Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3132382e302f32322d3232203d3e203533313237.roa
File:                     3138372e3131302e3132382e302f32322d3232203d3e203533313237.roa (raw, json)
Hash identifier:          vO+sn5rwiMs+Hjm4FzfUr6EomY+hz0C7BsGx6tvqkJw=
Subject key identifier:   0B:64:F4:B5:DC:8F:53:02:A8:B2:55:3A:55:F3:66:2E:EA:29:15:16
Certificate issuer:       /CN=5FC32B7879FE9033D1C514ACD7EA5EF1929FC407
Certificate serial:       3E59993C742A4EFA37DDEF970AEFAAD289235D4A
Authority key identifier: 5F:C3:2B:78:79:FE:90:33:D1:C5:14:AC:D7:EA:5E:F1:92:9F:C4:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3132382e302f32322d3232203d3e203533313237.roa
Signing time:             Thu 16 Jul 2026 14:50:10 +0000
ROA not before:           Thu 16 Jul 2026 14:45:10 +0000
ROA not after:            Thu 15 Jul 2027 14:50:10 +0000
asID:                     53127
IP address blocks:        187.110.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.crl
                          rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:59:99:3c:74:2a:4e:fa:37:dd:ef:97:0a:ef:aa:d2:89:23:5d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC32B7879FE9033D1C514ACD7EA5EF1929FC407
        Validity
            Not Before: Jul 16 14:45:10 2026 GMT
            Not After : Jul 15 14:50:10 2027 GMT
        Subject: CN=0B64F4B5DC8F5302A8B2553A55F3662EEA291516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:09:c7:de:3d:b0:71:04:f1:73:cb:2c:e0:64:
                    44:a0:3f:a9:f0:6f:be:a8:53:0c:a0:e6:93:87:7a:
                    bd:bf:ce:34:ea:af:b2:9f:31:86:bf:4d:5b:9a:be:
                    f3:6c:3d:9e:6c:a9:4d:ae:41:64:9f:7a:48:74:8e:
                    56:34:48:fb:16:cb:3b:1d:de:0f:14:97:a0:ff:07:
                    ec:a5:0e:7e:5b:10:c3:04:03:0a:9e:c9:13:eb:31:
                    12:66:85:de:2f:a0:b9:0b:04:49:42:ba:b4:a3:7c:
                    3a:5e:0b:a7:a5:26:cc:80:ab:05:a6:90:14:d1:72:
                    00:49:7e:db:97:c2:f2:0f:a5:d4:74:31:8d:87:59:
                    73:27:a7:d2:c9:59:3b:33:57:7e:8e:fb:c3:0d:fa:
                    f3:9d:aa:ac:c9:bb:e8:a9:f3:47:e4:4e:43:db:5a:
                    aa:97:bd:94:85:80:ea:da:2c:62:81:a7:42:61:91:
                    c5:e9:11:97:3c:00:8c:fd:0d:c7:03:77:30:9c:e2:
                    3b:ba:7e:e5:e4:0e:f6:48:f5:30:d3:8c:56:7a:d5:
                    be:70:85:36:59:43:21:22:ab:45:64:bc:dc:89:86:
                    d2:0d:29:1f:5b:1b:03:85:44:4a:e2:23:d7:a3:0e:
                    01:b9:3e:5c:2e:f6:9c:75:fc:27:3d:a4:a3:a7:88:
                    79:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:64:F4:B5:DC:8F:53:02:A8:B2:55:3A:55:F3:66:2E:EA:29:15:16
            X509v3 Authority Key Identifier:
                keyid:5F:C3:2B:78:79:FE:90:33:D1:C5:14:AC:D7:EA:5E:F1:92:9F:C4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3132382e302f32322d3232203d3e203533313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:63:0e:69:f8:12:f6:d9:87:7f:2d:a6:f2:fd:90:fa:4e:f4:
         c9:ea:80:40:6e:4d:c2:53:ca:bd:8b:56:c0:e7:a2:44:39:9e:
         ee:12:0a:60:d4:29:be:d6:f3:84:6e:2b:06:63:99:33:13:3f:
         72:95:48:a1:cb:7d:9e:bc:fc:01:e3:73:80:3a:17:91:a5:32:
         54:f9:d9:4e:89:a8:91:94:ad:96:f8:d6:e9:10:ea:73:a2:df:
         b9:f8:7b:5c:bb:c4:b2:d3:c9:c6:04:be:f9:cd:23:9f:bb:de:
         d9:36:1c:79:3a:ea:a7:0a:0b:a5:5c:fa:e4:38:1e:fd:ce:fa:
         df:ac:8f:38:49:48:5a:4c:3b:cf:72:78:fb:88:6f:7e:43:83:
         e5:fd:69:35:1e:b2:aa:7f:6f:7f:38:d9:72:70:2d:23:c3:21:
         d0:e5:99:28:57:dd:30:2b:20:70:74:6a:27:9b:bd:37:02:8c:
         8e:b8:bb:a2:dc:d3:79:7e:5c:ad:91:48:9f:1a:9f:6a:67:22:
         e7:25:31:b7:52:69:85:bc:5f:69:72:ad:10:d3:fc:40:67:27:
         4e:7c:cc:84:e2:03:ad:28:dd:f2:04:64:46:b8:7c:67:25:13:
         07:b6:22:71:74:81:c6:ca:fb:44:ad:70:dc:30:04:af:10:eb:
         8d:23:16:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:36:20 2026 by rpki-client