Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/3138372e3130392e3132312e302f32342d3234203d3e20323733373938.roa
File:                     3138372e3130392e3132312e302f32342d3234203d3e20323733373938.roa (raw, json)
Hash identifier:          TGcWITUVKiF59RDOoDb6hRdnZoWYW2N6AvDbeF/x3eg=
Subject key identifier:   A1:8A:2C:0C:F3:E4:60:BE:45:03:AC:AA:C7:41:98:89:36:6B:CD:5D
Certificate issuer:       /CN=7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019
Certificate serial:       31C2829E24D186565883E4FE9F2E35158F777765
Authority key identifier: 7B:7C:AE:33:EB:E3:97:5B:E8:99:71:E3:BD:0E:EE:6E:B2:21:C0:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/3138372e3130392e3132312e302f32342d3234203d3e20323733373938.roa
Signing time:             Tue 15 Sep 2026 21:40:56 +0000
ROA not before:           Tue 15 Sep 2026 21:35:56 +0000
ROA not after:            Tue 14 Sep 2027 21:40:56 +0000
asID:                     273798
IP address blocks:        187.109.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.crl
                          rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 02:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c2:82:9e:24:d1:86:56:58:83:e4:fe:9f:2e:35:15:8f:77:77:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019
        Validity
            Not Before: Sep 15 21:35:56 2026 GMT
            Not After : Sep 14 21:40:56 2027 GMT
        Subject: CN=A18A2C0CF3E460BE4503ACAAC7419889366BCD5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a9:9b:fa:c8:21:9e:b1:df:87:6c:78:57:34:
                    16:b0:e2:b5:da:fd:39:0f:cc:9d:f7:a0:b8:bb:85:
                    f0:b5:57:b7:52:9b:51:2c:47:0d:0e:e0:a3:23:c7:
                    13:dc:15:a5:93:b5:38:9d:0c:da:6e:1c:1b:74:6b:
                    e9:c6:f7:fb:6e:55:f9:54:d7:9f:be:fc:a1:7c:df:
                    f7:46:57:fe:d3:a8:de:71:4f:a2:06:3a:84:73:9d:
                    40:6b:19:45:84:83:94:28:81:be:81:bc:df:44:3f:
                    75:1a:6f:ff:e3:56:41:dc:10:11:f3:80:37:fa:24:
                    48:f8:a7:ce:97:9e:bc:7f:ec:17:72:84:1a:28:9c:
                    96:9d:b2:4b:a3:4a:97:36:df:31:69:a1:8d:af:32:
                    2a:f8:56:9a:c0:87:be:9e:ce:33:82:e6:96:df:d1:
                    b0:fc:7d:4c:40:a1:61:58:12:89:e7:0f:0b:2d:2b:
                    35:3c:a2:c6:53:d5:61:f1:75:6a:40:b2:0e:e6:81:
                    93:46:b3:b3:c9:eb:9f:8b:9e:06:15:85:f1:33:97:
                    ba:1a:62:e7:e5:61:df:09:af:6b:47:63:d5:1e:d5:
                    18:46:f3:f6:4b:12:c9:f8:c8:ec:47:5e:75:8d:f3:
                    5e:f4:20:6d:a5:04:fe:b9:80:c2:75:6e:a7:ee:3a:
                    c6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8A:2C:0C:F3:E4:60:BE:45:03:AC:AA:C7:41:98:89:36:6B:CD:5D
            X509v3 Authority Key Identifier:
                keyid:7B:7C:AE:33:EB:E3:97:5B:E8:99:71:E3:BD:0E:EE:6E:B2:21:C0:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/3138372e3130392e3132312e302f32342d3234203d3e20323733373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:a4:53:48:f6:40:44:54:7b:f6:c4:f1:37:2f:14:9a:12:f0:
         cf:1c:2b:5e:bc:b5:19:0d:ba:73:cb:fd:93:75:41:70:e6:34:
         2f:e6:a0:89:c6:67:f6:9b:46:5f:08:8c:0d:4d:40:a8:f8:54:
         e0:50:f2:a5:80:07:d4:0b:2f:3c:9b:0a:a1:da:dd:e8:5c:bf:
         65:58:b5:8c:ad:92:00:68:ab:b5:14:82:9c:23:d3:48:51:e2:
         e4:bb:5d:80:04:58:7c:24:5f:1f:4d:1b:fb:5f:e4:cc:e3:b7:
         ba:73:70:fe:cc:16:4b:e1:fe:a9:b6:02:db:58:2c:c5:79:b9:
         b6:84:e8:92:16:5d:39:50:2b:d5:27:1d:bf:68:5a:b3:77:b1:
         9c:ce:ed:4b:75:e3:03:b7:b2:95:17:85:59:cb:ce:1e:6b:50:
         3a:99:17:67:a4:bf:ee:c7:54:c8:b7:f7:de:ba:f3:5f:9e:5f:
         cc:51:c1:75:00:05:a2:16:91:87:cb:2d:89:5d:df:53:6a:76:
         1f:9a:f9:45:6f:f7:64:21:05:af:a5:a8:16:be:2b:52:13:1c:
         35:40:3c:ad:57:5f:e6:48:2e:66:2b:b1:ba:29:4f:2b:61:cd:
         e2:60:01:a1:a5:4f:cb:6e:92:f4:a5:d0:2a:06:08:ac:e9:ba:
         44:d2:8c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 20:21:34 2026 by rpki-client