Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e31332e302f32342d3234203d3e203535303535.roa
File:                     3138362e3139362e31332e302f32342d3234203d3e203535303535.roa (raw, json)
Hash identifier:          4RuKRsci6IA3IETnV+UTC/k+kb9Bb7PM0Mjq9UzLU7Y=
Subject key identifier:   29:DC:4A:FD:FC:07:67:7A:7E:92:92:ED:92:01:8F:A1:2B:A3:B8:D4
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       04CAD56B0886EF681EB15D78FC0891595C3E6E91
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e31332e302f32342d3234203d3e203535303535.roa
Signing time:             Wed 22 Jul 2026 13:46:01 +0000
ROA not before:           Wed 22 Jul 2026 13:41:01 +0000
ROA not after:            Wed 21 Jul 2027 13:46:01 +0000
asID:                     55055
IP address blocks:        186.196.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl
                          rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ca:d5:6b:08:86:ef:68:1e:b1:5d:78:fc:08:91:59:5c:3e:6e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: Jul 22 13:41:01 2026 GMT
            Not After : Jul 21 13:46:01 2027 GMT
        Subject: CN=29DC4AFDFC07677A7E9292ED92018FA12BA3B8D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:ea:6f:bc:78:a8:6a:79:bf:9d:a7:02:26:
                    f8:85:27:b3:2c:f0:32:1e:d8:9f:c9:44:cd:f9:f4:
                    cb:9f:4c:95:a6:6d:ef:a1:cc:14:62:72:6f:85:f0:
                    03:df:a6:53:36:ce:07:2d:b0:9c:a7:32:84:e0:b2:
                    98:f5:85:52:42:58:13:b6:7c:ed:a7:b2:9d:66:96:
                    57:c3:05:2c:96:a4:a3:4a:9c:50:c2:b0:b8:30:32:
                    01:85:88:38:f5:9c:4a:89:ac:fe:73:81:5c:3b:57:
                    d2:18:0b:f9:21:90:25:7a:46:b5:5e:81:36:aa:1e:
                    b3:da:d8:3f:6a:f8:d2:90:50:06:f4:eb:ee:71:bc:
                    e6:ab:32:93:e3:79:e3:1f:fe:12:1d:db:6f:15:5e:
                    8c:a2:fe:35:c7:3c:fb:de:6f:37:76:0a:6e:4b:f7:
                    1d:06:7f:b9:86:24:50:87:50:ec:8e:90:e4:f3:93:
                    ff:b4:c2:dd:78:e5:83:82:49:c7:df:7f:ec:fe:91:
                    6d:98:a3:25:7e:d8:44:ac:e7:07:9c:67:c3:0a:d0:
                    8f:24:a3:dd:db:fa:96:da:19:6f:5d:b3:34:28:81:
                    b8:1e:ff:b9:2a:74:d5:e8:cb:03:e7:44:87:17:9b:
                    ba:13:b1:a2:9e:f7:ca:c1:06:b5:22:d0:31:f4:4a:
                    de:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DC:4A:FD:FC:07:67:7A:7E:92:92:ED:92:01:8F:A1:2B:A3:B8:D4
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e31332e302f32342d3234203d3e203535303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:03:ef:2b:c3:69:3f:47:83:ee:af:5f:9c:86:11:76:af:fa:
         ac:dd:d7:ef:f5:e8:6c:bf:62:24:90:7f:03:29:45:23:59:e7:
         a3:50:2e:b6:11:78:27:ce:b5:6d:59:ea:6b:34:06:c2:23:16:
         2f:da:a2:25:f4:c0:42:8b:94:58:ef:4b:b7:b1:d1:85:9d:67:
         32:c9:8b:5f:bb:4a:18:31:22:34:f7:5d:e9:81:34:e8:ca:41:
         6c:0b:5c:6a:23:86:49:e3:cc:59:d8:fe:4e:1b:fb:e7:6d:d0:
         56:e5:87:f2:ee:c1:51:66:1f:97:36:53:37:48:6e:c5:f9:f5:
         2e:85:ad:7b:5b:8b:09:60:23:b2:17:d1:30:c7:8a:d5:ca:e5:
         ee:0f:a3:e1:2f:18:7d:48:4b:4a:ef:86:9b:2d:e2:b2:f6:e8:
         29:3a:e9:96:db:02:2f:46:23:3b:3c:3a:6d:d4:d1:f5:a9:9b:
         74:44:bc:e9:55:4a:33:e3:31:96:1d:15:06:56:cb:34:71:0a:
         a5:e0:20:1e:16:6a:f1:ed:13:5e:82:8e:43:21:66:7e:69:54:
         7a:7c:ad:8a:8c:33:06:1f:3e:1a:e0:b4:00:ef:9f:22:87:55:
         87:e7:bc:db:95:06:4f:87:ea:d1:cb:98:f1:43:37:d2:b8:be:
         18:0f:66:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:38:07 2026 by rpki-client