Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e39342e3137362e302f32302d3332203d3e203238363439.roa
File:                     3138372e39342e3137362e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier:          F3ij/3NJ8R9wRMKsRfL1XYnEXKzoiooeC5rbhts70jI=
Subject key identifier:   D1:04:DC:64:46:15:8A:CB:02:02:12:E8:A0:DD:24:C6:75:47:1C:58
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       690113AC6E45972DD8D407587AFBE67B2AA8A776
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e39342e3137362e302f32302d3332203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:10 +0000
ROA not before:           Fri 17 Jul 2026 20:56:10 +0000
ROA not after:            Fri 16 Jul 2027 21:01:10 +0000
asID:                     28649
IP address blocks:        187.94.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:01:13:ac:6e:45:97:2d:d8:d4:07:58:7a:fb:e6:7b:2a:a8:a7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:10 2026 GMT
            Not After : Jul 16 21:01:10 2027 GMT
        Subject: CN=D104DC6446158ACB020212E8A0DD24C675471C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:62:63:02:f9:7d:f1:0e:4f:39:ce:92:b0:
                    be:13:08:df:27:f2:d7:c1:12:fe:46:79:65:df:ff:
                    40:3f:a3:02:4e:3e:1d:fc:6b:f5:b3:7e:47:d5:91:
                    d5:e8:dd:78:d1:43:bc:1b:a6:6b:7c:4a:96:db:45:
                    a9:f5:a7:5e:f6:b7:01:70:42:56:a8:97:c1:3d:c6:
                    91:85:14:eb:5e:df:9e:a5:99:dd:03:46:1b:c8:58:
                    1b:a6:ff:18:50:fa:52:03:0c:3f:73:4a:00:79:fb:
                    74:6e:73:0d:40:09:80:18:5e:67:96:20:39:3b:7f:
                    34:a5:e8:16:93:31:22:ea:98:ad:71:93:8b:dc:78:
                    56:d6:42:5b:52:08:d5:bc:be:d9:90:81:c9:58:37:
                    e2:b5:2c:f1:16:0d:5c:ad:b7:ca:97:ef:42:df:08:
                    7d:80:84:51:0a:b4:23:fa:a1:9d:8b:ea:65:e4:c1:
                    88:3a:c6:dc:5d:c1:d2:28:b0:18:39:e6:42:9d:e8:
                    c7:52:ed:eb:50:9e:a8:9a:c1:85:67:b6:5f:78:98:
                    2b:95:13:1f:62:31:4b:60:65:3e:6a:16:5c:6a:fe:
                    f3:5c:c4:c3:23:5d:9c:b6:1c:1e:a6:75:3f:4b:a4:
                    6a:3e:f9:84:85:e4:f6:35:23:c5:92:9c:70:6a:e7:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:04:DC:64:46:15:8A:CB:02:02:12:E8:A0:DD:24:C6:75:47:1C:58
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e39342e3137362e302f32302d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         db:01:fd:21:1d:b6:13:c6:18:65:02:f6:c1:55:21:d3:3c:8b:
         80:e6:7b:6a:f8:a6:98:2f:ef:7b:64:38:e0:58:02:73:70:6c:
         09:98:e6:ee:ee:3a:e7:d5:9f:d9:05:66:4c:13:e4:eb:0a:58:
         b8:8d:31:f3:44:de:f2:02:9f:52:70:15:45:9f:f7:6b:ad:e4:
         a7:85:85:ce:08:27:fb:9d:aa:04:5d:e1:9e:b4:1e:e3:81:1e:
         17:70:f1:f7:48:3a:db:7d:98:91:8d:87:f6:6c:8c:98:c4:df:
         f5:8d:08:99:1a:01:49:42:f6:7b:d5:b8:4f:3b:d2:92:2d:ba:
         9d:b7:4e:09:36:0f:99:e6:5a:a4:64:7f:c9:44:5f:a3:60:38:
         84:e5:57:da:9e:0e:4b:d6:e8:f4:85:77:4f:a3:f3:e8:c0:0e:
         4f:36:c9:04:f9:92:99:29:a4:6b:7b:d0:34:4c:4c:a5:5b:ea:
         e1:fd:84:d7:55:ce:cc:65:7f:b6:af:26:3b:fa:82:c4:7a:32:
         89:1f:31:a9:05:63:4f:36:f7:c0:78:5f:ec:a6:2a:e8:7b:64:
         81:2b:af:65:23:80:5c:36:9c:a1:5a:29:5f:ca:34:4f:1c:7a:
         73:a4:bd:9c:e7:c1:a4:89:69:19:38:77:38:7f:88:7a:67:76:
         e3:05:7c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:22:51 2026 by rpki-client