Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/3138392e35312e3136342e302f32322d3234203d3e20323730373934.roa
File:                     3138392e35312e3136342e302f32322d3234203d3e20323730373934.roa (raw, json)
Hash identifier:          o3amkP2TMVyHhEjfSwEluIXHD3lIvOKqcXzdMIQLPZQ=
Subject key identifier:   36:FD:21:7B:4D:93:F3:B5:2F:08:96:FE:77:1C:80:51:C1:68:72:85
Certificate issuer:       /CN=75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0
Certificate serial:       314FF8AE33899045DAA76811E7D98E7F2CAA9B90
Authority key identifier: 75:B7:A7:3D:35:27:0C:2B:DB:E7:ED:7C:4C:46:D5:96:FC:4C:37:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/3138392e35312e3136342e302f32322d3234203d3e20323730373934.roa
Signing time:             Mon 23 Mar 2026 12:45:26 +0000
ROA not before:           Mon 23 Mar 2026 12:40:26 +0000
ROA not after:            Mon 22 Mar 2027 12:45:26 +0000
asID:                     270794
IP address blocks:        189.51.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0.crl
                          rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4f:f8:ae:33:89:90:45:da:a7:68:11:e7:d9:8e:7f:2c:aa:9b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0
        Validity
            Not Before: Mar 23 12:40:26 2026 GMT
            Not After : Mar 22 12:45:26 2027 GMT
        Subject: CN=36FD217B4D93F3B52F0896FE771C8051C1687285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:04:3c:d4:dd:24:13:bc:dd:27:28:be:39:4e:
                    77:8d:9a:a0:23:1c:52:8b:81:9b:0b:7e:45:24:5d:
                    b1:06:6f:e7:03:a0:b4:42:a2:8f:07:42:e6:36:1d:
                    54:a4:95:cc:9b:80:3a:10:f6:c1:04:2d:88:d5:66:
                    83:84:ab:97:fe:9d:38:a4:ca:3d:0d:c7:6f:34:77:
                    9f:90:ba:12:fc:06:45:41:1e:e8:29:e3:78:4f:b0:
                    c9:ef:c6:ac:88:8e:8c:da:a5:4f:99:d9:19:ae:8f:
                    41:7a:28:88:e2:e7:16:20:0b:e6:7d:1b:8c:39:55:
                    cb:7e:41:64:ad:4f:12:25:7d:76:04:83:35:86:00:
                    0b:b2:53:98:83:09:1d:c0:fb:ab:b5:fa:dc:9e:81:
                    37:10:3b:c7:34:52:98:11:76:1c:c7:b6:e0:75:c7:
                    10:c5:5d:46:47:02:46:3a:40:d7:5e:20:ff:f7:63:
                    36:8d:f4:fd:be:d2:bd:91:95:dd:1d:9b:1a:a8:58:
                    e0:6c:8a:88:19:4e:e0:a4:df:17:6c:c4:53:80:72:
                    9a:a1:5a:92:05:60:97:d3:ea:b6:29:ce:b3:f4:1b:
                    5b:ad:fd:2e:2b:1d:30:54:09:b5:7f:9e:05:e1:d1:
                    a1:66:42:42:79:26:8d:1e:0f:ed:89:dd:31:e4:d9:
                    e7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FD:21:7B:4D:93:F3:B5:2F:08:96:FE:77:1C:80:51:C1:68:72:85
            X509v3 Authority Key Identifier:
                keyid:75:B7:A7:3D:35:27:0C:2B:DB:E7:ED:7C:4C:46:D5:96:FC:4C:37:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/3138392e35312e3136342e302f32322d3234203d3e20323730373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:c6:5c:e2:b9:ab:ff:af:15:7b:2a:10:4a:6d:8d:7b:33:06:
         67:70:b4:ab:7e:8e:08:c5:1e:fa:3a:0c:15:15:08:80:fd:bf:
         a8:e5:24:99:e3:57:70:ad:3b:45:f2:69:0b:cb:8a:4e:b7:0e:
         6f:e2:4a:40:bf:0a:00:a8:d5:1d:26:84:22:f8:40:4c:76:49:
         33:ca:ab:d6:6e:34:86:cc:50:b2:79:83:40:c6:18:14:e5:89:
         57:26:4d:4a:eb:4f:3c:f3:7b:28:94:f4:03:ea:50:e9:2e:c5:
         75:3f:07:7e:88:21:3c:5b:01:06:a8:b9:e7:cd:06:22:52:5e:
         47:8b:65:58:e4:13:b4:64:c6:bc:9c:d2:5d:44:41:be:6b:e7:
         9f:9b:05:72:7d:8d:45:97:f6:00:b3:0d:e0:f2:e4:78:16:e6:
         f7:96:03:9b:6a:d5:5e:1a:77:04:05:fa:24:a0:27:83:e6:f4:
         51:61:01:d6:bd:e8:a6:37:eb:57:fc:88:3f:a3:64:40:c7:08:
         3f:58:a4:0d:96:e8:2e:b8:be:cb:f5:71:06:df:9d:24:f2:56:
         80:4b:da:23:27:a0:dd:d3:4b:08:75:7b:75:9c:84:a2:aa:9c:
         2a:2a:3b:07:21:cd:61:f2:02:4b:e0:cf:ee:0b:8a:13:f4:69:
         fb:5e:6e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:27:46 2026 by rpki-client