Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e31302e302f32342d3234203d3e203535303535.roa
File:                     3138362e3139362e31302e302f32342d3234203d3e203535303535.roa (raw, json)
Hash identifier:          5par7rmIHXWq7rkfanlTu+T1CSCTL6AMfTPj12rnT0Q=
Subject key identifier:   0F:C9:2A:70:FF:83:4B:CB:FA:A7:7F:05:27:05:70:65:16:48:C1:98
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       6C69084C4246E5A72FA6F3ED7B71FB8571E1B955
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e31302e302f32342d3234203d3e203535303535.roa
Signing time:             Wed 22 Jul 2026 13:45:36 +0000
ROA not before:           Wed 22 Jul 2026 13:40:36 +0000
ROA not after:            Wed 21 Jul 2027 13:45:36 +0000
asID:                     55055
IP address blocks:        186.196.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl
                          rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:69:08:4c:42:46:e5:a7:2f:a6:f3:ed:7b:71:fb:85:71:e1:b9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: Jul 22 13:40:36 2026 GMT
            Not After : Jul 21 13:45:36 2027 GMT
        Subject: CN=0FC92A70FF834BCBFAA77F05270570651648C198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c0:c4:b3:5a:24:c5:ee:20:c7:cd:d8:07:3d:
                    81:d5:68:8c:6c:d0:84:4a:fb:16:e5:1b:73:81:c2:
                    aa:88:48:55:ed:d5:a9:8f:d4:d8:9b:01:06:e4:12:
                    46:5c:c2:57:65:9e:b4:c3:9c:9e:ea:7f:28:c3:06:
                    c4:a4:c9:92:00:e6:10:88:0b:2d:03:4a:02:84:4b:
                    4c:1a:f8:26:81:c6:5c:24:d6:be:51:8f:2a:07:2f:
                    69:8c:c1:12:73:c7:44:86:28:37:f0:50:ff:e5:27:
                    ab:9c:2e:c6:33:89:88:6e:84:0a:87:9d:3c:30:62:
                    59:1b:4d:22:51:f2:3d:71:43:78:90:d0:fa:2f:ca:
                    52:fe:7c:77:e3:03:fa:a6:d3:cb:6b:b4:19:9a:8b:
                    53:08:6b:eb:c1:11:d7:02:2b:c4:6a:a3:73:bb:76:
                    6b:61:04:33:1e:fd:90:cd:54:b1:6a:5e:a4:6c:fb:
                    df:a8:17:04:ed:2b:27:f7:09:d0:d4:36:fc:03:7b:
                    da:a9:f0:ea:b3:7c:60:f9:0f:ae:15:dc:9e:4a:60:
                    a4:5f:7c:17:32:29:19:a2:fb:95:16:03:fc:4f:a6:
                    99:b2:8e:8b:5d:bf:a0:77:e7:5e:75:44:e0:3e:a6:
                    39:69:e9:a5:fb:55:46:4a:8d:80:0b:a6:a6:dc:93:
                    ec:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C9:2A:70:FF:83:4B:CB:FA:A7:7F:05:27:05:70:65:16:48:C1:98
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e31302e302f32342d3234203d3e203535303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:ad:58:3f:d8:0c:23:d4:0e:f2:af:9d:57:1d:27:2f:da:fc:
         7d:45:82:61:7b:35:53:eb:96:c7:61:81:91:91:30:48:e1:49:
         ef:6c:64:a3:ae:e0:79:cd:c7:0b:90:a5:dc:ae:ee:b5:a2:10:
         38:c1:63:37:32:74:34:f0:ba:eb:35:9d:18:ae:07:fd:54:2e:
         5a:78:d3:96:75:53:13:31:72:db:66:22:b8:10:0f:93:be:b2:
         90:2d:b9:a1:20:dd:b6:fc:bf:fb:4b:7c:b3:9b:87:07:54:ca:
         58:f9:86:49:11:23:5f:09:5f:b0:dc:b1:63:11:e0:fe:86:f4:
         e4:1b:74:a0:bc:50:78:f9:c1:9b:10:80:d9:f1:a2:d6:66:5c:
         17:af:70:b3:9a:b8:72:7d:3e:56:63:1e:b9:df:d0:f6:93:1f:
         a8:fe:9b:43:10:38:fb:be:95:25:28:07:82:91:76:43:e9:47:
         58:8f:ea:49:cd:88:a7:32:62:37:21:77:a0:37:e8:ad:f6:3d:
         ad:75:3d:06:00:50:b3:e5:75:4e:77:00:46:fb:87:fe:0c:cf:
         5a:85:f3:27:b7:43:05:66:3b:c1:bb:d0:4c:b8:60:c5:26:53:
         54:08:e9:de:28:c4:c5:f4:7b:cb:43:73:bc:86:66:c8:45:1d:
         d4:20:1f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:38:05 2026 by rpki-client