Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/3138372e31362e3132382e302f32302d3234203d3e203238323534.roa
File:                     3138372e31362e3132382e302f32302d3234203d3e203238323534.roa (raw, json)
Hash identifier:          9hNQiJtkj008G0pyERgU71WusAzcbtsNnsvr5ryvASg=
Subject key identifier:   B5:78:35:6B:B7:3C:59:99:CA:CC:85:C1:1E:C3:62:BC:3B:78:C3:03
Certificate issuer:       /CN=9151E1075CB8CA7782315512A362C4E53B9BDB13
Certificate serial:       0788A39FBB10DD519702D6682BA95B05E1A47A98
Authority key identifier: 91:51:E1:07:5C:B8:CA:77:82:31:55:12:A3:62:C4:E5:3B:9B:DB:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9151E1075CB8CA7782315512A362C4E53B9BDB13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/3138372e31362e3132382e302f32302d3234203d3e203238323534.roa
Signing time:             Thu 19 Mar 2026 20:06:27 +0000
ROA not before:           Thu 19 Mar 2026 20:01:27 +0000
ROA not after:            Thu 18 Mar 2027 20:06:27 +0000
asID:                     28254
IP address blocks:        187.16.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/9151E1075CB8CA7782315512A362C4E53B9BDB13.crl
                          rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/9151E1075CB8CA7782315512A362C4E53B9BDB13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9151E1075CB8CA7782315512A362C4E53B9BDB13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:88:a3:9f:bb:10:dd:51:97:02:d6:68:2b:a9:5b:05:e1:a4:7a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9151E1075CB8CA7782315512A362C4E53B9BDB13
        Validity
            Not Before: Mar 19 20:01:27 2026 GMT
            Not After : Mar 18 20:06:27 2027 GMT
        Subject: CN=B578356BB73C5999CACC85C11EC362BC3B78C303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:11:29:2b:f3:bf:3f:4d:a8:bd:04:5d:73:
                    e9:75:b9:4a:97:49:17:a7:66:22:43:da:ce:2b:1f:
                    d7:b5:be:3b:75:a6:47:dc:03:e5:3d:3e:3c:ad:7c:
                    20:79:1d:05:02:4c:b1:8a:52:19:d6:93:2c:e7:e2:
                    27:50:1b:a6:5c:46:18:86:52:25:ee:ae:3b:15:25:
                    70:49:c9:7c:cd:c2:05:c4:58:d2:02:45:65:ac:ab:
                    e8:6a:6e:b6:f2:11:15:5d:4a:3c:37:07:11:46:f6:
                    af:18:fc:2b:c1:be:d6:2e:b4:38:4f:0b:7b:62:db:
                    5f:90:90:5a:e4:fc:53:d7:48:d2:18:f0:2c:28:87:
                    d2:4a:1e:a6:d7:2d:60:2a:0a:ad:df:a9:1c:16:49:
                    0f:30:4c:9c:3d:cb:05:ff:60:56:ca:d7:94:cb:e3:
                    00:8b:cc:8b:b9:25:73:26:26:ac:01:90:8b:32:b9:
                    ec:cc:fb:94:6d:ac:3b:32:4e:b9:31:2a:64:07:49:
                    86:5f:33:f3:3b:e2:55:de:24:64:81:1c:f7:8a:b4:
                    7a:e5:f0:c9:31:eb:76:e1:5d:63:70:9d:40:a1:be:
                    9b:b1:51:7c:c5:33:90:9c:3e:01:a0:2f:d7:0a:49:
                    51:27:00:07:00:02:e9:11:e8:55:e0:12:cd:10:04:
                    a1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:78:35:6B:B7:3C:59:99:CA:CC:85:C1:1E:C3:62:BC:3B:78:C3:03
            X509v3 Authority Key Identifier:
                keyid:91:51:E1:07:5C:B8:CA:77:82:31:55:12:A3:62:C4:E5:3B:9B:DB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/9151E1075CB8CA7782315512A362C4E53B9BDB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9151E1075CB8CA7782315512A362C4E53B9BDB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/3138372e31362e3132382e302f32302d3234203d3e203238323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0a:9a:da:7c:77:a1:f7:75:8b:f5:e8:b1:48:29:ff:3c:7d:99:
         4b:ca:65:c3:b8:c3:48:80:4e:3f:9d:07:fd:14:51:08:8d:d1:
         fe:7c:ec:81:18:55:80:7f:9a:de:5d:77:8e:2d:3f:19:64:24:
         2c:04:75:e9:75:11:7d:4e:aa:67:d2:85:1c:54:ea:69:2d:e6:
         92:ae:42:eb:a7:57:5e:25:f1:7e:56:41:d3:c8:73:97:5f:9d:
         5d:14:84:18:a0:3a:8b:2a:74:7f:54:e2:e8:91:de:76:5f:9a:
         fd:22:b3:24:bf:f7:6f:27:5d:b8:14:20:ef:b1:1b:e3:b5:18:
         65:21:5e:b1:cd:f1:6e:df:05:de:da:82:d7:21:e7:c5:da:9f:
         6d:66:b1:93:a6:f0:d6:d0:8f:5a:c2:3c:7d:13:d0:1e:dc:61:
         b6:97:08:e6:d0:0a:6e:63:4a:98:b9:2b:17:9e:fd:3a:97:a7:
         af:2f:2a:bd:ec:64:eb:d8:b4:47:eb:4d:b1:39:32:12:54:bc:
         92:44:4f:f4:c3:70:4e:09:f7:e0:b9:0f:dc:2b:76:ce:38:eb:
         db:df:b2:df:ed:88:06:ef:79:78:a7:39:0e:25:e5:7b:74:05:
         1f:2a:83:83:6e:e9:b9:29:f7:ee:04:1a:db:b8:d4:87:8c:59:
         d5:11:61:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:16:40 2026 by rpki-client