Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa
File:                     3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (raw, json)
Hash identifier:          87KSQKhyOaz4BUhIfdPsHtVz1luy0xMKpTqPd6HwZV8=
Subject key identifier:   2D:CC:B8:AE:7F:3B:FB:46:CB:69:72:A3:9D:43:3C:6B:EC:F9:6E:3A
Certificate issuer:       /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2
Certificate serial:       6C3FE6A43A4D5BEB2186E3570B03C0CB8FC65F46
Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa
Signing time:             Wed 18 Mar 2026 20:24:10 +0000
ROA not before:           Wed 18 Mar 2026 20:19:10 +0000
ROA not after:            Wed 17 Mar 2027 20:24:10 +0000
asID:                     265264
IP address blocks:        187.95.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl
                          rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 11:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3f:e6:a4:3a:4d:5b:eb:21:86:e3:57:0b:03:c0:cb:8f:c6:5f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2
        Validity
            Not Before: Mar 18 20:19:10 2026 GMT
            Not After : Mar 17 20:24:10 2027 GMT
        Subject: CN=2DCCB8AE7F3BFB46CB6972A39D433C6BECF96E3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:27:a4:28:9e:14:66:6a:55:7c:dd:8d:a9:a8:
                    e3:4c:74:ff:21:4f:65:76:60:1a:0b:76:00:92:ae:
                    6c:b2:fe:5b:db:d7:e7:e7:b4:af:98:64:c2:c7:71:
                    97:20:2b:e8:d6:c8:7c:23:2f:c1:7c:c6:7d:ee:a3:
                    e4:33:1b:8d:2d:00:0f:3f:5e:09:6d:ec:b2:f3:04:
                    05:db:dd:40:50:5f:b6:31:28:ca:77:34:06:84:82:
                    a7:31:ad:fc:9a:42:d5:e1:48:f7:50:76:06:2a:72:
                    0f:74:4f:b0:86:37:48:c5:8f:a3:71:99:a7:e8:8a:
                    c0:d9:28:ef:82:a2:39:e8:a4:22:4c:e7:16:0f:0e:
                    97:a1:34:98:d1:3d:91:21:bc:95:f9:40:16:18:74:
                    8b:8a:59:89:b5:fa:56:a3:1e:35:bb:fa:0e:d4:44:
                    26:3e:d3:90:d2:a9:c5:12:5c:c3:df:26:4f:05:d9:
                    3a:f4:24:df:4c:42:8e:74:8c:aa:47:21:d8:ab:f5:
                    cd:f0:65:2c:20:83:95:b0:10:18:81:21:f0:c3:d0:
                    87:e2:cb:08:9c:d3:e7:c9:5c:0b:4a:63:ed:6e:21:
                    5c:1e:1d:ea:66:1c:0d:82:e6:69:3b:9a:60:23:a1:
                    8f:c2:f5:19:6d:91:d7:bb:26:43:7d:8c:db:e9:cb:
                    8d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CC:B8:AE:7F:3B:FB:46:CB:69:72:A3:9D:43:3C:6B:EC:F9:6E:3A
            X509v3 Authority Key Identifier:
                keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:7e:32:19:0b:db:e9:cc:af:c8:b6:25:14:4d:60:23:26:8a:
         82:79:70:3f:78:39:be:58:7e:66:ba:11:91:f1:fd:de:8f:64:
         19:ea:ca:06:b1:85:a7:b7:cb:5f:19:93:df:9d:19:4c:1f:a0:
         15:e0:e4:e2:53:52:47:63:33:b3:67:00:d9:e3:5d:d7:4f:52:
         d0:44:60:8f:a5:c5:c9:49:44:f9:61:90:88:8b:fb:d9:a6:22:
         d1:09:6d:d5:8d:0a:9c:e1:aa:ca:a8:b7:fa:26:de:16:c0:e3:
         0c:ff:65:45:9c:4f:d6:c6:f5:8f:0e:fe:35:d3:af:e5:02:2d:
         59:0b:5b:ce:63:29:9f:9c:a7:68:39:2b:fb:71:d0:78:d3:2f:
         5a:26:cc:1e:a6:b1:1b:45:94:f2:64:e1:dd:5f:54:e1:66:fc:
         9d:cf:c9:83:ca:c8:5d:74:c7:ee:a4:a9:81:1b:0e:4f:8b:88:
         d7:d6:8c:d0:65:06:50:59:56:7e:a4:c4:fa:c6:4b:c2:b1:06:
         5f:e1:c3:b1:48:6b:a1:f6:b2:46:ea:0f:be:27:05:1a:50:d7:
         4a:92:f3:fa:de:21:3c:ad:06:1c:93:d2:c8:a3:4f:bb:70:25:
         6d:fc:cc:43:27:a1:61:29:7c:9e:3c:0f:76:cb:55:4c:64:d2:
         cd:45:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:05:57 2026 by rpki-client