Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/3139302e3130372e3136382e302f32322d3232203d3e20323730343034.roa
File:                     3139302e3130372e3136382e302f32322d3232203d3e20323730343034.roa (raw, json)
Hash identifier:          zkQLwy5a4AAzn9huNpxwsF/Y28YgUeWVqI6A5FIWrc4=
Subject key identifier:   BB:C0:B6:8D:FA:F6:77:24:6E:0B:48:72:41:9D:C7:26:C4:D0:A4:90
Certificate issuer:       /CN=4B8A48206BDC82006361ECB45F61527768738318
Certificate serial:       45E2C9A93F5E7D182D557A9DDDAA4E209F8FCE75
Authority key identifier: 4B:8A:48:20:6B:DC:82:00:63:61:EC:B4:5F:61:52:77:68:73:83:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B8A48206BDC82006361ECB45F61527768738318.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/3139302e3130372e3136382e302f32322d3232203d3e20323730343034.roa
Signing time:             Mon 20 Jul 2026 15:44:42 +0000
ROA not before:           Mon 20 Jul 2026 15:39:42 +0000
ROA not after:            Mon 19 Jul 2027 15:44:42 +0000
asID:                     270404
IP address blocks:        190.107.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/4B8A48206BDC82006361ECB45F61527768738318.crl
                          rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/4B8A48206BDC82006361ECB45F61527768738318.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B8A48206BDC82006361ECB45F61527768738318.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 17:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e2:c9:a9:3f:5e:7d:18:2d:55:7a:9d:dd:aa:4e:20:9f:8f:ce:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B8A48206BDC82006361ECB45F61527768738318
        Validity
            Not Before: Jul 20 15:39:42 2026 GMT
            Not After : Jul 19 15:44:42 2027 GMT
        Subject: CN=BBC0B68DFAF677246E0B4872419DC726C4D0A490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a0:71:1c:45:71:bd:ad:37:a9:34:36:84:21:
                    60:5d:46:7d:65:1a:00:d4:fc:80:39:2d:a9:be:49:
                    96:a7:5e:8b:aa:fc:e4:24:14:35:45:08:a4:0d:cf:
                    d5:ee:ef:d3:53:57:6a:4c:f0:6f:cd:41:06:3c:5a:
                    dd:28:d3:5d:07:ec:72:e5:10:b6:90:b2:65:31:a4:
                    de:6c:16:44:b4:19:82:e6:d3:a0:67:b2:22:8a:5f:
                    7f:53:20:ac:bd:47:19:4c:a3:b0:98:8e:3d:46:27:
                    58:cf:f0:33:97:a2:98:e3:03:64:f9:5d:71:ce:88:
                    b1:02:ee:fd:7f:81:ba:a2:e3:da:4d:6a:18:d8:ae:
                    0c:e6:31:4d:11:eb:8e:8c:10:90:ac:f1:d9:3a:d7:
                    f6:ee:38:35:55:39:9d:22:a9:ba:8b:34:5b:3d:00:
                    fc:82:b5:e7:21:ff:99:05:52:26:b7:42:df:a6:f6:
                    d3:e7:6c:41:b1:4b:62:3a:f7:e6:a3:ef:0c:29:a2:
                    4b:4b:36:a4:3e:02:9c:5b:89:80:e8:5c:b2:38:2c:
                    0b:c7:82:b7:44:bd:30:da:fc:9f:40:5e:2b:5b:a0:
                    19:63:e8:6e:66:a6:ab:ab:44:8c:73:e9:8d:f0:c2:
                    bf:dc:bf:61:10:ba:4e:f1:4e:fa:72:64:77:f8:5e:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C0:B6:8D:FA:F6:77:24:6E:0B:48:72:41:9D:C7:26:C4:D0:A4:90
            X509v3 Authority Key Identifier:
                keyid:4B:8A:48:20:6B:DC:82:00:63:61:EC:B4:5F:61:52:77:68:73:83:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/4B8A48206BDC82006361ECB45F61527768738318.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B8A48206BDC82006361ECB45F61527768738318.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/3139302e3130372e3136382e302f32322d3232203d3e20323730343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:3e:76:57:63:06:d1:df:8a:c1:79:2a:3b:51:27:3a:36:22:
         58:b0:64:00:49:0d:c1:8b:38:31:a6:60:e4:75:b1:58:d9:4e:
         61:61:66:b8:6a:c6:8a:1b:37:55:fb:76:af:3e:7d:af:82:3e:
         d7:a1:39:27:2d:11:6b:9f:92:b1:5b:81:71:ce:1f:29:5e:d1:
         ba:c4:85:a9:a7:47:39:20:09:7e:66:04:de:75:c6:f7:d6:83:
         dc:14:6b:ea:eb:35:58:1c:16:bd:c0:fe:9e:30:2b:22:c1:74:
         9f:77:a3:88:d4:d2:75:ef:36:ef:a4:55:f7:05:54:fb:52:32:
         f3:13:50:14:ea:02:16:21:9b:ca:46:0a:3a:f1:3b:19:47:47:
         c7:50:c0:e8:69:1a:6e:fa:76:68:f6:d6:0b:e4:f1:71:66:8b:
         ea:99:32:f4:cc:b8:f4:f3:9b:94:c4:18:0a:c1:31:b8:51:ee:
         ba:6b:ae:4b:6b:a0:ae:72:9f:ac:4b:c8:26:f0:4e:6f:32:8b:
         8d:6b:34:86:43:f2:66:7c:33:e8:79:14:97:82:29:d9:80:e4:
         39:11:bb:21:c6:ae:ad:fd:94:82:ec:a9:66:c4:8a:60:67:9e:
         7c:e8:ae:2e:0d:22:e9:18:52:a3:2f:9b:98:c0:12:7d:b7:cd:
         42:b3:ca:6c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUReLJqT9efRgtVXqd3apOIJ+PznUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI4QTQ4MjA2QkRDODIwMDYzNjFFQ0I0NUY2MTUyNzc2
ODczODMxODAeFw0yNjA3MjAxNTM5NDJaFw0yNzA3MTkxNTQ0NDJaMDMxMTAvBgNV
BAMTKEJCQzBCNjhERkFGNjc3MjQ2RTBCNDg3MjQxOURDNzI2QzREMEE0OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2oHEcRXG9rTepNDaEIWBdRn1l
GgDU/IA5Lam+SZanXouq/OQkFDVFCKQNz9Xu79NTV2pM8G/NQQY8Wt0o010H7HLl
ELaQsmUxpN5sFkS0GYLm06BnsiKKX39TIKy9RxlMo7CYjj1GJ1jP8DOXopjjA2T5
XXHOiLEC7v1/gbqi49pNahjYrgzmMU0R646MEJCs8dk61/buODVVOZ0iqbqLNFs9
APyCtech/5kFUia3Qt+m9tPnbEGxS2I69+aj7wwpoktLNqQ+ApxbiYDoXLI4LAvH
grdEvTDa/J9AXitboBlj6G5mpqurRIxz6Y3wwr/cv2EQuk7xTvpyZHf4XokdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUu8C2jfr2dyRuC0hyQZ3HJsTQpJAwHwYDVR0j
BBgwFoAUS4pIIGvcggBjYey0X2FSd2hzgxgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1ZvRzRyMllyQ0xabzg3MVNqS1ZVYk1wY3RIVjMyaWRlS1Y0Q2lFR3lU
aTEvMC80QjhBNDgyMDZCREM4MjAwNjM2MUVDQjQ1RjYxNTI3NzY4NzM4MzE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCOEE0ODIwNkJEQzgyMDA2
MzYxRUNCNDVGNjE1Mjc3Njg3MzgzMTguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dWb0c0cjJZckNMWm84NzFTaktWVWJNcGN0SFYzMmlkZUtWNENpRUd5VGkxLzAv
MzEzOTMwMmUzMTMwMzcyZTMxMzYzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMDM0MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5rqDANBgkqhkiG9w0BAQsFAAOCAQEAHj52
V2MG0d+KwXkqO1EnOjYiWLBkAEkNwYs4MaZg5HWxWNlOYWFmuGrGihs3Vft2rz59
r4I+16E5Jy0Ra5+SsVuBcc4fKV7RusSFqadHOSAJfmYE3nXG99aD3BRr6us1WBwW
vcD+njArIsF0n3ejiNTSde8276RV9wVU+1Iy8xNQFOoCFiGbykYKOvE7GUdHx1DA
6Gkabvp2aPbWC+TxcWaL6pky9My49POblMQYCsExuFHuumuuS2ugrnKfrEvIJvBO
bzKLjWs0hkPyZnwz6HkUl4Ip2YDkORG7Icaurf2UguypZsSKYGeefOiuLg0i6RhS
oy+bmMASfbfNQrPKbA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:36 2026 by rpki-client