Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3138392e35312e34302e302f32332d3332203d3e20323730373235.roa
File:                     3138392e35312e34302e302f32332d3332203d3e20323730373235.roa (raw, json)
Hash identifier:          mRoJxlUfwEBjFf9wX960FoxB74HITXgomDbH50/+HOk=
Subject key identifier:   C8:25:E2:4A:61:C5:D5:7F:1F:68:3A:4B:9A:A3:7B:28:FE:C1:D2:DB
Certificate issuer:       /CN=3A643A755DDC15D6F86DC11230B9F76A2774D614
Certificate serial:       12A720F4B4BE4EAD3C12EE05DD5FD99651D176EF
Authority key identifier: 3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3138392e35312e34302e302f32332d3332203d3e20323730373235.roa
Signing time:             Wed 29 Apr 2026 14:00:01 +0000
ROA not before:           Wed 29 Apr 2026 13:55:01 +0000
ROA not after:            Wed 28 Apr 2027 14:00:01 +0000
asID:                     270725
IP address blocks:        189.51.40.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl
                          rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a7:20:f4:b4:be:4e:ad:3c:12:ee:05:dd:5f:d9:96:51:d1:76:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A643A755DDC15D6F86DC11230B9F76A2774D614
        Validity
            Not Before: Apr 29 13:55:01 2026 GMT
            Not After : Apr 28 14:00:01 2027 GMT
        Subject: CN=C825E24A61C5D57F1F683A4B9AA37B28FEC1D2DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1c:fd:49:2a:61:fb:b0:ad:ff:20:28:97:e8:
                    5a:1f:3c:64:42:38:1d:29:63:a5:b2:58:22:be:fc:
                    dd:19:c0:73:42:4d:74:b9:9a:36:f0:12:14:4e:81:
                    a5:fb:7f:05:b3:66:87:ea:6e:60:6f:98:46:24:75:
                    05:96:fc:c0:ad:66:8c:89:66:92:d4:b5:b2:2b:da:
                    8b:ec:8e:11:2d:77:a7:c4:99:88:6a:16:66:2c:cd:
                    07:45:70:2b:e8:c2:4a:21:68:75:c2:90:74:bc:4e:
                    5e:3a:0a:d8:b1:f0:7d:e5:e8:71:7b:a7:c2:98:31:
                    f0:2f:3c:65:32:f8:5f:2c:d6:47:7a:07:30:ad:f6:
                    aa:6b:11:f3:fe:6e:5d:45:f6:16:ce:c1:31:44:8a:
                    28:9d:09:4f:fa:b2:fc:67:de:6a:f2:6c:fd:ff:66:
                    cb:ac:09:95:1e:18:92:10:dc:ba:e7:aa:7d:d4:4d:
                    61:0f:b3:1e:32:72:ee:09:e8:9f:62:58:42:26:c1:
                    59:a7:89:b4:bc:0f:42:fb:d4:cc:e2:2f:ea:53:7a:
                    db:89:ab:7c:ab:f6:4c:1e:cb:a0:8d:cc:07:e4:aa:
                    dd:c9:f0:fa:5d:b7:07:20:d5:24:a5:fd:de:05:96:
                    59:fd:ba:0d:62:c9:a1:39:0c:0f:e0:3a:7d:4d:0b:
                    4c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:25:E2:4A:61:C5:D5:7F:1F:68:3A:4B:9A:A3:7B:28:FE:C1:D2:DB
            X509v3 Authority Key Identifier:
                keyid:3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3138392e35312e34302e302f32332d3332203d3e20323730373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:17:61:df:17:1e:e4:58:09:8f:f8:88:0c:c0:d2:b5:e1:f1:
         84:1f:66:14:8c:2f:ba:e8:7b:00:da:b5:1c:2d:42:b1:a4:53:
         1f:f5:28:81:bd:34:23:ba:f5:dc:4c:24:ce:d3:e3:1f:8a:6f:
         38:dd:f0:92:7a:53:82:39:90:a4:03:69:e5:18:fe:62:eb:67:
         6f:7c:ff:fc:d0:f8:a4:39:cc:9d:43:7e:99:67:b6:eb:13:a7:
         cb:09:27:bd:c5:9a:5e:47:aa:16:c6:83:13:35:ff:60:37:b1:
         91:e0:37:71:c4:f5:34:bd:5c:09:86:d6:73:a3:66:ef:23:61:
         d4:8c:cb:b6:71:4b:69:35:bc:1c:ca:97:78:70:ff:a8:fc:97:
         21:5a:fd:24:c5:8e:8a:c2:33:9d:46:e6:57:dd:69:f6:57:05:
         24:0b:56:f2:57:53:2d:41:7d:46:d3:46:2f:55:fa:d5:f6:bf:
         d4:2b:40:a4:9b:b8:46:13:d3:fd:e6:64:d3:40:3b:2a:89:80:
         fb:a1:d1:c4:0e:f2:08:90:d2:6b:da:46:98:c8:17:6c:23:ab:
         7f:fb:b4:33:8e:5a:31:d9:ef:09:39:f9:b1:d9:40:66:96:be:
         cd:fc:65:c7:6a:dc:64:76:e1:ed:64:df:87:59:5a:bb:af:1c:
         fa:cc:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:56:58 2026 by rpki-client