Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/3138372e3130392e3230322e302f32342d3234203d3e20323734363334.roa
File:                     3138372e3130392e3230322e302f32342d3234203d3e20323734363334.roa (raw, json)
Hash identifier:          gMoxQwQ0FlAZirFytlktQYVSheH9amEuTNbCmowe2tE=
Subject key identifier:   BF:A4:32:1B:91:CE:10:12:87:35:FC:1F:FF:76:FF:52:40:C2:8F:FF
Certificate issuer:       /CN=600921937E8C82CCBB357FE8103E7D3356A4C6BE
Certificate serial:       476846EF76266641CD405925270B8C466CA99B13
Authority key identifier: 60:09:21:93:7E:8C:82:CC:BB:35:7F:E8:10:3E:7D:33:56:A4:C6:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/3138372e3130392e3230322e302f32342d3234203d3e20323734363334.roa
Signing time:             Wed 21 Oct 2026 04:16:50 +0000
ROA not before:           Wed 21 Oct 2026 04:11:50 +0000
ROA not after:            Wed 20 Oct 2027 04:16:50 +0000
asID:                     274634
IP address blocks:        187.109.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.crl
                          rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 06:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:68:46:ef:76:26:66:41:cd:40:59:25:27:0b:8c:46:6c:a9:9b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600921937E8C82CCBB357FE8103E7D3356A4C6BE
        Validity
            Not Before: Oct 21 04:11:50 2026 GMT
            Not After : Oct 20 04:16:50 2027 GMT
        Subject: CN=BFA4321B91CE10128735FC1FFF76FF5240C28FFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:80:7f:be:18:b8:9c:28:2d:94:cf:e7:0f:e5:
                    b2:bd:e3:1b:c7:8a:19:36:e6:c4:f6:2a:22:f4:81:
                    2a:28:49:a7:2b:51:48:21:9a:b2:2f:b2:6e:ca:6d:
                    3d:80:be:a8:f4:93:3c:d4:14:b1:58:ec:e8:64:6d:
                    05:c6:08:8c:aa:ce:50:7d:57:b4:b1:51:b8:0a:b9:
                    e5:72:9c:bb:9f:75:45:69:fb:c1:d1:f9:7a:4f:44:
                    e0:c8:04:19:44:64:ca:61:49:ab:69:4c:d6:11:91:
                    15:6e:85:5f:4c:60:71:7d:db:11:ec:a8:5f:cf:82:
                    17:ea:46:ba:b8:b0:1b:6b:01:fb:69:bd:3f:54:0d:
                    4a:f3:cf:76:dd:54:a6:4b:d2:55:f1:d9:7a:7b:91:
                    45:99:47:fd:78:ae:7a:a1:98:ee:d3:cb:c2:b3:17:
                    2c:79:1a:5a:5d:48:8a:5e:91:d1:ea:ac:f4:97:44:
                    42:9d:f9:b4:f1:28:26:ff:e6:5d:9a:7e:5a:51:ef:
                    43:a2:db:d6:98:0b:e9:0c:6d:df:b6:63:82:70:9b:
                    53:b5:ac:9b:9f:35:e1:0d:da:d8:a8:c7:f3:29:4a:
                    81:a5:a0:25:05:e3:eb:34:97:29:d2:5b:69:a4:69:
                    3f:df:db:d9:14:8b:df:05:5f:65:42:d0:c1:7d:d9:
                    5f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A4:32:1B:91:CE:10:12:87:35:FC:1F:FF:76:FF:52:40:C2:8F:FF
            X509v3 Authority Key Identifier:
                keyid:60:09:21:93:7E:8C:82:CC:BB:35:7F:E8:10:3E:7D:33:56:A4:C6:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/3138372e3130392e3230322e302f32342d3234203d3e20323734363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:a3:32:b9:71:ea:64:26:d5:ff:60:f1:e3:eb:d5:c6:04:cc:
         f7:45:10:8b:0d:27:cf:86:eb:60:29:dd:d8:2c:6d:27:29:e0:
         1f:89:1f:21:0f:86:28:65:ad:42:6a:b9:1c:53:ed:d2:df:5d:
         68:73:87:68:e8:15:3a:c8:d3:e7:75:61:84:e5:2b:94:72:24:
         76:01:76:86:8e:bf:5d:ba:01:18:07:80:43:54:3b:dc:d2:73:
         46:4c:17:c9:c9:02:98:6c:56:f3:ba:63:30:92:19:4a:79:cf:
         80:c7:12:bb:9d:23:b1:73:77:79:21:ad:ba:1f:f5:3b:3b:b1:
         71:98:a2:31:3c:4b:1d:6e:10:1b:a8:b8:4b:da:fd:eb:a2:5b:
         ed:d9:fa:73:26:cf:dc:08:e3:30:88:67:84:0d:7d:34:40:bf:
         01:3c:43:ce:e3:ea:6b:cf:da:cb:5d:0b:c6:80:96:86:5c:df:
         5d:0c:61:66:78:fe:ef:81:15:b9:2b:86:74:2b:92:87:69:4d:
         f8:b9:f6:74:85:fd:99:0e:56:a8:96:22:46:ec:00:ef:24:72:
         65:4f:d1:94:ac:45:a8:74:a5:e8:3e:2e:9f:ab:29:82:3d:a5:
         2a:80:68:a0:47:16:78:09:c0:10:a5:2a:40:f3:21:e1:a3:de:
         9e:14:23:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 00:41:48 2026 by rpki-client