Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/3138372e3130392e3139332e302f32342d3234203d3e20323632333232.roa
File:                     3138372e3130392e3139332e302f32342d3234203d3e20323632333232.roa (raw, json)
Hash identifier:          T/W7pZE/CfpYcqF/kp4vZrsyIBnIcseuNnlez8ZRZSg=
Subject key identifier:   4D:BE:AD:82:AF:F4:5D:A6:D9:D7:19:7C:CA:CD:85:24:4C:B0:EE:ED
Certificate issuer:       /CN=600921937E8C82CCBB357FE8103E7D3356A4C6BE
Certificate serial:       2C9BA1E8880C0701F762C92FCA2AF549F14C6B55
Authority key identifier: 60:09:21:93:7E:8C:82:CC:BB:35:7F:E8:10:3E:7D:33:56:A4:C6:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/3138372e3130392e3139332e302f32342d3234203d3e20323632333232.roa
Signing time:             Fri 17 Jul 2026 20:48:29 +0000
ROA not before:           Fri 17 Jul 2026 20:43:29 +0000
ROA not after:            Fri 16 Jul 2027 20:48:29 +0000
asID:                     262322
IP address blocks:        187.109.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.crl
                          rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9b:a1:e8:88:0c:07:01:f7:62:c9:2f:ca:2a:f5:49:f1:4c:6b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600921937E8C82CCBB357FE8103E7D3356A4C6BE
        Validity
            Not Before: Jul 17 20:43:29 2026 GMT
            Not After : Jul 16 20:48:29 2027 GMT
        Subject: CN=4DBEAD82AFF45DA6D9D7197CCACD85244CB0EEED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f5:e2:8d:5c:6f:81:fc:73:bd:fe:e7:6e:c8:
                    e0:bb:f0:d7:e7:63:ea:c4:1f:6a:7b:40:1b:e4:f3:
                    63:9c:71:7a:62:9a:4b:fa:ad:c4:b0:97:2f:2b:ba:
                    c4:0a:00:e1:c0:c5:e3:2a:bf:b4:c2:39:23:8d:d7:
                    54:7e:e4:7b:d9:56:7a:02:c3:7a:3b:da:74:5c:dd:
                    08:f5:76:63:ca:67:bf:ff:7c:01:36:1c:8c:e1:99:
                    98:e9:d8:fb:48:70:5e:cc:2c:4c:21:5d:15:62:17:
                    09:c0:3c:c8:4b:52:b3:98:90:c3:c9:15:32:c3:0f:
                    55:58:67:21:62:02:69:9e:cf:0e:3e:b7:bc:4b:c6:
                    8e:9a:f9:a9:c0:61:a4:49:d1:52:cc:d7:b7:b5:70:
                    45:3d:d4:e7:08:d8:2e:ff:b5:81:d2:1b:f1:73:98:
                    7a:ce:7f:a8:b2:62:01:fd:0f:27:b6:5d:6e:76:1e:
                    da:ef:18:b1:d1:c2:f9:24:5c:f4:48:cf:82:22:25:
                    4c:88:78:df:dc:1e:28:3e:1e:f1:62:10:80:2d:0c:
                    d2:27:7c:e3:65:d3:08:a8:6d:50:aa:4c:89:e5:d2:
                    4d:ec:5e:bb:60:61:87:01:ec:bf:59:88:a8:86:c5:
                    97:38:cc:bf:56:f6:68:1d:a1:c4:3e:92:ba:1c:56:
                    52:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BE:AD:82:AF:F4:5D:A6:D9:D7:19:7C:CA:CD:85:24:4C:B0:EE:ED
            X509v3 Authority Key Identifier:
                keyid:60:09:21:93:7E:8C:82:CC:BB:35:7F:E8:10:3E:7D:33:56:A4:C6:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/3138372e3130392e3139332e302f32342d3234203d3e20323632333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:56:c3:ff:3b:ea:79:66:88:23:78:99:56:62:2d:4f:2d:9f:
         33:4a:1a:5f:1e:ff:29:7b:b2:df:de:5c:91:27:07:b1:25:ac:
         2f:85:33:86:67:dd:76:78:ab:28:6d:fd:c1:82:ed:a4:32:e3:
         3c:84:a8:ec:ee:d7:21:f9:c0:10:81:f4:d5:b1:1f:81:65:9d:
         a2:dd:a5:60:bf:cb:32:46:49:99:1a:70:68:66:61:11:b6:62:
         47:4b:42:ad:48:13:40:ae:6c:8f:59:fd:99:8e:a6:23:c6:5a:
         d5:52:0f:b3:83:d2:d9:27:49:eb:08:13:d0:1e:c2:43:50:c9:
         2b:44:65:14:a2:04:02:3a:4e:66:18:19:1f:00:35:46:ec:f9:
         18:14:d5:2c:ca:89:a9:07:7b:4c:e9:dc:38:82:13:78:a2:c9:
         3d:48:40:b2:7b:ff:b4:1c:ef:bd:aa:95:ec:31:4b:12:d8:1e:
         e6:8d:4b:e9:a0:bf:89:a4:d2:6d:e5:bf:f3:a6:9a:bf:87:1f:
         dc:8d:0b:d7:36:72:db:c2:e6:bd:03:d5:4f:b9:64:1c:3f:49:
         24:e4:eb:8d:76:a1:d8:5b:c4:96:c5:78:4e:10:15:42:6f:1b:
         b8:cd:47:2a:0c:24:b2:79:57:89:6b:06:6f:9b:aa:3e:07:57:
         59:ce:13:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:35:18 2026 by rpki-client