Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3134302e302f32322d3232203d3e203533313237.roa
File:                     3138372e3131302e3134302e302f32322d3232203d3e203533313237.roa (raw, json)
Hash identifier:          t243zkk7Qbx/nWnWJwNbWwgJt2AmGyZZudu/rifKbb4=
Subject key identifier:   2C:84:41:5A:18:72:FB:2F:BD:0C:CA:8B:EC:CC:10:95:D5:5B:4B:64
Certificate issuer:       /CN=5FC32B7879FE9033D1C514ACD7EA5EF1929FC407
Certificate serial:       52D7522A2855197AFE6AC2E8303BE6EF9C084D4B
Authority key identifier: 5F:C3:2B:78:79:FE:90:33:D1:C5:14:AC:D7:EA:5E:F1:92:9F:C4:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3134302e302f32322d3232203d3e203533313237.roa
Signing time:             Thu 16 Jul 2026 14:50:09 +0000
ROA not before:           Thu 16 Jul 2026 14:45:09 +0000
ROA not after:            Thu 15 Jul 2027 14:50:09 +0000
asID:                     53127
IP address blocks:        187.110.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.crl
                          rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d7:52:2a:28:55:19:7a:fe:6a:c2:e8:30:3b:e6:ef:9c:08:4d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC32B7879FE9033D1C514ACD7EA5EF1929FC407
        Validity
            Not Before: Jul 16 14:45:09 2026 GMT
            Not After : Jul 15 14:50:09 2027 GMT
        Subject: CN=2C84415A1872FB2FBD0CCA8BECCC1095D55B4B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:35:f7:84:b8:7f:b9:a0:fd:ce:09:ea:4c:
                    1f:22:95:0b:90:65:f2:a9:41:fd:6e:d3:f7:43:03:
                    7e:9a:37:16:8d:14:c2:6b:5a:f2:87:1f:ae:31:0e:
                    31:b2:2b:f0:ae:3d:5c:1d:3f:0d:2d:ad:2d:d8:b3:
                    bf:ae:35:ed:51:bb:6b:95:0d:6e:36:c6:e8:5e:be:
                    7f:4f:51:63:db:86:c6:c7:84:44:d4:f0:2b:f0:d4:
                    10:35:03:df:b1:ed:87:ca:35:1c:78:9c:42:be:f7:
                    e1:93:48:f5:26:65:5e:69:91:6f:eb:70:c9:c4:7f:
                    f5:6c:a5:90:48:ee:51:d0:49:84:3f:a5:c1:4b:00:
                    d4:62:15:d4:f6:2c:eb:81:cd:c1:2b:68:28:e3:38:
                    72:b6:59:f4:e0:9c:e4:b0:64:0f:27:da:1d:bd:3a:
                    f3:a2:31:5f:a8:46:18:68:bd:b0:93:26:21:c0:bb:
                    8b:f9:65:8b:7f:01:e2:dc:3a:43:70:6a:b6:66:b3:
                    c2:05:b5:0c:4b:7b:76:3b:a1:a4:4b:5a:74:64:64:
                    90:aa:00:80:44:13:ff:45:f2:07:d5:96:ab:2a:55:
                    6c:03:16:30:ab:3d:12:af:ca:45:1c:9c:79:04:66:
                    79:bc:63:35:f1:8b:df:35:5f:bf:c4:2b:37:a8:51:
                    fb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:84:41:5A:18:72:FB:2F:BD:0C:CA:8B:EC:CC:10:95:D5:5B:4B:64
            X509v3 Authority Key Identifier:
                keyid:5F:C3:2B:78:79:FE:90:33:D1:C5:14:AC:D7:EA:5E:F1:92:9F:C4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3134302e302f32322d3232203d3e203533313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:74:d7:52:dd:d8:f1:69:ee:65:13:c8:98:32:bd:65:ef:8c:
         45:a2:85:1a:29:f1:1f:36:00:8b:47:77:1b:2a:c9:89:5d:99:
         12:3f:28:b3:a5:37:a6:5b:2f:fd:47:83:05:7f:b6:c6:6c:96:
         39:ac:7b:91:22:3a:89:b0:b7:f1:d3:3d:35:2a:4f:37:6a:2d:
         d2:ac:ec:fe:79:98:9b:e8:61:bf:24:f1:4d:2c:b8:1c:d5:e5:
         9e:d3:d1:c8:8b:ae:ab:83:85:8b:93:b0:12:f4:85:a5:14:ae:
         9b:c6:0e:92:da:b3:fc:23:0d:dc:78:32:3c:d4:1d:61:31:ea:
         3d:8d:b7:66:9e:f0:5d:c0:e1:1b:e1:d6:0d:60:bd:19:4f:1c:
         62:a1:56:34:e4:29:b0:50:ba:22:ce:75:35:28:e7:88:61:d8:
         06:0c:62:0b:95:e4:4e:4b:bb:fe:48:55:e0:39:53:24:dc:46:
         b1:e0:5d:75:77:cd:c3:06:23:61:58:c6:ba:1e:43:28:4d:ab:
         bf:03:f5:47:ad:e9:16:28:5d:e7:56:a9:62:36:ed:91:b6:ff:
         65:fa:d8:d9:ac:c3:5c:74:64:1b:8c:ca:b1:f9:6b:b4:e8:d2:
         f0:37:9d:ad:bc:9b:9e:29:92:bd:45:75:8d:29:be:51:7b:b1:
         b7:6b:60:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:36:16 2026 by rpki-client