Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/3138392e35302e35322e302f32342d3234203d3e20323730393035.roa
File:                     3138392e35302e35322e302f32342d3234203d3e20323730393035.roa (raw, json)
Hash identifier:          csgxnuaJ7H8lFwsLU5oMiQ5tV6HouBDhNEiVItY52t4=
Subject key identifier:   43:E0:56:87:D8:73:A6:78:8A:83:40:D7:6D:4D:84:D9:FE:34:4A:93
Certificate issuer:       /CN=68DD457AFD87757729E657881786601BF56ED45F
Certificate serial:       37891691FDD2CD80956CFBCDA5CC6B097EFDE037
Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/3138392e35302e35322e302f32342d3234203d3e20323730393035.roa
Signing time:             Wed 02 Sep 2026 16:55:27 +0000
ROA not before:           Wed 02 Sep 2026 16:50:27 +0000
ROA not after:            Wed 01 Sep 2027 16:55:27 +0000
asID:                     270905
IP address blocks:        189.50.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
                          rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 19:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:89:16:91:fd:d2:cd:80:95:6c:fb:cd:a5:cc:6b:09:7e:fd:e0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F
        Validity
            Not Before: Sep  2 16:50:27 2026 GMT
            Not After : Sep  1 16:55:27 2027 GMT
        Subject: CN=43E05687D873A6788A8340D76D4D84D9FE344A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:03:dd:79:d1:49:fb:5b:88:ff:55:76:85:bb:
                    a6:46:46:77:ed:3e:52:74:52:07:e5:5a:dc:07:01:
                    8c:f4:e1:94:51:48:9f:66:c2:9f:3e:94:e2:df:be:
                    df:9d:dd:12:f3:40:c1:43:78:3e:9a:92:96:73:96:
                    bf:d2:3e:a3:96:1f:fc:74:94:6e:34:31:fb:63:0e:
                    2f:b4:e5:cb:a9:ef:18:d0:b0:d7:eb:59:8d:21:4a:
                    ec:77:fc:0f:ed:e9:3f:b9:9c:98:2b:80:db:b5:fb:
                    70:74:53:8d:24:68:ad:10:28:c0:db:01:08:dd:5c:
                    18:71:db:7a:85:12:10:14:30:4b:46:e8:d6:59:85:
                    fe:4e:c0:59:d9:aa:fb:0e:cc:81:6d:9a:16:a2:a4:
                    81:04:ac:24:32:9f:d5:77:11:e6:00:70:d2:b0:f5:
                    96:6b:12:b8:a9:26:2c:5b:ec:2e:c8:d9:b6:4c:3e:
                    3c:4e:13:5d:1f:c6:2e:be:09:89:88:0c:ca:10:e8:
                    89:d8:b9:e2:5d:ba:08:17:f6:7b:dd:31:5d:59:fc:
                    5a:5c:f2:c2:e9:dc:d5:c4:66:08:ce:25:a6:ab:5f:
                    d3:6e:56:fe:5a:6a:04:eb:97:81:25:cd:c3:62:c5:
                    82:8f:61:b6:fd:26:ff:06:1f:fd:6a:43:9a:33:bd:
                    8f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E0:56:87:D8:73:A6:78:8A:83:40:D7:6D:4D:84:D9:FE:34:4A:93
            X509v3 Authority Key Identifier:
                keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/3138392e35302e35322e302f32342d3234203d3e20323730393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:a6:1d:e0:51:4a:b6:0f:f9:37:ac:56:5a:e4:e8:72:42:76:
         b5:0d:90:66:85:e0:27:15:05:67:9e:42:ba:12:a3:9e:99:df:
         b5:bb:80:71:a1:95:36:b5:3d:14:35:91:f1:1e:f6:09:d5:2d:
         32:90:ab:3b:79:a4:37:a1:a0:c4:89:fa:8e:26:5c:4c:d0:9b:
         fa:b7:a5:21:72:f8:01:77:b7:e0:a4:cb:14:1d:44:ab:57:37:
         fc:66:94:f8:9a:2f:6e:ea:b5:ed:7e:5f:87:ea:8d:e7:a0:20:
         d4:a7:35:43:3f:61:ce:8b:d8:e2:5f:4f:91:62:c8:b5:ad:ca:
         23:61:dc:3f:10:59:07:ec:c0:29:85:b8:e9:b5:24:4f:a1:72:
         84:1d:4c:eb:f2:bc:14:8b:fc:32:60:e8:91:04:45:37:bb:c7:
         af:2d:61:e5:2b:7c:45:55:8c:d7:95:5d:56:39:98:c8:82:8d:
         4d:b4:8e:aa:ea:37:80:f3:4d:bd:a0:e6:c5:05:98:f9:67:36:
         3a:9e:84:2f:01:62:7d:af:17:7b:f0:c5:cd:43:f1:0f:10:2e:
         aa:dc:49:e2:dd:09:2b:6a:15:4e:37:ce:19:55:f5:2c:7a:61:
         e4:42:3a:f9:6c:cb:b0:4c:4b:a3:da:b0:3f:6c:2b:7f:d2:d7:
         1f:cc:12:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 21:23:15 2026 by rpki-client