Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138392e33392e3234302e302f32302d3234203d3e203238363538.roa
File:                     3138392e33392e3234302e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          JqJc+MCZaVWomxS6F3S6YSv6YKfAF+MpLAB5atCGaqA=
Subject key identifier:   99:E3:EC:2C:39:DF:67:65:D8:30:50:A3:A9:9D:10:AA:2C:19:3C:8F
Certificate issuer:       /CN=79F14A3C86D9D72492B68D319F7567646C1907E3
Certificate serial:       5355F90D9CF714FDA0A9BF965DE5AEBF95EC3E5E
Authority key identifier: 79:F1:4A:3C:86:D9:D7:24:92:B6:8D:31:9F:75:67:64:6C:19:07:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79F14A3C86D9D72492B68D319F7567646C1907E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138392e33392e3234302e302f32302d3234203d3e203238363538.roa
Signing time:             Tue 14 Apr 2026 13:27:30 +0000
ROA not before:           Tue 14 Apr 2026 13:22:30 +0000
ROA not after:            Tue 13 Apr 2027 13:27:30 +0000
asID:                     28658
IP address blocks:        189.39.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/79F14A3C86D9D72492B68D319F7567646C1907E3.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/79F14A3C86D9D72492B68D319F7567646C1907E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79F14A3C86D9D72492B68D319F7567646C1907E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:55:f9:0d:9c:f7:14:fd:a0:a9:bf:96:5d:e5:ae:bf:95:ec:3e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79F14A3C86D9D72492B68D319F7567646C1907E3
        Validity
            Not Before: Apr 14 13:22:30 2026 GMT
            Not After : Apr 13 13:27:30 2027 GMT
        Subject: CN=99E3EC2C39DF6765D83050A3A99D10AA2C193C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9a:c7:25:81:2b:bf:51:75:41:71:75:ae:dd:
                    44:80:41:23:67:6b:f2:fe:53:5e:1c:88:b2:c7:0e:
                    28:54:12:c6:6f:c9:62:46:31:50:96:b2:2d:a1:fd:
                    f2:99:c5:2b:e2:6b:f4:19:5d:19:12:54:65:32:2f:
                    04:c8:53:a5:8c:9c:df:3c:73:4b:ab:af:f3:44:70:
                    91:d8:a7:c4:ab:ac:59:20:c6:2a:ab:94:a4:f3:6e:
                    2d:8b:fb:8a:b3:62:f9:53:75:62:fe:e5:1f:71:53:
                    eb:e5:17:eb:75:82:d4:83:61:6b:dd:c1:fb:7d:79:
                    30:dd:71:06:77:41:69:6d:97:1d:81:f4:91:9c:99:
                    b2:7c:7c:f7:b9:72:b4:43:a9:b8:c9:39:22:e0:39:
                    29:6d:43:5b:e6:51:14:b5:55:9b:d9:2c:b9:56:87:
                    4d:d8:1b:7e:a6:24:f6:07:18:5c:40:9c:30:21:f6:
                    f2:22:55:73:53:ac:a0:11:bb:39:93:2b:ec:7b:b6:
                    63:ce:f9:e4:09:93:f9:44:1d:72:bd:3a:9c:67:58:
                    d3:17:ec:43:ed:9c:67:3b:a4:c2:0b:13:28:e0:d4:
                    46:20:cf:d7:e8:54:e6:22:8f:85:d6:fa:86:6c:2d:
                    3e:30:5c:7c:ba:91:cb:a4:47:aa:fd:b1:32:33:13:
                    f7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E3:EC:2C:39:DF:67:65:D8:30:50:A3:A9:9D:10:AA:2C:19:3C:8F
            X509v3 Authority Key Identifier:
                keyid:79:F1:4A:3C:86:D9:D7:24:92:B6:8D:31:9F:75:67:64:6C:19:07:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/79F14A3C86D9D72492B68D319F7567646C1907E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79F14A3C86D9D72492B68D319F7567646C1907E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138392e33392e3234302e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:74:d7:36:6d:84:44:f7:49:05:fd:e5:da:50:f3:6f:f0:48:
         3b:bd:0e:5f:ad:e7:7b:13:9e:57:74:66:4c:8d:63:33:73:e6:
         5d:9b:1d:36:79:5a:bb:8d:00:cc:b3:25:d4:65:3f:68:b5:bf:
         28:26:83:43:af:9b:a6:d8:9a:08:27:d0:cc:2b:24:1e:12:a1:
         09:12:31:95:be:fc:52:bb:85:ef:8a:bf:66:68:f7:de:16:2b:
         a4:39:ff:89:2a:0c:56:b9:81:c0:33:80:bf:d0:81:f8:48:57:
         f8:3b:42:8f:74:7e:5d:d4:d0:5f:7f:ef:8e:93:06:f1:f5:cf:
         d4:7d:91:21:67:71:6a:bc:b5:cb:d5:81:45:55:c4:a3:78:d7:
         c3:a9:26:16:1f:8e:09:5e:c1:89:d3:56:c7:42:ce:10:c2:88:
         d7:af:27:dc:7a:71:a4:42:ea:98:c5:1d:58:a2:94:54:7a:47:
         ba:5f:6b:61:0f:17:a4:aa:fe:81:55:e3:79:94:58:aa:da:c5:
         66:04:ef:fb:3f:ea:21:58:9b:a3:79:54:88:68:5f:b3:94:86:
         15:2c:5d:24:74:db:46:c0:65:81:74:fe:51:2b:20:46:1b:45:
         74:99:dc:cd:36:7e:58:55:ed:5c:9d:75:f2:37:b7:e3:26:cc:
         4b:ef:95:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:14:30 2026 by rpki-client