05:4b:
         df:4e:f6:bd:8a:22:a8:73:e1:66:23:ab:6b:07:75:42:64:c5:
         51:9d:cb:ed:bc:94:64:64:4d:8b:93:42:82:d0:e5:2e:bf:c2:
         da:70:1a:5c:dd:cc:7e:90:fb:6f:3f:6d:33:29:d6:96:fc:59:
         5c:d6:c1:4a:48:45:58:15:6c:fd:d1:70:40:0a:d2:87:0a:9f:
         08:69:d6:03:94:00:59:92:54:43:b9:b1:90:8e:ff:b3:d9:7b:
         ae:59:d6:12:55:3b:c0:32:4c:ac:a8:dd:8e:da:71:cc:ed:06:
         57:e7:ee:1e:f4:be:f4:21:45:34:93:91:c6:92:0a:79:a3:a7:
         ed:9f:e0:79:b4:a2:43:4e:aa:89:6a:6f:9d:67:17:00:0e:01:
         cd:d0:da:6f:31:b8:17:b8:5a:0f:ea:ae:6e:6d:2d:cd:da:e9:
         86:02:c0:23:c9:b0:81:c8:8a:a1:aa:c1:64:15:18:3d:59:11:
         59:25:b7:86
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX7qg9k3n8+5YfzG74qd2zCrfZRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI4NzE1MkM4MTYwOEZGM0U5NjdBM0ZFRjQxMjc3RTky
NENDODgxNjAeFw0yNjA0MjkxMjE3MzVaFw0yNzA0MjgxMjIyMzVaMDMxMTAvBgNV
BAMTKDA5QjA3QTRGMDUyQzI2OUMzOTZBODg5OUM4MDA3NEUwMDc1OUI5MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRJUmxYkuQYOkO7jEHVp7uFJo
ablfcwwEEcZq6rzOgHCOBkq8PQyutIzirWml7gMibvufSsHsrIB2naUuQohnwZTk
Vrzu64ZxPQqUgnUj98kBO0E3XjYelYgTaXRDWzqUFUO2akDoPGxzkJVTpGKgl4Sz
gUIJ/9hn/6ggym6rlkM6dHZLg+N60ulh22VzMPswNWMyjZmZhXxSX6ENmZ9+CNIk
Vs5u15KGV576Oai/DdLw6MdGaGtXHf5mDP+jIY10JmJr+HsKHScorrvjACWgvCTi
KLjXHIRryWx2sccdtrkPq+QVwyPW4AEORF0aUPOS8FsALZpNKybclAKC3o2DAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCbB6TwUsJpw5aoiZyAB04AdZuSYwHwYDVR0j
BBgwFoAUC4cVLIFgj/PpZ6P+9BJ36STMiBYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTg3dHE0cXQ1djdtSmJyRW5jN0s4dlpvQkVuUTliamtEQmh0emZOcU1l
c3MvMS8wQjg3MTUyQzgxNjA4RkYzRTk2N0EzRkVGNDEyNzdFOTI0Q0M4ODE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCODcxNTJDODE2MDhGRjNF
OTY3QTNGRUY0MTI3N0U5MjRDQzg4MTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU4N3RxNHF0NXY3bUpickVuYzdLOHZab0JFblE5YmprREJodHpmTnFNZXNzLzEv
MzEzODM5MmUzMTMyMzYyZTMxMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzMzM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9fgswDQYJKoZIhvcNAQELBQADggEBAGTE7tIh
fLopIU/ulD5aykUvajIffh3HxWvaHr6yW4aEGBw8kHB84URzTVRT+6eDaCo5bUxp
hLJWEqVtPYcbRFpz2bnDxvwFS99O9r2KIqhz4WYjq2sHdUJkxVGdy+28lGRkTYuT
QoLQ5S6/wtpwGlzdzH6Q+28/bTMp1pb8WVzWwUpIRVgVbP3RcEAK0ocKnwhp1gOU
AFmSVEO5sZCO/7PZe65Z1hJVO8AyTKyo3Y7accztBlfn7h70vvQhRTSTkcaSCnmj
p+2f4Hm0okNOqolqb51nFwAOAc3Q2m8xuBe4Wg/qrm5tLc3a6YYCwCPJsIHIiqGq
wWQVGD1ZEVklt4Y=
-----END CERTIFICATE-----
Generated at Wed May 13 19:39:17 2026 by rpki-client