Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/3138362e3233352e3234302e302f32312d3332203d3e20323633313033.roa
File:                     3138362e3233352e3234302e302f32312d3332203d3e20323633313033.roa (raw, json)
Hash identifier:          bQOz3WgIDv4OPTt7+prrnkPzxtho3i94XKKAj6p4PKo=
Subject key identifier:   9B:B7:15:1B:1C:42:B4:DD:AC:E1:39:1F:49:8E:5A:99:D1:57:F6:BB
Certificate issuer:       /CN=D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC
Certificate serial:       1DD6C8D7A32B4137525C865A5BACF1F281AE3BF7
Authority key identifier: D9:B9:AF:36:48:E9:F7:4A:03:FC:E4:9A:2C:7E:18:7F:34:0B:54:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/3138362e3233352e3234302e302f32312d3332203d3e20323633313033.roa
Signing time:             Thu 19 Mar 2026 19:02:11 +0000
ROA not before:           Thu 19 Mar 2026 18:57:11 +0000
ROA not after:            Thu 18 Mar 2027 19:02:11 +0000
asID:                     263103
IP address blocks:        186.235.240.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.crl
                          rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d6:c8:d7:a3:2b:41:37:52:5c:86:5a:5b:ac:f1:f2:81:ae:3b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC
        Validity
            Not Before: Mar 19 18:57:11 2026 GMT
            Not After : Mar 18 19:02:11 2027 GMT
        Subject: CN=9BB7151B1C42B4DDACE1391F498E5A99D157F6BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3c:f4:b0:a9:e5:70:47:17:52:88:a0:8f:e5:
                    c0:e4:09:9a:46:60:59:7c:f7:28:a6:d4:1a:60:26:
                    dd:fa:63:13:50:ac:1e:72:dd:79:53:4f:ba:00:7e:
                    7c:bb:c9:db:50:b0:43:b4:02:ef:b6:a0:61:7c:b2:
                    e7:25:e8:d0:68:64:a5:0a:9c:a0:4e:df:22:80:42:
                    2c:9a:ec:fd:24:be:23:09:b0:d3:5f:6f:58:e2:56:
                    37:b3:ab:44:b5:07:ff:74:5a:64:dd:03:48:05:bc:
                    87:38:c0:30:0c:b1:1a:3e:3c:6b:8f:04:f0:08:68:
                    09:cd:b2:ff:3d:d5:e6:7e:79:45:c4:87:43:f0:e1:
                    d3:7d:1b:4f:78:55:d6:6e:8c:0f:fd:68:2f:18:28:
                    b1:09:1d:32:b4:6c:bf:f7:29:2e:5d:34:d8:76:76:
                    20:23:c3:04:44:5a:15:d2:50:36:ad:ba:03:39:78:
                    8f:74:ac:33:bf:b5:72:7c:43:90:5c:2d:cd:9a:c6:
                    1f:d6:ba:70:ab:0e:f9:2e:76:90:56:e0:a3:f7:3c:
                    5d:c5:a2:9d:f5:23:c4:74:89:42:70:64:c7:4e:f8:
                    e4:47:51:dd:82:bd:05:68:72:dc:0a:ff:12:c7:5c:
                    c1:e4:bb:63:5f:da:30:68:65:e3:86:96:f7:ed:99:
                    43:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B7:15:1B:1C:42:B4:DD:AC:E1:39:1F:49:8E:5A:99:D1:57:F6:BB
            X509v3 Authority Key Identifier:
                keyid:D9:B9:AF:36:48:E9:F7:4A:03:FC:E4:9A:2C:7E:18:7F:34:0B:54:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/3138362e3233352e3234302e302f32312d3332203d3e20323633313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:71:cf:25:0f:be:c4:b8:a5:55:cc:55:7d:71:76:9e:53:5d:
         fc:25:d1:36:1b:6f:8e:bf:10:09:85:05:70:20:4f:41:c6:6d:
         5f:50:5e:ad:cd:d9:db:1c:ad:1f:a7:c3:fa:9b:fb:19:b2:19:
         10:80:83:f5:a5:cb:16:31:ac:44:24:e4:fd:cf:0f:a5:fb:77:
         65:a6:e5:7e:80:38:9c:34:62:47:a8:f6:86:6d:e4:be:92:5c:
         83:01:d1:ba:ef:57:6c:e4:9e:53:3c:03:6a:ba:09:da:ab:81:
         fa:d5:18:98:ea:ac:2d:de:af:81:c6:21:32:93:f8:42:11:e6:
         a1:d6:27:d8:e2:ac:1a:a0:90:d5:ee:b7:4e:7d:b0:76:06:b3:
         36:c9:73:4a:8a:34:a6:2c:2e:98:95:61:dd:58:19:ea:64:88:
         99:af:34:0c:8f:11:01:d3:e2:35:eb:28:3e:ba:df:30:91:81:
         b5:ed:e4:5d:78:ab:d1:62:52:07:91:51:17:55:77:dc:b2:ef:
         85:a0:8c:f3:b6:2a:19:1d:dd:82:df:c8:52:53:67:ff:77:62:
         6d:8e:a5:ce:a3:4a:0a:3d:06:42:49:a9:64:c9:a8:2a:d5:64:
         55:73:24:ad:0d:7f:22:a1:aa:7d:c6:70:2a:af:7b:88:6b:05:
         b0:d3:b7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:00:19 2026 by rpki-client