Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31392e302f32342d3234203d3e203532393437.roa
File:                     3136382e3139372e31392e302f32342d3234203d3e203532393437.roa (raw, json)
Hash identifier:          N+KV4Md8aH3lU/InnUGUQoH4X+hns9g2x1j9O+1R8v4=
Subject key identifier:   64:C2:70:E4:C2:46:D1:D7:FA:A9:83:E8:3B:4E:80:C4:C4:4B:F8:FE
Certificate issuer:       /CN=2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75
Certificate serial:       038C5EA1F9BE4FC010F2E20D169B694204DB8ABB
Authority key identifier: 2D:35:57:8C:A2:1C:6C:8E:82:AB:F9:0B:55:A2:1F:DC:04:B4:FF:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31392e302f32342d3234203d3e203532393437.roa
Signing time:             Fri 17 Jul 2026 13:03:38 +0000
ROA not before:           Fri 17 Jul 2026 12:58:38 +0000
ROA not after:            Fri 16 Jul 2027 13:03:38 +0000
asID:                     52947
IP address blocks:        168.197.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.crl
                          rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8c:5e:a1:f9:be:4f:c0:10:f2:e2:0d:16:9b:69:42:04:db:8a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75
        Validity
            Not Before: Jul 17 12:58:38 2026 GMT
            Not After : Jul 16 13:03:38 2027 GMT
        Subject: CN=64C270E4C246D1D7FAA983E83B4E80C4C44BF8FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:a9:b6:3c:87:69:45:d7:7d:89:78:73:9f:
                    75:98:68:19:2e:a7:22:68:f3:95:78:a8:de:f0:f9:
                    b3:50:1a:f0:fb:37:3d:d0:4f:af:2c:9d:b8:dd:73:
                    02:e9:6d:c3:5b:99:5d:9f:63:29:a9:02:35:bb:5d:
                    62:5b:3a:1d:92:80:79:86:24:74:6d:2e:8c:8f:bc:
                    88:fd:f1:80:ec:7b:8d:5d:52:cc:b8:95:e2:9c:9b:
                    f5:fc:33:59:de:f3:67:c2:7a:8e:88:24:5e:ed:4a:
                    d0:dd:e3:b0:d4:bf:12:8d:bb:20:5a:e1:92:9a:97:
                    52:a7:5f:c7:8a:b2:dd:0e:77:c4:b4:a7:a7:3c:21:
                    61:12:88:50:82:34:3b:e3:8e:07:bc:89:79:1f:46:
                    96:c3:d0:e0:3b:d1:ef:7d:75:cb:e5:3a:d9:bc:eb:
                    62:61:ee:96:16:6d:82:e8:5d:c4:1e:81:36:68:03:
                    ad:0c:83:8b:fd:4f:f7:d6:9b:e0:e8:db:d5:a7:d3:
                    a6:b3:2c:52:c7:bd:59:df:1e:18:4f:94:6e:20:a5:
                    e8:10:1b:67:92:e2:b2:42:ba:55:7f:d5:19:f2:38:
                    c4:ec:61:d8:f3:74:63:75:3f:42:85:f5:65:aa:3b:
                    18:5a:84:10:d7:2b:61:41:a3:54:eb:f9:5e:41:c9:
                    af:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C2:70:E4:C2:46:D1:D7:FA:A9:83:E8:3B:4E:80:C4:C4:4B:F8:FE
            X509v3 Authority Key Identifier:
                keyid:2D:35:57:8C:A2:1C:6C:8E:82:AB:F9:0B:55:A2:1F:DC:04:B4:FF:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31392e302f32342d3234203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:0d:2c:d2:a0:d8:80:54:7a:e4:b3:35:f2:f0:24:db:53:55:
         e0:ad:05:84:a9:9f:cf:3d:93:8f:ad:d0:12:a1:7b:7d:30:30:
         57:73:ea:5b:0d:b7:0e:ae:fb:6d:57:0f:23:74:4b:3c:f1:a1:
         74:91:1e:61:fa:17:6a:4c:89:5a:55:12:6c:e5:c7:bb:87:19:
         9b:7d:b9:cc:73:69:e0:97:89:4d:fd:7b:f4:f5:d2:9c:39:18:
         9e:d8:85:26:20:9e:00:5f:d0:08:8e:ef:24:9d:09:2d:f6:6c:
         5f:b9:a8:96:81:fa:3f:a6:4b:0f:65:9c:42:99:7f:3d:e7:17:
         22:8c:29:d1:56:2a:84:f8:8c:27:41:60:f4:d0:a1:0c:d0:52:
         34:2d:71:37:d6:d2:6c:56:72:d8:17:81:8c:9e:e9:bb:f6:22:
         38:38:ff:64:94:79:0e:86:9f:db:cc:66:ea:18:8c:b7:86:41:
         52:2c:f5:f5:45:ee:18:b7:88:21:d2:fb:84:58:1e:cb:fb:a8:
         37:b8:68:c0:28:07:1e:89:79:ec:a6:d1:43:e8:26:4e:ee:04:
         24:a4:27:b1:70:25:71:99:e2:29:82:fa:77:c2:ff:e0:f9:ee:
         6d:66:37:e6:13:2e:e7:b1:ec:7a:20:06:c4:2e:51:08:d4:7a:
         c4:28:c1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:44:47 2026 by rpki-client