Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e382e302f32322d3234203d3e203535303535.roa
File:                     3138362e3139362e382e302f32322d3234203d3e203535303535.roa (raw, json)
Hash identifier:          C7CfeclGH4ofrO2owD42OnKQjXof6UcIdC9VAIsDUW8=
Subject key identifier:   CA:75:39:CA:49:4C:EA:E8:D7:BD:2D:65:B9:69:1E:E3:50:90:AE:F3
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       44345F6B65F0F5CFAF7DF66B8E74F4BA367202E4
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e382e302f32322d3234203d3e203535303535.roa
Signing time:             Wed 22 Jul 2026 13:46:31 +0000
ROA not before:           Wed 22 Jul 2026 13:41:31 +0000
ROA not after:            Wed 21 Jul 2027 13:46:31 +0000
asID:                     55055
IP address blocks:        186.196.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl
                          rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:34:5f:6b:65:f0:f5:cf:af:7d:f6:6b:8e:74:f4:ba:36:72:02:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: Jul 22 13:41:31 2026 GMT
            Not After : Jul 21 13:46:31 2027 GMT
        Subject: CN=CA7539CA494CEAE8D7BD2D65B9691EE35090AEF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1f:c8:1a:0d:29:b6:08:16:3b:65:8c:9d:12:
                    94:ab:20:6f:e5:10:4a:bb:ae:8d:86:9d:09:54:71:
                    2d:26:33:2f:8d:90:1b:db:25:a1:b8:61:83:bb:da:
                    ab:a9:2f:4d:db:1c:ff:eb:a8:0e:f6:8b:b1:25:4b:
                    93:f2:88:ea:8b:cf:e1:d3:7e:2f:7f:52:0a:b7:f4:
                    97:85:8b:04:a8:e7:b5:7e:2b:44:18:43:7a:b0:b1:
                    78:a4:03:2b:8a:45:21:9f:a2:53:7b:8c:aa:4f:c1:
                    24:4c:4d:fc:2c:9a:48:48:30:d2:d3:04:90:17:b1:
                    24:5a:6b:92:eb:39:c6:a1:d3:85:57:c8:ff:e5:0d:
                    31:4c:85:ab:8f:e2:b2:26:af:29:a6:6e:47:b4:24:
                    29:b9:07:03:d2:83:f8:3a:a9:ce:f9:53:7a:b9:85:
                    8f:b6:16:c3:ad:aa:30:8d:66:58:d1:b1:ec:cb:20:
                    1a:17:78:e9:bb:4f:8e:75:7c:7d:15:11:0d:d3:5f:
                    1c:59:32:0d:ca:6e:ed:21:4c:18:95:a3:d7:a2:16:
                    2f:6b:77:6e:85:e9:c3:89:73:11:74:d2:ff:13:ab:
                    d5:70:27:2b:55:25:3d:69:f9:08:36:57:17:38:3e:
                    df:4f:10:8d:55:6c:ca:f3:6a:f2:f5:a3:cb:d6:55:
                    a0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:75:39:CA:49:4C:EA:E8:D7:BD:2D:65:B9:69:1E:E3:50:90:AE:F3
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e382e302f32322d3234203d3e203535303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:11:85:2c:68:c4:a8:09:1b:4e:d6:1a:33:a5:ef:c3:64:7a:
         25:1b:12:aa:34:3c:ee:70:a0:e0:39:c9:ef:96:75:46:06:6d:
         a5:8c:d1:6b:dd:27:20:02:b1:22:0e:7e:ce:ef:d7:9c:b9:9d:
         24:8a:b4:ee:0d:91:64:aa:d5:c5:83:4e:cc:17:1e:08:86:60:
         2a:24:db:ad:01:16:49:c3:57:e6:9d:15:11:d1:cf:64:32:f7:
         22:70:81:32:df:02:50:8a:22:a3:09:4e:00:2f:0f:b9:6d:24:
         7b:47:dc:39:76:37:1a:d1:39:e2:f1:21:97:39:e4:35:6c:c6:
         d2:7c:c5:27:7a:55:23:71:36:ec:dc:b4:af:fb:ee:fd:93:bf:
         54:bd:ea:c2:10:11:6c:58:f4:80:12:85:32:1c:2a:89:82:11:
         2d:69:e8:5a:f2:ad:97:63:aa:b0:db:13:a7:2d:49:d4:8b:00:
         36:b3:b3:ac:28:e8:4e:bc:31:e6:d3:63:2c:dd:42:2f:a3:8c:
         78:1d:58:85:6b:0e:b8:48:2d:e3:ea:7d:d3:0c:fb:ab:95:09:
         bb:9f:ad:94:a1:cd:b4:21:79:2d:1a:e7:a4:4a:c2:7e:e1:96:
         69:c4:88:ff:34:2d:0b:f0:60:ad:16:4f:04:6c:64:33:f5:12:
         94:15:ee:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:38:03 2026 by rpki-client