Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/3138392e35302e3231312e302f32342d3234203d3e20323730363232.roa
File:                     3138392e35302e3231312e302f32342d3234203d3e20323730363232.roa (raw, json)
Hash identifier:          0hQqQbnw5D8Q38qhX4brtADh7gRLZbpMiyZ+Mmd2Ef8=
Subject key identifier:   B0:96:27:96:16:E8:D8:8F:A1:6D:C1:2B:F8:EC:EA:88:9E:44:3D:01
Certificate issuer:       /CN=859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D
Certificate serial:       1022D6268DFEC910035B53F09755FDE1DA76A404
Authority key identifier: 85:9D:67:46:CD:7A:AE:BE:ED:E8:FD:74:F7:99:81:0A:9D:BF:A0:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/3138392e35302e3231312e302f32342d3234203d3e20323730363232.roa
Signing time:             Wed 18 Mar 2026 13:30:30 +0000
ROA not before:           Wed 18 Mar 2026 13:25:30 +0000
ROA not after:            Wed 17 Mar 2027 13:30:30 +0000
asID:                     270622
IP address blocks:        189.50.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.crl
                          rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:22:d6:26:8d:fe:c9:10:03:5b:53:f0:97:55:fd:e1:da:76:a4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D
        Validity
            Not Before: Mar 18 13:25:30 2026 GMT
            Not After : Mar 17 13:30:30 2027 GMT
        Subject: CN=B096279616E8D88FA16DC12BF8ECEA889E443D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a8:0a:6f:0e:54:9f:44:5b:55:be:d8:87:82:
                    71:3c:30:89:02:48:fa:29:90:80:d3:80:41:fb:93:
                    c8:c5:cc:5f:d0:da:2a:21:8f:7d:2e:dd:e0:55:42:
                    9f:39:83:88:00:b1:96:4f:4e:e5:8f:42:50:97:ce:
                    d7:13:2c:a3:b7:ae:75:db:52:b7:f7:ee:15:cd:41:
                    7b:f1:6f:d9:69:fc:63:c9:b9:d7:ed:5c:92:ce:ad:
                    e6:04:a4:ba:58:e6:c5:01:3f:59:f1:2f:66:fa:2d:
                    d0:64:f2:ec:1a:3c:c5:17:bc:17:0e:57:a0:17:ce:
                    22:e4:5d:1b:55:6b:7c:b6:f1:71:c2:b0:b0:35:db:
                    28:fd:7b:13:f0:2b:e7:7f:25:87:8f:55:79:b9:d2:
                    c9:e5:2f:c0:a0:a7:5e:44:70:ed:35:b1:bb:e1:70:
                    f9:f4:93:2b:bd:e4:61:0f:38:be:79:ac:b6:eb:5f:
                    11:01:ca:cc:75:72:ea:84:82:37:f1:59:74:76:00:
                    4a:0b:72:50:65:ba:f6:45:94:3f:a7:4b:61:91:36:
                    2b:1e:8a:b4:fb:8c:70:61:ea:63:3b:a0:b0:6c:92:
                    e1:44:e6:aa:97:2a:53:c6:b5:01:01:e8:d3:f6:18:
                    8e:44:db:1d:25:f7:a5:6c:20:c4:e4:5b:67:9d:57:
                    f7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:96:27:96:16:E8:D8:8F:A1:6D:C1:2B:F8:EC:EA:88:9E:44:3D:01
            X509v3 Authority Key Identifier:
                keyid:85:9D:67:46:CD:7A:AE:BE:ED:E8:FD:74:F7:99:81:0A:9D:BF:A0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/3138392e35302e3231312e302f32342d3234203d3e20323730363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:63:dd:2b:86:d6:7b:6c:a3:25:81:fa:04:ff:07:36:70:15:
         63:d6:d8:3b:bd:56:a8:58:cc:6e:f5:53:3b:8f:73:db:67:dd:
         3c:7a:9a:31:68:43:e6:27:d9:20:a8:a6:4e:97:9c:ff:ff:ff:
         62:fe:94:05:e7:f0:a6:6a:b6:b5:14:23:04:75:35:ea:90:d8:
         1a:92:ec:36:28:82:f1:16:f8:50:7b:2e:39:96:17:9f:1d:9c:
         e8:d0:e0:c1:97:67:fb:fb:d6:30:8e:d7:67:31:be:42:02:e0:
         3a:de:d7:ed:b7:4e:49:6f:e9:dc:31:4a:bb:b2:3e:36:9e:6c:
         df:62:c4:89:92:e0:89:f8:1a:1d:b4:3f:e4:e4:70:31:10:5a:
         df:45:d4:8f:67:90:5d:f0:6d:33:cf:fb:0e:2b:1c:15:11:1c:
         8f:2d:e8:c7:99:6c:c7:40:de:ac:c5:4c:9d:18:ad:9b:0d:f9:
         2e:00:dd:12:80:22:9f:46:55:68:47:6e:e3:d5:f3:99:09:98:
         a5:f9:a7:f7:d5:d5:9c:20:03:7b:12:99:ce:cd:fe:8f:82:2b:
         a8:c2:7a:a6:a3:1c:90:b2:51:7c:b6:2b:4a:38:bd:a5:ef:13:
         27:4d:0e:90:e3:70:a7:8a:ba:bb:b1:d7:5e:c2:64:30:3e:8f:
         89:76:58:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:40 2026 by rpki-client