Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3138372e38352e35392e302f32342d3234203d3e20323632393632.roa
File:                     3138372e38352e35392e302f32342d3234203d3e20323632393632.roa (raw, json)
Hash identifier:          QI87B6Wv2pTFgOQ35JkbgP3p6NymOitUKglsaqpYHkc=
Subject key identifier:   FE:4D:A0:DB:2B:48:5B:74:74:96:5B:E3:C7:37:B9:3F:82:95:ED:74
Certificate issuer:       /CN=DBAFA98C9D202127B4FDB477BEE918DADA4CF157
Certificate serial:       4C342C90DE37726C5ED6AD7554E2DA4AB7B3D60E
Authority key identifier: DB:AF:A9:8C:9D:20:21:27:B4:FD:B4:77:BE:E9:18:DA:DA:4C:F1:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBAFA98C9D202127B4FDB477BEE918DADA4CF157.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3138372e38352e35392e302f32342d3234203d3e20323632393632.roa
Signing time:             Wed 25 Mar 2026 20:01:53 +0000
ROA not before:           Wed 25 Mar 2026 19:56:53 +0000
ROA not after:            Wed 24 Mar 2027 20:01:53 +0000
asID:                     262962
IP address blocks:        187.85.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/DBAFA98C9D202127B4FDB477BEE918DADA4CF157.crl
                          rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/DBAFA98C9D202127B4FDB477BEE918DADA4CF157.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBAFA98C9D202127B4FDB477BEE918DADA4CF157.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 23:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:34:2c:90:de:37:72:6c:5e:d6:ad:75:54:e2:da:4a:b7:b3:d6:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBAFA98C9D202127B4FDB477BEE918DADA4CF157
        Validity
            Not Before: Mar 25 19:56:53 2026 GMT
            Not After : Mar 24 20:01:53 2027 GMT
        Subject: CN=FE4DA0DB2B485B7474965BE3C737B93F8295ED74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:61:02:bd:f6:6d:08:a1:8b:69:59:3d:d2:cc:
                    ec:6f:4d:39:33:60:59:9c:01:7c:4a:45:e4:6a:b6:
                    ea:62:fb:21:5a:8d:ef:ad:98:54:48:43:11:a1:2b:
                    a1:19:04:5b:80:ab:85:c3:06:5f:18:38:46:04:b7:
                    3f:50:12:03:5c:64:07:3c:8c:50:1d:d0:a9:0f:08:
                    e8:3d:c6:c7:f4:5f:00:34:53:ff:1c:52:1e:fc:53:
                    df:46:65:6c:3d:9f:81:58:7d:f2:a4:9e:3e:38:2c:
                    bc:fa:71:5e:a0:7c:20:b4:f0:48:b8:b9:86:a6:ba:
                    aa:d7:94:e4:d7:ff:4e:f8:20:c3:4e:a8:6b:59:fe:
                    79:6b:1c:5f:40:5d:9e:02:5d:74:f4:cb:20:db:9e:
                    ed:77:04:b4:86:b8:7f:fd:29:9b:f4:c2:ea:91:fb:
                    f7:73:b4:1d:73:21:68:8f:5b:82:fd:ce:51:f0:7b:
                    49:26:15:e2:7a:1b:c2:bc:2f:24:fe:58:c6:2c:21:
                    f8:8b:46:c3:c2:cf:bf:cd:d6:a6:89:7a:55:b3:51:
                    ef:e2:e8:f2:3c:bf:16:50:56:d0:4b:e6:9b:f4:f5:
                    28:27:86:bb:39:a5:8a:fe:c1:b7:dd:b4:ff:f4:f3:
                    19:95:c4:e0:6c:2f:f3:bf:b2:12:8f:3c:f9:73:81:
                    88:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4D:A0:DB:2B:48:5B:74:74:96:5B:E3:C7:37:B9:3F:82:95:ED:74
            X509v3 Authority Key Identifier:
                keyid:DB:AF:A9:8C:9D:20:21:27:B4:FD:B4:77:BE:E9:18:DA:DA:4C:F1:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/DBAFA98C9D202127B4FDB477BEE918DADA4CF157.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBAFA98C9D202127B4FDB477BEE918DADA4CF157.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3138372e38352e35392e302f32342d3234203d3e20323632393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:9b:5c:3a:81:c8:8c:77:b0:b9:86:94:d6:81:81:5e:37:15:
         93:d5:4a:3f:9f:ab:82:9b:48:96:d8:00:34:37:ee:fd:75:3a:
         61:d4:9b:ae:25:be:e6:e8:16:02:5e:66:73:16:1d:bf:0b:b3:
         63:d6:bb:a4:31:ee:10:80:34:00:ff:bc:09:4c:fa:8a:f1:d9:
         20:d3:1a:70:30:4b:f9:7a:3b:eb:38:88:be:b7:c2:94:ce:7f:
         9d:7b:d2:f0:0a:24:e4:0f:e9:3a:4c:5a:67:22:13:20:b8:c4:
         12:29:6f:d7:18:5e:ca:ea:22:a8:f4:e6:cd:dd:ea:2e:01:9d:
         25:e2:dd:ab:82:d8:17:5a:d6:91:6b:5d:a2:c0:77:7f:63:1f:
         7e:1a:1d:dd:96:98:9b:0b:3e:10:51:38:65:2f:82:39:a0:d2:
         6a:ac:3d:18:2d:8a:c2:09:9a:8e:ec:2d:83:30:42:05:85:ca:
         c7:80:b2:d2:71:4e:79:97:d2:f9:64:ca:aa:73:c3:b1:15:89:
         97:55:8f:52:c3:42:8d:03:1c:54:23:61:b2:0d:d8:d4:6d:2c:
         ca:74:2c:77:43:f1:c5:8b:3e:e5:9d:f3:80:a2:d9:55:c1:bc:
         33:26:ce:8d:96:35:9b:e7:72:1f:54:26:94:dc:ee:c4:b2:9d:
         82:fc:01:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:14:52 2026 by rpki-client