Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/3133382e39372e37362e302f32332d3233203d3e20323731303639.roa
File:                     3133382e39372e37362e302f32332d3233203d3e20323731303639.roa (raw, json)
Hash identifier:          1dksx6+2H3VJov03rioFBv8tzGxf6aYnvigoYshexcg=
Subject key identifier:   12:15:27:DB:17:AF:2C:FB:67:BE:B1:DC:DA:EB:C8:0C:3F:DF:7F:5F
Certificate issuer:       /CN=F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837
Certificate serial:       11E3306199579C793F617FF44FEABCE7686C9D58
Authority key identifier: F2:68:EE:DC:5A:FD:60:8E:ED:CF:0E:59:CF:A2:BD:FE:D1:6B:C8:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/3133382e39372e37362e302f32332d3233203d3e20323731303639.roa
Signing time:             Mon 23 Mar 2026 15:25:41 +0000
ROA not before:           Mon 23 Mar 2026 15:20:41 +0000
ROA not after:            Mon 22 Mar 2027 15:25:41 +0000
asID:                     271069
IP address blocks:        138.97.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.crl
                          rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e3:30:61:99:57:9c:79:3f:61:7f:f4:4f:ea:bc:e7:68:6c:9d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837
        Validity
            Not Before: Mar 23 15:20:41 2026 GMT
            Not After : Mar 22 15:25:41 2027 GMT
        Subject: CN=121527DB17AF2CFB67BEB1DCDAEBC80C3FDF7F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e9:2c:49:78:db:b9:f3:60:6b:1c:89:67:cc:
                    45:a0:b2:a2:f1:7b:ce:84:fe:dd:7d:5a:c3:05:1f:
                    8e:b8:04:0b:e0:dc:ec:08:24:c8:d4:3d:86:2b:b4:
                    6a:46:26:a4:f2:75:d6:5e:a6:f2:8f:5b:b1:37:8c:
                    6b:b7:3d:5d:87:e2:e5:32:04:6e:b7:e5:ab:71:e3:
                    72:9a:a0:66:0b:d8:58:a6:18:e9:84:dc:7b:c7:88:
                    f1:4e:ea:b1:4f:af:66:d6:da:f6:f8:61:de:63:43:
                    ac:ed:d4:78:92:7e:d3:53:24:2b:59:d1:4e:dd:5d:
                    fb:e1:d9:00:f1:3e:42:c5:97:f7:0f:cd:1c:7c:0e:
                    32:6a:48:ac:d9:9d:0b:4f:49:d0:b0:64:6d:42:82:
                    cb:78:63:01:c4:62:29:cb:14:34:86:36:c4:f4:a4:
                    45:14:d4:b6:43:16:10:26:98:30:fd:9d:fd:7d:7b:
                    f6:21:e1:73:15:e0:b2:fd:7d:f5:d4:f9:76:2d:db:
                    30:0a:83:26:ac:1e:9d:cc:55:3b:c7:db:83:ff:1b:
                    d5:97:26:02:fd:04:30:85:b8:36:50:c5:48:86:30:
                    3d:72:ab:e7:ec:43:63:4a:60:f4:83:84:98:2b:07:
                    e2:1a:ee:4b:a9:51:93:64:42:8d:43:ed:57:fd:81:
                    6e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:15:27:DB:17:AF:2C:FB:67:BE:B1:DC:DA:EB:C8:0C:3F:DF:7F:5F
            X509v3 Authority Key Identifier:
                keyid:F2:68:EE:DC:5A:FD:60:8E:ED:CF:0E:59:CF:A2:BD:FE:D1:6B:C8:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/3133382e39372e37362e302f32332d3233203d3e20323731303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:4b:ee:fe:94:40:45:92:74:40:5c:ff:67:38:88:08:9d:b8:
         9b:ec:f5:bc:95:10:63:fd:a1:e1:b6:a7:b4:cb:c7:54:b8:ba:
         3b:67:c1:04:41:9b:3b:1e:69:37:6d:78:58:bd:5a:57:e6:ea:
         37:4a:3e:f3:cf:79:8d:36:77:76:96:34:bb:c8:83:b4:9d:90:
         ab:0a:35:ff:7f:30:ed:91:76:8f:4a:45:ea:2f:39:56:10:62:
         26:cf:f3:f9:7f:30:ee:31:de:0d:54:cb:0e:14:04:eb:07:36:
         ba:3d:39:0e:de:58:33:8c:d1:89:22:63:b6:8d:92:3a:cc:77:
         ef:14:d6:5a:6c:13:d2:e4:37:84:45:d3:c3:8d:d0:07:39:f7:
         d4:5d:87:c2:24:d4:8c:a7:b9:7a:06:85:d6:3a:6c:5b:e4:29:
         fa:83:b3:f0:f6:a0:84:b0:3e:be:25:cb:6a:54:d5:c2:49:21:
         76:09:14:a0:06:68:95:5a:ef:a9:cd:7f:c0:54:24:73:92:01:
         ec:34:96:4c:c7:1f:c4:f6:04:24:5e:30:d8:3e:72:e8:7d:26:
         16:cc:3f:34:25:9a:ec:c7:84:14:22:0c:ca:95:a0:c3:52:1f:
         e3:90:99:54:50:fc:51:fa:8f:50:02:a7:f1:03:97:d3:db:8e:
         ee:23:62:1b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEeMwYZlXnHk/YX/0T+q852hsnVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI2OEVFREM1QUZENjA4RUVEQ0YwRTU5Q0ZBMkJERkVE
MTZCQzgzNzAeFw0yNjAzMjMxNTIwNDFaFw0yNzAzMjIxNTI1NDFaMDMxMTAvBgNV
BAMTKDEyMTUyN0RCMTdBRjJDRkI2N0JFQjFEQ0RBRUJDODBDM0ZERjdGNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR6SxJeNu582BrHIlnzEWgsqLx
e86E/t19WsMFH464BAvg3OwIJMjUPYYrtGpGJqTyddZepvKPW7E3jGu3PV2H4uUy
BG635atx43KaoGYL2FimGOmE3HvHiPFO6rFPr2bW2vb4Yd5jQ6zt1HiSftNTJCtZ
0U7dXfvh2QDxPkLFl/cPzRx8DjJqSKzZnQtPSdCwZG1Cgst4YwHEYinLFDSGNsT0
pEUU1LZDFhAmmDD9nf19e/Yh4XMV4LL9ffXU+XYt2zAKgyasHp3MVTvH24P/G9WX
JgL9BDCFuDZQxUiGMD1yq+fsQ2NKYPSDhJgrB+Ia7kupUZNkQo1D7Vf9gW5PAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEhUn2xevLPtnvrHc2uvIDD/ff18wHwYDVR0j
BBgwFoAU8mju3Fr9YI7tzw5Zz6K9/tFryDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRk5XQ01QZm5WTW5tYnNZVjd1R1A0ZWIxYnNlOTgzSlBOMjEzckh0SFc0
QkYvMC9GMjY4RUVEQzVBRkQ2MDhFRURDRjBFNTlDRkEyQkRGRUQxNkJDODM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyNjhFRURDNUFGRDYwOEVF
RENGMEU1OUNGQTJCREZFRDE2QkM4MzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZOV0NNUGZuVk1ubWJzWVY3dUdQNGViMWJzZTk4M0pQTjIxM3JIdEhXNEJGLzAv
MzEzMzM4MmUzOTM3MmUzNzM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMx
MzAzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBimFMMA0GCSqGSIb3DQEBCwUAA4IBAQCqS+7+lEBF
knRAXP9nOIgInbib7PW8lRBj/aHhtqe0y8dUuLo7Z8EEQZs7Hmk3bXhYvVpX5uo3
Sj7zz3mNNnd2ljS7yIO0nZCrCjX/fzDtkXaPSkXqLzlWEGImz/P5fzDuMd4NVMsO
FATrBza6PTkO3lgzjNGJImO2jZI6zHfvFNZabBPS5DeERdPDjdAHOffUXYfCJNSM
p7l6BoXWOmxb5Cn6g7Pw9qCEsD6+JctqVNXCSSF2CRSgBmiVWu+pzX/AVCRzkgHs
NJZMxx/E9gQkXjDYPnLofSYWzD80JZrsx4QUIgzKlaDDUh/jkJlUUPxR+o9QAqfx
A5fT247uI2Ib
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:35:48 2026 by rpki-client