Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/3138362e3232372e39312e302f32342d3234203d3e20323732323738.roa
File:                     3138362e3232372e39312e302f32342d3234203d3e20323732323738.roa (raw, json)
Hash identifier:          1uok5wWKe2jdM+ymZeH58udBxHS6lf4bZKk6Nmki800=
Subject key identifier:   46:6F:9B:2E:39:33:40:89:8A:BF:10:E3:F6:9E:A1:61:F2:0B:D7:E9
Certificate issuer:       /CN=04F82AB6D03AAC998F1C1C22272D92FD17905BDC
Certificate serial:       1716A326F1F398AA9AEFA6917AED897B4C06509A
Authority key identifier: 04:F8:2A:B6:D0:3A:AC:99:8F:1C:1C:22:27:2D:92:FD:17:90:5B:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/3138362e3232372e39312e302f32342d3234203d3e20323732323738.roa
Signing time:             Fri 08 May 2026 18:21:26 +0000
ROA not before:           Fri 08 May 2026 18:16:26 +0000
ROA not after:            Fri 07 May 2027 18:21:26 +0000
asID:                     272278
IP address blocks:        186.227.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.crl
                          rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 02:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:16:a3:26:f1:f3:98:aa:9a:ef:a6:91:7a:ed:89:7b:4c:06:50:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04F82AB6D03AAC998F1C1C22272D92FD17905BDC
        Validity
            Not Before: May  8 18:16:26 2026 GMT
            Not After : May  7 18:21:26 2027 GMT
        Subject: CN=466F9B2E393340898ABF10E3F69EA161F20BD7E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cd:bd:16:98:20:8f:ec:ad:5c:3d:f4:bf:21:
                    79:6c:44:1f:07:91:6c:49:d1:09:dd:a1:83:13:20:
                    22:56:1a:b2:e7:55:04:88:77:85:fa:2d:69:c8:9b:
                    3e:be:ce:9e:99:02:b3:72:0c:3c:e3:23:1c:32:a8:
                    5e:bd:ba:d4:2f:1c:e1:a6:88:69:68:62:e0:b4:57:
                    ff:ee:07:7d:6a:a6:01:bb:00:c1:57:3f:f2:c8:be:
                    7b:1f:fc:19:17:c7:06:c2:44:a2:94:f7:4b:11:5a:
                    90:16:da:f7:cd:41:f0:bc:12:25:e9:ef:e6:6f:92:
                    65:cd:67:42:8d:da:8e:20:48:b1:a8:7d:06:c7:60:
                    35:98:2b:16:e1:7a:0d:cf:21:6e:4f:7a:5d:90:49:
                    ea:a6:69:7e:89:03:46:0d:d1:95:79:03:bc:cb:8f:
                    d1:56:75:db:2c:79:3c:59:0c:ce:37:65:e6:c7:3d:
                    14:00:10:4c:6e:17:5c:f1:5d:3f:e4:c1:c4:bb:db:
                    55:81:9c:21:f8:75:35:53:12:8c:d4:05:3f:cc:4b:
                    db:6a:ec:e1:c9:6a:be:f9:f5:a0:ac:f5:1b:7f:2e:
                    40:b5:11:e2:aa:ae:2b:9f:73:7f:84:96:5e:b1:eb:
                    96:bf:b0:2d:e0:00:1b:1e:27:a5:2d:23:10:7e:a6:
                    31:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6F:9B:2E:39:33:40:89:8A:BF:10:E3:F6:9E:A1:61:F2:0B:D7:E9
            X509v3 Authority Key Identifier:
                keyid:04:F8:2A:B6:D0:3A:AC:99:8F:1C:1C:22:27:2D:92:FD:17:90:5B:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/3138362e3232372e39312e302f32342d3234203d3e20323732323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:2a:37:77:64:b3:99:b3:4f:23:48:7c:71:ab:b9:16:39:b3:
         c3:52:eb:b3:83:c4:7d:4b:25:95:6d:62:1d:38:02:92:ee:6c:
         83:12:5e:e4:f4:87:ea:e1:37:8d:0b:83:9c:8d:0e:6d:b9:1c:
         f5:41:b4:13:db:3f:31:98:50:c6:ee:92:d3:77:06:77:14:fd:
         76:1d:a8:86:fb:d1:4b:0d:1e:fe:80:6d:21:5f:e6:94:db:86:
         87:1c:3a:52:b5:f4:a2:3d:e1:03:96:02:ab:73:ad:79:8b:4c:
         a0:78:8d:ac:e1:3b:8e:3c:66:04:78:5b:36:db:68:88:e7:d0:
         57:46:cc:f5:7f:f9:63:ac:15:97:48:8c:0a:3a:d2:30:76:6b:
         d7:43:17:fe:1a:f2:3d:45:c0:8c:9e:a8:5b:60:a4:41:8e:c7:
         26:35:b9:5e:92:a9:f6:b5:0d:4e:2b:07:e7:5a:8a:48:21:cb:
         5b:f1:ca:78:a2:ca:0f:4d:b3:4b:ac:f4:75:9e:9a:40:26:cf:
         62:a8:29:57:6f:28:50:0b:9d:8d:df:9d:af:a6:bf:7b:18:7a:
         22:44:e8:b9:49:d2:2a:ac:81:db:93:f7:19:83:c1:1f:3e:72:
         b4:e3:51:ce:8d:53:4b:c4:54:7d:7d:ce:26:ab:a5:d1:2b:c2:
         78:35:12:72
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFxajJvHzmKqa76aReu2Je0wGUJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRGODJBQjZEMDNBQUM5OThGMUMxQzIyMjcyRDkyRkQx
NzkwNUJEQzAeFw0yNjA1MDgxODE2MjZaFw0yNzA1MDcxODIxMjZaMDMxMTAvBgNV
BAMTKDQ2NkY5QjJFMzkzMzQwODk4QUJGMTBFM0Y2OUVBMTYxRjIwQkQ3RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkzb0WmCCP7K1cPfS/IXlsRB8H
kWxJ0QndoYMTICJWGrLnVQSId4X6LWnImz6+zp6ZArNyDDzjIxwyqF69utQvHOGm
iGloYuC0V//uB31qpgG7AMFXP/LIvnsf/BkXxwbCRKKU90sRWpAW2vfNQfC8EiXp
7+ZvkmXNZ0KN2o4gSLGofQbHYDWYKxbheg3PIW5Pel2QSeqmaX6JA0YN0ZV5A7zL
j9FWddsseTxZDM43ZebHPRQAEExuF1zxXT/kwcS721WBnCH4dTVTEozUBT/MS9tq
7OHJar759aCs9Rt/LkC1EeKqriufc3+Ell6x65a/sC3gABseJ6UtIxB+pjFDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURm+bLjkzQImKvxDj9p6hYfIL1+kwHwYDVR0j
BBgwFoAUBPgqttA6rJmPHBwiJy2S/ReQW9wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2hGYnF1cERFQzJ1alNwRm40Y1FYQWhweDJ5cGVTcWVQcktrcGR6b282
YWcvMC8wNEY4MkFCNkQwM0FBQzk5OEYxQzFDMjIyNzJEOTJGRDE3OTA1QkRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0RjgyQUI2RDAzQUFDOTk4
RjFDMUMyMjI3MkQ5MkZEMTc5MDVCREMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0doRmJxdXBERUMydWpTcEZuNGNRWEFocHgyeXBlU3FlUHJLa3Bkem9vNmFnLzAv
MzEzODM2MmUzMjMyMzcyZTM5MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzIzMjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC641swDQYJKoZIhvcNAQELBQADggEBAG4qN3dk
s5mzTyNIfHGruRY5s8NS67ODxH1LJZVtYh04ApLubIMSXuT0h+rhN40Lg5yNDm25
HPVBtBPbPzGYUMbuktN3BncU/XYdqIb70UsNHv6AbSFf5pTbhoccOlK19KI94QOW
AqtzrXmLTKB4jazhO448ZgR4WzbbaIjn0FdGzPV/+WOsFZdIjAo60jB2a9dDF/4a
8j1FwIyeqFtgpEGOxyY1uV6Sqfa1DU4rB+daikghy1vxyniiyg9Ns0us9HWemkAm
z2KoKVdvKFALnY3fna+mv3sYeiJE6LlJ0iqsgduT9xmDwR8+crTjUc6NU0vEVH19
ziarpdErwng1EnI=
-----END CERTIFICATE-----
Generated at Wed May 13 17:17:15 2026 by rpki-client