Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3138372e36332e31362e302f32302d3234203d3e203238323132.roa
File:                     3138372e36332e31362e302f32302d3234203d3e203238323132.roa (raw, json)
Hash identifier:          QQuZP6sI6FgxVYM1QmVFUTyjvC6Y7db+YgkZYTTeIv0=
Subject key identifier:   02:57:F8:BA:D8:01:67:80:EE:1E:6E:E0:A2:3B:13:CC:EC:7B:09:32
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       228695681686D0CB239075844DC83F86156D7FBD
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3138372e36332e31362e302f32302d3234203d3e203238323132.roa
Signing time:             Tue 21 Apr 2026 04:38:10 +0000
ROA not before:           Tue 21 Apr 2026 04:33:10 +0000
ROA not after:            Tue 20 Apr 2027 04:38:10 +0000
asID:                     28212
IP address blocks:        187.63.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
                          rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 18:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:86:95:68:16:86:d0:cb:23:90:75:84:4d:c8:3f:86:15:6d:7f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: Apr 21 04:33:10 2026 GMT
            Not After : Apr 20 04:38:10 2027 GMT
        Subject: CN=0257F8BAD8016780EE1E6EE0A23B13CCEC7B0932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:14:e7:6c:61:aa:85:e4:81:b7:c4:7a:85:23:
                    4e:c4:9f:36:a9:f6:0d:26:cc:f3:a9:4b:05:82:3b:
                    c2:a9:54:01:59:e9:52:58:3d:b9:92:e6:18:bd:ed:
                    ec:5c:03:bd:40:a9:3f:40:52:08:f8:12:fd:77:1c:
                    a2:72:4c:85:81:67:0a:54:56:d5:56:77:19:6c:8e:
                    c7:d7:7d:b6:f3:0e:90:b2:d0:c7:33:74:59:59:89:
                    75:5d:1f:69:6a:0a:7c:b8:a4:15:54:1c:6d:de:10:
                    f0:66:55:b4:5c:f8:44:01:35:cf:ff:41:97:f5:07:
                    a3:b9:99:fc:d6:87:16:ce:1c:45:4e:b1:41:33:67:
                    d2:d1:d4:93:d8:94:9d:c3:4a:76:34:3b:ab:f9:97:
                    62:0f:c0:8e:4a:ca:8f:db:1c:0d:6f:70:44:37:56:
                    0b:59:e7:49:18:1d:08:bc:41:cd:1a:83:38:08:8c:
                    79:57:9c:86:79:d7:77:22:19:a5:52:bc:53:c5:11:
                    10:eb:8f:bb:a7:74:49:88:c1:ea:84:35:a3:a0:2f:
                    3d:35:b5:e7:69:8a:9e:2d:bc:78:81:a8:11:d0:44:
                    54:6a:8c:88:a4:60:b3:37:55:08:02:05:93:b5:50:
                    f1:02:74:9e:87:6f:e5:4e:d1:b4:7e:bc:c7:56:d2:
                    b7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:57:F8:BA:D8:01:67:80:EE:1E:6E:E0:A2:3B:13:CC:EC:7B:09:32
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3138372e36332e31362e302f32302d3234203d3e203238323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:ac:63:80:7a:4a:e7:66:76:87:a2:a2:72:ab:da:ac:fd:84:
         f9:ad:fb:0a:c4:71:94:ae:75:60:09:86:f9:b7:97:2f:f4:f8:
         18:4b:30:bd:b9:c4:c9:5a:ae:53:55:d9:f7:8f:45:55:2c:b6:
         b0:19:ec:77:a3:2f:b0:ec:1e:5d:0e:cf:a4:36:99:0a:dd:ad:
         7b:ed:b7:1a:fb:a5:22:10:fa:16:b8:99:03:a6:f0:69:ef:a9:
         f6:73:de:5f:ec:3d:e0:ad:33:9f:65:e4:86:05:e6:0d:af:f9:
         5c:2b:e3:06:82:8d:77:56:37:70:2f:29:0a:2b:43:61:08:d0:
         fc:68:9a:6f:d4:84:8c:4a:8a:a1:02:71:05:ee:22:7a:e2:1f:
         9c:a0:ed:fa:4a:dd:8a:a3:cb:e7:51:e5:23:0e:c6:16:63:0d:
         3e:79:37:ad:59:b6:a2:29:36:7b:84:93:b9:c7:be:1c:2a:8c:
         2e:83:d2:3f:f3:4a:28:be:d4:04:47:6a:54:b1:e3:0e:0e:69:
         cc:4c:b6:23:f2:a3:1d:24:75:ee:48:03:58:bd:ba:4a:e6:0b:
         7d:a7:80:52:4e:41:7b:e7:22:9e:a0:72:0c:f6:7e:64:1c:ce:
         02:7b:dc:1f:b7:ff:ba:2d:fd:fb:a2:b3:68:ef:62:19:65:5e:
         0a:05:60:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:52:46 2026 by rpki-client