Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e33322e302f32302d3234203d3e203533303535.roa
File:                     3138362e3139362e33322e302f32302d3234203d3e203533303535.roa (raw, json)
Hash identifier:          35JQVKEVYjmU5wEghV6leCbx0PhWpHk2qjCMRK/hY6E=
Subject key identifier:   EB:D7:02:54:A6:5F:26:78:01:5D:62:68:29:4A:55:71:DA:27:F2:A8
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       746146A7069C974C7AF6DFA88479D735E1DD9F84
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e33322e302f32302d3234203d3e203533303535.roa
Signing time:             Fri 02 Oct 2026 20:34:51 +0000
ROA not before:           Fri 02 Oct 2026 20:29:51 +0000
ROA not after:            Fri 01 Oct 2027 20:34:51 +0000
asID:                     53055
IP address blocks:        186.196.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl
                          rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 20:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:61:46:a7:06:9c:97:4c:7a:f6:df:a8:84:79:d7:35:e1:dd:9f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: Oct  2 20:29:51 2026 GMT
            Not After : Oct  1 20:34:51 2027 GMT
        Subject: CN=EBD70254A65F2678015D6268294A5571DA27F2A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:25:ec:57:05:a8:94:15:f8:0d:85:f0:e1:44:
                    dd:84:fb:84:01:2a:6b:99:61:88:a1:06:e7:22:56:
                    64:0c:0a:33:13:04:8a:26:e3:e5:3e:62:94:df:ce:
                    e4:89:7b:86:1b:dc:87:4d:c6:97:cc:80:c6:e1:be:
                    69:e6:ca:a6:f7:56:37:cf:55:09:1f:81:56:be:8a:
                    f9:96:8d:56:40:9d:f0:ee:c8:24:fa:1a:50:a3:92:
                    d6:0e:40:4a:e3:e8:9c:52:d5:79:8a:40:31:1f:46:
                    1e:d2:c6:16:a2:0e:d6:a5:c8:b2:bd:ab:c4:66:ae:
                    ab:6c:1a:20:3b:92:3a:44:b8:58:70:6d:41:88:f1:
                    c9:d1:df:a9:7e:0c:19:52:1d:51:88:5d:88:ee:00:
                    00:d4:9d:62:ae:01:13:56:8b:79:fd:dc:80:cd:44:
                    56:5d:3b:ae:76:04:76:54:e6:36:45:91:af:cd:2d:
                    69:0d:b6:c5:4d:d6:e0:85:2e:93:fc:8b:9a:43:03:
                    e8:39:37:88:93:50:a9:92:01:0e:ef:69:f4:59:00:
                    86:91:7d:f6:24:69:fd:cb:ac:46:e6:fe:ea:3d:73:
                    3a:e0:9f:c1:8a:e5:c8:0e:4b:ee:bb:ed:d1:8e:4e:
                    f2:e1:5b:9d:6f:e4:7c:ec:3d:14:15:c4:71:46:5f:
                    db:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D7:02:54:A6:5F:26:78:01:5D:62:68:29:4A:55:71:DA:27:F2:A8
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e33322e302f32302d3234203d3e203533303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:df:ef:7e:bb:ac:ae:3b:59:0f:9b:d1:8c:5f:50:1f:27:dc:
         5e:6f:94:ba:61:ec:8d:16:9c:f7:cc:07:8d:94:50:11:6e:28:
         18:54:63:9d:83:9e:eb:70:c3:7f:b7:fd:d0:80:7b:db:8f:91:
         02:88:d3:7a:14:ea:ae:a0:6f:53:ca:09:8b:4c:20:b7:f6:bd:
         9d:37:4a:b3:b0:00:13:8c:a0:05:99:cb:39:a8:00:de:ca:ae:
         24:cb:c4:b2:9b:36:19:18:69:16:93:4b:67:52:85:7b:b0:07:
         ba:02:4e:de:8c:60:03:df:0b:30:de:74:b6:9b:15:dd:b3:a4:
         86:aa:bf:13:37:a7:05:ae:47:91:b7:f8:b8:71:74:13:58:62:
         7c:16:f8:cb:91:3f:0c:62:41:05:d8:9a:8a:38:88:35:15:13:
         e6:ad:93:0a:d3:bd:c6:e2:17:1e:c2:d2:fb:d1:a5:e1:e7:1c:
         7e:0e:07:d7:31:71:a9:42:55:a6:87:57:30:5f:bb:50:4e:47:
         a2:ad:e2:8c:71:97:7b:ed:bb:97:1f:e1:e3:e8:7d:49:00:29:
         8b:0b:37:46:dd:d0:51:7a:bf:83:68:f3:47:6d:2a:76:a4:3d:
         b1:01:22:66:59:e1:e2:58:d7:8c:84:c6:43:6a:50:b1:71:9f:
         15:12:7a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:13:42 2026 by rpki-client