Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3232362e3231372e302f32342d3234203d3e20323733343433.roa
File:                     3138362e3232362e3231372e302f32342d3234203d3e20323733343433.roa (raw, json)
Hash identifier:          v8c7u8ZTKfG0sR3/j8hOn7yBzotJKelyavvU9MBs3JI=
Subject key identifier:   03:1F:12:AD:98:47:81:32:AB:C3:FF:4C:02:5A:5F:07:6C:80:5E:9F
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       26FC0985F7D0E3450C64B0CF46B64E49025E2322
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3232362e3231372e302f32342d3234203d3e20323733343433.roa
Signing time:             Tue 05 May 2026 14:06:34 +0000
ROA not before:           Tue 05 May 2026 14:01:34 +0000
ROA not after:            Tue 04 May 2027 14:06:34 +0000
asID:                     273443
IP address blocks:        186.226.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fc:09:85:f7:d0:e3:45:0c:64:b0:cf:46:b6:4e:49:02:5e:23:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: May  5 14:01:34 2026 GMT
            Not After : May  4 14:06:34 2027 GMT
        Subject: CN=031F12AD98478132ABC3FF4C025A5F076C805E9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e1:61:54:6f:d6:ab:cc:0f:f3:a7:b0:b5:57:
                    62:b6:b3:c5:9d:d5:93:86:8a:02:72:43:b0:47:9b:
                    3b:41:aa:c7:c1:e9:d1:d8:34:2e:da:73:e7:8b:47:
                    65:d2:2b:e3:5e:be:42:60:44:df:ed:3c:bc:03:6d:
                    34:32:29:2c:a3:d3:0c:a6:97:d7:d8:71:6e:27:45:
                    1c:ca:f6:0b:1e:fc:d3:81:6d:f2:82:f8:e8:5b:fc:
                    d3:f4:31:b6:79:26:b6:b5:16:56:5d:d1:22:bb:fa:
                    ee:e9:41:db:27:3f:29:e4:4e:3f:de:09:72:c2:f0:
                    03:66:a0:58:ce:9f:a5:91:e5:a9:26:ab:f1:aa:d8:
                    ec:dc:3f:2e:41:73:07:5a:94:ab:67:bd:42:10:62:
                    bf:6d:8a:47:0d:d4:7b:ae:17:cd:81:d3:10:16:36:
                    8a:07:af:27:27:c1:b5:a3:2b:36:9c:b8:25:0e:aa:
                    5d:bc:57:9b:f6:c0:8d:d8:66:f0:b2:25:ba:b2:cb:
                    12:b1:50:ff:34:8a:e4:87:df:48:ee:07:d1:19:8f:
                    62:ac:49:e6:0b:f6:61:4e:10:64:10:06:81:c8:da:
                    9d:50:5a:3a:25:14:91:e2:bf:7c:79:ac:fc:ca:d5:
                    24:ef:57:c3:b5:08:d3:76:25:64:b4:70:e1:ab:92:
                    ed:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1F:12:AD:98:47:81:32:AB:C3:FF:4C:02:5A:5F:07:6C:80:5E:9F
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3232362e3231372e302f32342d3234203d3e20323733343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:c0:8f:45:5f:33:c6:75:0d:0b:39:82:f4:4e:e4:75:d6:fd:
         5d:1a:c5:c6:d0:ca:0d:ad:e1:4a:32:c5:89:4b:bd:9c:6b:6f:
         df:d4:9b:25:e4:e7:34:81:00:e9:db:11:bc:1f:10:d7:d6:40:
         0b:12:86:4b:13:95:49:58:7c:82:20:d4:7a:6a:1b:98:51:e2:
         ca:24:c3:26:05:52:7b:ae:01:85:e6:fe:fd:98:69:10:fd:b3:
         a8:46:08:32:89:15:75:c8:07:29:4b:fa:3c:d8:c5:39:2b:c0:
         f9:56:14:fa:23:d2:1d:6f:70:66:3d:2b:6e:71:01:eb:02:07:
         0f:ba:7c:83:35:95:f8:47:3e:49:1a:ce:4a:50:f9:bd:d6:bf:
         b6:8b:26:43:45:ba:c5:bc:33:20:a1:15:8b:c2:0c:47:f1:f5:
         0a:37:70:1f:05:62:1f:e4:11:fc:15:ab:ec:37:8e:3f:3a:1c:
         21:7f:af:59:5e:53:21:1a:2c:a3:7b:fb:b1:24:64:8b:7a:f7:
         6a:55:77:71:fc:c2:38:e4:dc:a9:40:4a:10:ac:9d:f7:82:3a:
         7f:92:f9:68:c8:cb:e8:54:92:9c:bd:54:2b:73:9c:d8:ed:c0:
         0e:5f:f0:cc:1d:bd:c1:38:c3:ad:c5:1c:1f:71:52:33:5f:a4:
         c2:8e:87:1b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJvwJhffQ40UMZLDPRrZOSQJeIyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAxQUI0QzJDQjI3Njk4QTdFRjA2ODQzMjRENDE2Qjg2
NDZBOUI3NTAeFw0yNjA1MDUxNDAxMzRaFw0yNzA1MDQxNDA2MzRaMDMxMTAvBgNV
BAMTKDAzMUYxMkFEOTg0NzgxMzJBQkMzRkY0QzAyNUE1RjA3NkM4MDVFOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf4WFUb9arzA/zp7C1V2K2s8Wd
1ZOGigJyQ7BHmztBqsfB6dHYNC7ac+eLR2XSK+NevkJgRN/tPLwDbTQyKSyj0wym
l9fYcW4nRRzK9gse/NOBbfKC+Ohb/NP0MbZ5Jra1FlZd0SK7+u7pQdsnPynkTj/e
CXLC8ANmoFjOn6WR5akmq/Gq2OzcPy5BcwdalKtnvUIQYr9tikcN1HuuF82B0xAW
NooHrycnwbWjKzacuCUOql28V5v2wI3YZvCyJbqyyxKxUP80iuSH30juB9EZj2Ks
SeYL9mFOEGQQBoHI2p1QWjolFJHiv3x5rPzK1STvV8O1CNN2JWS0cOGrku0vAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUAx8SrZhHgTKrw/9MAlpfB2yAXp8wHwYDVR0j
BBgwFoAUYBq0wssnaYp+8GhDJNQWuGRqm3UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDh3VDJWcFJMeTdHUWVxRFdyWVh4aG04cndDQ2dhYWNaNmZ6Q2RpaUNm
RzUvMC82MDFBQjRDMkNCMjc2OThBN0VGMDY4NDMyNEQ0MTZCODY0NkE5Qjc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMUFCNEMyQ0IyNzY5OEE3
RUYwNjg0MzI0RDQxNkI4NjQ2QTlCNzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g4d1QyVnBSTHk3R1FlcURXcllYeGhtOHJ3Q0NnYWFjWjZmekNkaWlDZkc1LzAv
MzEzODM2MmUzMjMyMzYyZTMyMzEzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMzM0MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALri2TANBgkqhkiG9w0BAQsFAAOCAQEAysCP
RV8zxnUNCzmC9E7kddb9XRrFxtDKDa3hSjLFiUu9nGtv39SbJeTnNIEA6dsRvB8Q
19ZACxKGSxOVSVh8giDUemobmFHiyiTDJgVSe64Bheb+/ZhpEP2zqEYIMokVdcgH
KUv6PNjFOSvA+VYU+iPSHW9wZj0rbnEB6wIHD7p8gzWV+Ec+SRrOSlD5vda/tosm
Q0W6xbwzIKEVi8IMR/H1CjdwHwViH+QR/BWr7DeOPzocIX+vWV5TIRoso3v7sSRk
i3r3alV3cfzCOOTcqUBKEKyd94I6f5L5aMjL6FSSnL1UK3Oc2O3ADl/wzB29wTjD
rcUcH3FSM1+kwo6HGw==
-----END CERTIFICATE-----
Generated at Wed May 13 17:54:58 2026 by rpki-client