Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSBSxzkPff9DYvmR2C6T83CLVKsM4JM6yFFgyp8KHFYy/0/3136302e3233382e3134302e302f32342d3234203d3e20323731363636.roa
File:                     3136302e3233382e3134302e302f32342d3234203d3e20323731363636.roa (raw, json)
Hash identifier:          +Sb48dqwcPTYMAAeHTrqIhfLxbCb382aq15JkLVi6MI=
Subject key identifier:   1C:DE:31:35:62:B2:3C:63:4C:48:26:76:75:E8:0A:9A:25:66:26:5A
Certificate issuer:       /CN=50C8623F093C1AA2BCA40917A25C1F33B6FF33D7
Certificate serial:       3793809FFF9C782DE2627F8705F53B6A3ADC5615
Authority key identifier: 50:C8:62:3F:09:3C:1A:A2:BC:A4:09:17:A2:5C:1F:33:B6:FF:33:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C8623F093C1AA2BCA40917A25C1F33B6FF33D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSBSxzkPff9DYvmR2C6T83CLVKsM4JM6yFFgyp8KHFYy/0/3136302e3233382e3134302e302f32342d3234203d3e20323731363636.roa
Signing time:             Thu 07 May 2026 15:53:06 +0000
ROA not before:           Thu 07 May 2026 15:48:06 +0000
ROA not after:            Thu 06 May 2027 15:53:06 +0000
asID:                     271666
IP address blocks:        160.238.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSBSxzkPff9DYvmR2C6T83CLVKsM4JM6yFFgyp8KHFYy/0/50C8623F093C1AA2BCA40917A25C1F33B6FF33D7.crl
                          rsync://rpki-repo.registro.br/repo/BSBSxzkPff9DYvmR2C6T83CLVKsM4JM6yFFgyp8KHFYy/0/50C8623F093C1AA2BCA40917A25C1F33B6FF33D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C8623F093C1AA2BCA40917A25C1F33B6FF33D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 May 2026 23:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:93:80:9f:ff:9c:78:2d:e2:62:7f:87:05:f5:3b:6a:3a:dc:56:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50C8623F093C1AA2BCA40917A25C1F33B6FF33D7
        Validity
            Not Before: May  7 15:48:06 2026 GMT
            Not After : May  6 15:53:06 2027 GMT
        Subject: CN=1CDE313562B23C634C48267675E80A9A2566265A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:38:35:39:7f:65:ed:4d:24:10:1d:7e:c4:6a:
                    50:d7:fe:5f:e5:57:60:93:a7:96:63:01:aa:c6:91:
                    5b:6a:93:7e:e5:45:e9:c5:3e:66:12:17:f5:a5:3b:
                    17:6a:20:64:01:ee:3d:09:b1:f2:a3:90:ef:b9:f9:
                    03:9a:69:27:cb:67:7d:fc:94:f3:ff:74:a6:68:84:
                    67:8f:d4:77:06:32:5c:0d:e8:6a:f1:5a:70:a8:c1:
                    52:67:43:ea:ae:a6:70:9c:e4:05:4a:b7:38:3f:66:
                    5a:90:3a:ab:f2:b4:e0:9a:e3:6a:82:5b:65:4b:f4:
                    75:9e:73:f3:a7:04:88:ee:bd:05:a0:79:bd:f9:17:
                    58:1d:92:57:da:55:c6:5e:37:27:0e:a3:ae:71:e6:
                    a3:94:52:6f:54:c3:dd:b0:08:58:e6:d1:d2:2a:2b:
                    bd:ed:91:90:2a:70:90:e0:01:c1:8e:41:29:24:20:
                    0f:2c:ca:4a:d2:0b:b2:87:c2:16:f4:69:42:be:0d:
                    00:ac:b3:d8:34:49:9e:0e:c6:8a:94:30:a9:e8:89:
                    b6:15:af:ed:77:91:fa:ac:9f:31:5c:aa:b7:af:1a:
                    23:e6:63:bc:9f:12:75:bb:19:47:46:94:5b:c0:f3:
                    01:c1:15:5d:83:50:2b:ad:b1:a7:31:1f:71:51:5c:
                    48:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DE:31:35:62:B2:3C:63:4C:48:26:76:75:E8:0A:9A:25:66:26:5A
            X509v3 Authority Key Identifier:
                keyid:50:C8:62:3F:09:3C:1A:A2:BC:A4:09:17:A2:5C:1F:33:B6:FF:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSBSxzkPff9DYvmR2C6T83CLVKsM4JM6yFFgyp8KHFYy/0/50C8623F093C1AA2BCA40917A25C1F33B6FF33D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C8623F093C1AA2BCA40917A25C1F33B6FF33D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSBSxzkPff9DYvmR2C6T83CLVKsM4JM6yFFgyp8KHFYy/0/3136302e3233382e3134302e302f32342d3234203d3e20323731363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:37:af:84:cb:c2:79:4b:e2:7c:26:4b:89:66:4d:1c:e8:32:
         af:8f:86:69:a0:20:50:5b:4e:b6:04:28:92:38:d2:cd:fb:1f:
         03:b1:80:76:e8:8d:0e:60:64:76:dc:10:7c:d5:96:bb:fe:c1:
         d0:ec:3a:3e:60:ad:54:86:2a:c6:76:17:87:8c:f3:f5:e3:22:
         34:2d:92:8d:1b:bb:2a:3d:71:99:87:55:b4:98:0c:bf:29:76:
         96:c5:32:28:6f:39:84:dd:01:e5:4c:6d:01:88:98:bb:00:d1:
         67:4e:6b:5c:1a:a0:08:97:fb:ab:49:65:fb:1a:4e:20:85:16:
         b7:86:a5:34:29:62:d6:bd:df:d3:cd:88:e9:99:6d:43:ae:b7:
         3b:99:26:fe:ba:3b:2f:da:96:16:4a:94:83:76:bb:82:2e:52:
         d5:83:b8:28:e9:12:0c:2c:24:d6:74:62:0f:6f:5a:68:a8:c8:
         6a:4f:97:ff:d5:d8:f5:3d:99:51:1d:94:77:bd:3c:c9:0d:50:
         8c:06:b9:f9:ec:37:00:6a:61:87:bc:6a:b3:cb:8d:15:14:5b:
         81:3a:b0:c0:f8:9e:a1:f8:85:09:7b:33:f0:23:47:10:e4:c6:
         95:ae:dd:93:60:b1:c5:1f:ce:39:ec:03:cd:f2:ed:ca:18:94:
         94:65:63:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:18:18 2026 by rpki-client