Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/3138372e3130332e3135302e302f32342d3234203d3e203533313031.roa
File:                     3138372e3130332e3135302e302f32342d3234203d3e203533313031.roa (raw, json)
Hash identifier:          AMrCjFZNvwSrLPwKOOwSWCG51gRH2/BKVOiFSLnDlkY=
Subject key identifier:   A7:31:6F:02:C8:F4:86:A8:0E:6B:24:EB:FA:E7:42:50:5F:FE:EA:B1
Certificate issuer:       /CN=C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE
Certificate serial:       1CB75641D9A3393682DE0C172D09C3E2086A31DA
Authority key identifier: C5:3D:9E:6D:AA:8E:F4:A0:CD:81:4E:2F:7A:8E:FA:82:FD:65:63:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/3138372e3130332e3135302e302f32342d3234203d3e203533313031.roa
Signing time:             Fri 18 Sep 2026 12:52:26 +0000
ROA not before:           Fri 18 Sep 2026 12:47:26 +0000
ROA not after:            Fri 17 Sep 2027 12:52:26 +0000
asID:                     53101
IP address blocks:        187.103.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.crl
                          rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 16:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b7:56:41:d9:a3:39:36:82:de:0c:17:2d:09:c3:e2:08:6a:31:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE
        Validity
            Not Before: Sep 18 12:47:26 2026 GMT
            Not After : Sep 17 12:52:26 2027 GMT
        Subject: CN=A7316F02C8F486A80E6B24EBFAE742505FFEEAB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:97:d6:21:b4:35:7d:ea:6b:a3:ab:c4:96:3b:
                    8a:66:dd:8d:d1:f5:cb:17:62:a5:d0:0c:8b:1a:6c:
                    27:f9:62:45:04:ef:72:7d:ea:87:0a:d4:fe:df:40:
                    3b:cd:d3:66:7b:73:c9:30:cb:f1:b4:02:6f:b0:55:
                    7d:a4:76:83:b2:a8:e8:eb:aa:01:36:88:34:5a:02:
                    a4:47:43:bf:66:a7:8b:56:ba:62:9b:99:42:38:86:
                    96:d4:62:5c:52:75:d9:e8:85:84:a1:1c:36:44:2d:
                    4c:f2:be:f7:f7:0b:08:00:34:d6:73:f3:6b:a4:1e:
                    61:41:20:a7:1d:85:a4:0f:6f:fd:9a:55:c2:97:08:
                    a9:fd:60:20:8d:5c:17:18:79:ab:b9:4b:b6:95:d4:
                    cb:18:42:19:6d:21:57:4d:17:aa:8f:3e:5b:9b:60:
                    8a:1b:c2:3f:cd:b4:0a:18:0e:48:8e:14:8a:8f:53:
                    44:0e:66:2c:03:d0:b8:62:b3:bc:85:4d:6c:02:32:
                    4f:26:cc:cd:da:a6:74:56:6a:3e:ce:41:5d:33:5f:
                    e3:47:eb:2e:89:97:02:e1:86:27:47:8f:12:49:82:
                    e3:55:bf:db:84:28:47:53:83:03:7d:3f:04:f8:9f:
                    76:c3:3e:18:7d:df:c6:dd:ec:7b:ee:d8:4d:86:95:
                    e8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:31:6F:02:C8:F4:86:A8:0E:6B:24:EB:FA:E7:42:50:5F:FE:EA:B1
            X509v3 Authority Key Identifier:
                keyid:C5:3D:9E:6D:AA:8E:F4:A0:CD:81:4E:2F:7A:8E:FA:82:FD:65:63:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/3138372e3130332e3135302e302f32342d3234203d3e203533313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:39:99:4d:a8:6f:f2:5f:ee:00:9b:35:1a:7f:a1:bb:c0:33:
         fe:f9:5b:bc:f4:77:0b:4d:14:dc:5d:d6:05:2f:c9:3a:25:15:
         a5:12:4d:8c:ef:52:f0:f5:79:38:cc:c3:ed:ed:50:d8:72:b0:
         ff:8a:71:7d:89:32:06:d5:50:a9:d6:09:09:61:e7:99:ae:5d:
         a3:28:76:7f:a7:ec:4b:ba:03:56:04:b5:ec:b4:ba:53:e8:d7:
         0a:9e:68:d0:79:11:dd:d2:9d:1b:0d:ba:5e:6e:5a:91:fa:d2:
         25:06:aa:b1:30:7f:04:90:5a:e3:6a:2a:58:e7:ff:a0:83:1b:
         db:09:94:d3:2f:e7:9a:38:d1:3e:a5:42:40:39:4e:a3:f3:ed:
         e0:4e:e5:73:3d:88:18:e0:ec:75:65:99:db:c8:00:46:80:0b:
         3e:5d:36:ba:06:e4:1e:97:05:20:c6:fe:12:e0:18:2f:8f:2f:
         8d:58:59:e8:08:fa:2c:f2:bd:9c:fb:5b:98:5d:92:ba:00:01:
         bd:57:e2:3e:58:f4:01:41:e6:ba:93:6b:ed:e6:cc:8a:e7:c0:
         35:34:4e:ef:55:96:11:93:c9:1a:f1:e2:eb:21:a9:b0:f3:da:
         6f:2f:4c:cc:7d:24:ec:32:6b:33:bd:e8:fd:e6:8b:0a:b4:b4:
         fb:51:10:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:48:53 2026 by rpki-client