Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3138372e3130332e3230322e302f32342d3234203d3e20323730353234.roa
File:                     3138372e3130332e3230322e302f32342d3234203d3e20323730353234.roa (raw, json)
Hash identifier:          fBLgKRQ5szgdoFxMxz6zqqYikYFIzQ9a6258uiroZoo=
Subject key identifier:   BB:08:F6:77:1A:AF:EA:6D:29:03:80:67:58:E5:F2:BA:75:71:0A:B7
Certificate issuer:       /CN=4582BF5F264D259FE997D22E716C8A5B71A0BB83
Certificate serial:       0BC79F2363E9D38881EC16D3D831592AA9EBE0D9
Authority key identifier: 45:82:BF:5F:26:4D:25:9F:E9:97:D2:2E:71:6C:8A:5B:71:A0:BB:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4582BF5F264D259FE997D22E716C8A5B71A0BB83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3138372e3130332e3230322e302f32342d3234203d3e20323730353234.roa
Signing time:             Tue 24 Mar 2026 13:05:33 +0000
ROA not before:           Tue 24 Mar 2026 13:00:33 +0000
ROA not after:            Tue 23 Mar 2027 13:05:33 +0000
asID:                     270524
IP address blocks:        187.103.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/4582BF5F264D259FE997D22E716C8A5B71A0BB83.crl
                          rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/4582BF5F264D259FE997D22E716C8A5B71A0BB83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4582BF5F264D259FE997D22E716C8A5B71A0BB83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c7:9f:23:63:e9:d3:88:81:ec:16:d3:d8:31:59:2a:a9:eb:e0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4582BF5F264D259FE997D22E716C8A5B71A0BB83
        Validity
            Not Before: Mar 24 13:00:33 2026 GMT
            Not After : Mar 23 13:05:33 2027 GMT
        Subject: CN=BB08F6771AAFEA6D2903806758E5F2BA75710AB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:ce:69:ac:c3:d5:2f:22:21:d7:ad:75:42:
                    65:70:3a:e5:f9:a7:79:7c:eb:f5:3b:7f:c0:ed:3b:
                    4a:7b:7a:b7:9b:09:52:c2:06:9b:99:32:d5:bc:fc:
                    44:c2:b8:c5:b9:b4:43:61:e8:eb:3d:47:06:36:f2:
                    7f:de:9c:d4:b5:8f:41:ff:5e:78:bd:dc:b0:21:13:
                    e3:56:db:13:5c:40:f2:40:0f:e6:63:08:3f:2f:16:
                    68:f4:9c:ea:0f:d4:9e:6c:6f:27:c3:b5:83:4f:4e:
                    75:f0:ad:2a:e7:8a:f3:e9:ef:74:19:75:1f:58:19:
                    d2:14:ae:c8:cb:78:34:3f:5d:34:98:4b:8d:1d:d5:
                    09:9d:4a:11:f8:cb:d6:60:64:fc:54:0e:21:84:81:
                    15:a4:1c:e4:05:2c:b5:ca:15:f6:66:33:7d:5d:7a:
                    61:d3:6c:85:37:54:99:d8:b4:66:9c:50:79:c7:ee:
                    b0:78:2a:c4:99:c7:e9:ca:f3:c4:d0:02:39:ac:59:
                    ff:61:ba:71:c7:ce:c1:ca:42:a5:88:a2:37:43:2d:
                    84:3e:7c:e9:65:13:86:d8:df:08:1e:2e:00:4f:e4:
                    04:b7:26:da:a3:13:92:31:fe:e1:73:5e:d1:5e:e7:
                    cc:11:b9:e6:06:9f:e3:d3:3f:e7:cd:2e:9a:ed:9a:
                    83:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:08:F6:77:1A:AF:EA:6D:29:03:80:67:58:E5:F2:BA:75:71:0A:B7
            X509v3 Authority Key Identifier:
                keyid:45:82:BF:5F:26:4D:25:9F:E9:97:D2:2E:71:6C:8A:5B:71:A0:BB:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/4582BF5F264D259FE997D22E716C8A5B71A0BB83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4582BF5F264D259FE997D22E716C8A5B71A0BB83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3138372e3130332e3230322e302f32342d3234203d3e20323730353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:d9:8c:16:6b:ca:87:72:c8:4e:9c:28:ea:72:4f:e2:88:04:
         46:6d:69:cf:60:22:2b:16:bc:ae:e6:d1:99:2d:16:99:65:ee:
         5f:cf:8a:15:f6:ec:4d:ac:07:f1:79:c3:72:7d:d2:dc:9b:c7:
         28:9d:6b:c1:b4:80:ef:bc:17:c1:a6:01:a9:b4:96:3a:29:9c:
         c3:05:f9:f3:71:e0:94:e2:02:8a:d4:e1:c4:82:a5:2a:f7:37:
         2b:43:74:dd:f9:30:f0:61:6d:9e:4e:70:9c:0c:5f:83:9b:7f:
         88:1f:23:cf:ce:48:e3:d4:75:9d:44:2a:7f:dd:f0:49:17:ad:
         d1:73:05:1f:ac:b6:bb:f7:83:4b:68:cb:1c:f5:4e:4d:cb:76:
         07:77:22:90:f1:7b:50:a7:44:e5:95:06:d0:0a:81:6a:c6:d7:
         d6:9d:9e:10:7a:37:ff:33:dc:c3:2c:9f:6c:19:db:8a:fc:21:
         d0:f7:7c:ae:62:32:e8:df:44:be:6b:3c:a8:82:70:1e:1a:f6:
         e4:95:75:4d:0c:b8:b5:15:17:52:c0:2b:0b:c3:ae:86:dc:06:
         18:32:92:fa:18:fb:a9:da:2b:09:4c:ae:44:fc:1b:20:cf:b8:
         03:3f:d8:15:84:57:c8:38:e3:b6:55:f5:fd:d2:8f:54:dc:90:
         f7:78:7a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:53:08 2026 by rpki-client