Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136382e302f32322d3232203d3e203238323532.roa
File:                     3138372e312e3136382e302f32322d3232203d3e203238323532.roa (raw, json)
Hash identifier:          Hx7+vx+83aqobnOuVRV6vbce3kMtrORIROB6F8i9QuU=
Subject key identifier:   83:DE:9F:CF:0F:6B:A9:19:AA:44:3E:3B:8E:56:AB:3A:23:64:7D:14
Certificate issuer:       /CN=7BD1822386ABA0E476B538AE1CE5CC51409C0B9F
Certificate serial:       6365F04CCD3F3B61D4BF64E5E448D89D33E0AD75
Authority key identifier: 7B:D1:82:23:86:AB:A0:E4:76:B5:38:AE:1C:E5:CC:51:40:9C:0B:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136382e302f32322d3232203d3e203238323532.roa
Signing time:             Tue 01 Sep 2026 12:16:36 +0000
ROA not before:           Tue 01 Sep 2026 12:11:36 +0000
ROA not after:            Tue 31 Aug 2027 12:16:36 +0000
asID:                     28252
IP address blocks:        187.1.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 07:48:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:65:f0:4c:cd:3f:3b:61:d4:bf:64:e5:e4:48:d8:9d:33:e0:ad:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD1822386ABA0E476B538AE1CE5CC51409C0B9F
        Validity
            Not Before: Sep  1 12:11:36 2026 GMT
            Not After : Aug 31 12:16:36 2027 GMT
        Subject: CN=83DE9FCF0F6BA919AA443E3B8E56AB3A23647D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f9:4b:d6:53:dc:77:f5:45:02:94:10:62:2b:
                    58:3d:f0:a5:5a:8b:d2:97:ef:a6:90:ec:59:13:55:
                    65:72:96:30:1a:cb:ec:95:78:9a:f4:ad:d7:33:1f:
                    ad:d4:f0:75:77:01:3f:04:06:45:f6:1a:96:7c:a0:
                    4b:cc:80:ed:97:85:66:06:cd:0a:6d:8b:96:f2:81:
                    87:9e:9d:84:ee:5e:e2:f5:88:64:6b:1b:00:86:11:
                    10:33:38:9f:d2:44:02:c1:18:ce:d7:d1:55:6b:ee:
                    f8:fb:93:87:c8:15:31:e8:96:ec:32:78:24:84:94:
                    03:b8:a6:78:2d:48:86:24:47:94:01:a0:26:55:e2:
                    81:b3:4b:89:75:98:41:53:a0:91:2d:55:b7:c8:ed:
                    79:6b:09:3f:14:6a:59:2f:4f:dc:19:5a:f1:fe:06:
                    8e:e3:23:fc:47:de:a4:55:27:5a:8e:2d:84:29:f3:
                    4a:10:8a:81:a3:f8:ff:ec:ff:bb:78:cc:8c:ea:39:
                    6a:84:26:13:1e:ad:9c:b3:8b:e5:1d:80:4f:ba:6c:
                    5f:99:31:43:2d:dd:69:23:a9:e4:5f:3a:fa:d7:da:
                    57:97:db:f3:fd:d4:f3:7c:1a:09:a3:74:f0:77:32:
                    66:d2:4d:5b:dc:50:8b:e7:f9:76:24:7c:e5:ad:eb:
                    3c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DE:9F:CF:0F:6B:A9:19:AA:44:3E:3B:8E:56:AB:3A:23:64:7D:14
            X509v3 Authority Key Identifier:
                keyid:7B:D1:82:23:86:AB:A0:E4:76:B5:38:AE:1C:E5:CC:51:40:9C:0B:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136382e302f32322d3232203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:12:d8:88:d8:5d:fb:4a:cd:dc:6d:8d:c8:d5:10:6c:e8:d6:
         ff:b1:52:e8:81:de:49:c1:8d:4e:35:6c:96:57:29:66:12:b8:
         0e:a0:90:53:2b:e8:90:90:0b:7a:41:bb:b1:56:10:2f:b7:83:
         45:32:1d:4f:dd:b9:f0:fb:ce:44:62:ef:ee:84:20:96:c9:e3:
         3d:19:23:05:7a:1c:1b:68:36:a3:f7:9c:30:99:7c:6b:af:bc:
         1e:01:1c:45:52:fb:e7:bc:f1:bb:6b:a3:52:b6:66:fc:de:80:
         68:92:49:95:85:c8:4a:58:96:d5:63:26:49:ee:00:bd:7e:29:
         48:c7:7b:46:f9:ae:17:f2:01:59:3d:11:51:13:6e:0a:04:9e:
         bc:48:97:44:29:28:e7:fa:9e:81:1e:2b:ca:58:d2:da:74:fc:
         bf:49:ea:28:bd:c4:6f:0c:f6:78:0a:5f:e0:3f:2c:cb:56:45:
         30:bb:54:9d:ab:ce:6e:aa:02:41:ad:5a:ab:fe:79:51:07:3b:
         5b:70:29:86:45:c3:35:c3:47:b4:31:08:e6:9d:3c:76:e7:ab:
         32:0d:07:30:3b:87:79:0f:f2:d0:c6:f8:a9:de:ab:cf:72:39:
         f5:13:eb:6e:83:ff:6f:dd:8b:5b:39:8d:79:e7:43:9a:e6:20:
         a1:bd:ea:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:16:52 2026 by rpki-client