Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/3138312e3139312e3131322e302f32322d3332203d3e20323636303130.roa
File:                     3138312e3139312e3131322e302f32322d3332203d3e20323636303130.roa (raw, json)
Hash identifier:          VAfeJayixcLKccoK9K6/3PZeInW/1FY3kWu/HaAVS/A=
Subject key identifier:   7B:39:80:6C:6F:43:AA:54:6D:F1:B1:AB:7F:4A:95:92:BB:34:0F:00
Certificate issuer:       /CN=D27F46706288934EA75FEFCBDB933497E0E92077
Certificate serial:       046E5694518A19112A5A90E373A3E00EB7C6C1F8
Authority key identifier: D2:7F:46:70:62:88:93:4E:A7:5F:EF:CB:DB:93:34:97:E0:E9:20:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/3138312e3139312e3131322e302f32322d3332203d3e20323636303130.roa
Signing time:             Mon 04 May 2026 14:12:33 +0000
ROA not before:           Mon 04 May 2026 14:07:33 +0000
ROA not after:            Mon 03 May 2027 14:12:33 +0000
asID:                     266010
IP address blocks:        181.191.112.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.crl
                          rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6e:56:94:51:8a:19:11:2a:5a:90:e3:73:a3:e0:0e:b7:c6:c1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27F46706288934EA75FEFCBDB933497E0E92077
        Validity
            Not Before: May  4 14:07:33 2026 GMT
            Not After : May  3 14:12:33 2027 GMT
        Subject: CN=7B39806C6F43AA546DF1B1AB7F4A9592BB340F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:cd:63:cd:15:f2:6e:38:ec:4f:86:98:e1:
                    c6:6f:7f:7d:cc:0b:3f:b2:21:36:80:91:a7:61:84:
                    23:bf:b1:b3:56:ae:65:39:6f:b4:56:a4:f5:4d:ed:
                    35:6d:4d:95:63:7b:33:c7:c5:2f:5f:c7:ba:83:13:
                    9c:44:82:57:76:34:ff:8b:1c:f7:73:07:b9:82:e8:
                    fe:3b:c9:d1:e4:e3:69:78:f4:33:50:20:18:14:39:
                    c0:ee:3a:5b:d4:c7:c1:9c:9e:01:f2:db:0a:71:f0:
                    cc:dd:78:13:dc:48:47:f7:c7:6b:71:10:6e:bf:5c:
                    15:b2:cf:91:8b:4f:01:29:15:93:ba:6f:da:10:d9:
                    44:0d:45:48:c7:74:c3:aa:76:9b:44:1e:da:4d:5c:
                    51:e6:33:2b:12:d0:07:c6:33:28:e6:93:cc:f1:c7:
                    44:ca:c1:ae:f0:68:15:09:c5:3b:92:43:76:d4:e7:
                    8e:61:5e:ae:5c:cb:a9:f9:fc:32:00:71:b4:65:29:
                    e8:93:ff:8f:3c:db:01:60:0a:55:95:1f:c8:29:5d:
                    e3:a8:71:c0:0c:f0:0e:5d:83:58:a5:68:60:0a:c4:
                    98:86:92:34:5b:7e:36:25:5f:51:08:b3:0b:f8:f9:
                    a0:d8:65:fa:3f:88:8f:1b:cd:09:2c:cf:c1:d6:b2:
                    ae:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:39:80:6C:6F:43:AA:54:6D:F1:B1:AB:7F:4A:95:92:BB:34:0F:00
            X509v3 Authority Key Identifier:
                keyid:D2:7F:46:70:62:88:93:4E:A7:5F:EF:CB:DB:93:34:97:E0:E9:20:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/3138312e3139312e3131322e302f32322d3332203d3e20323636303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:f2:15:f0:30:3b:e9:20:48:d4:3d:2d:85:fd:7b:9d:13:b7:
         4e:46:91:f3:f0:a0:c3:d4:59:3c:18:85:3b:ae:d3:56:33:d6:
         7f:f1:61:03:2a:1b:cd:16:85:16:77:5d:3a:e6:58:8e:99:25:
         c0:c5:57:da:d8:79:28:60:c4:4d:36:5d:7c:6a:5c:78:da:bd:
         c1:f6:9a:7b:7a:44:1d:6e:2c:15:db:ff:d8:d0:39:83:2c:8a:
         7a:67:04:c8:33:2b:3d:1a:6c:42:93:12:e9:be:80:3b:04:b5:
         28:ab:97:48:ed:a4:00:2b:b0:95:3d:ef:8b:fd:40:5d:c0:f5:
         5b:01:81:f1:c6:4b:84:d6:71:86:77:7f:11:be:cd:23:63:6a:
         99:27:8d:37:b2:40:fd:af:d8:3b:0b:0b:8f:a1:1f:83:35:7e:
         56:6b:f3:c7:db:f0:54:86:53:29:ef:98:76:fe:de:c1:72:d3:
         a5:e9:d4:37:b9:92:a6:00:c2:ae:d6:5d:c1:61:2b:d8:83:e9:
         cf:0f:f6:6e:d6:42:c2:c0:1c:e5:05:76:2d:07:65:72:7f:4d:
         1d:3a:29:e0:8b:69:1c:42:c8:71:ef:70:b6:9f:63:00:da:0d:
         79:4b:cd:c6:69:e0:10:f6:c8:2d:4f:6d:55:ad:32:63:b0:77:
         f0:14:7a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:15:16 2026 by rpki-client