Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3138362e3233322e38382e302f32312d3332203d3e20323639303936.roa
File:                     3138362e3233322e38382e302f32312d3332203d3e20323639303936.roa (raw, json)
Hash identifier:          wNZeRYDXEF1dOBh6q1QR4k0PfZ2FNZO2kuiv0hf6MG4=
Subject key identifier:   31:5E:42:D7:7A:08:76:56:32:70:6D:22:BE:C8:CD:5F:85:59:A1:65
Certificate issuer:       /CN=E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20
Certificate serial:       2ED65345F9AFADBD635B986D52FC650F61A5E4EF
Authority key identifier: E8:9D:DA:5F:F6:82:E4:D4:B2:64:3A:27:1C:5D:49:EB:9D:DC:4E:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3138362e3233322e38382e302f32312d3332203d3e20323639303936.roa
Signing time:             Thu 12 Mar 2026 17:24:40 +0000
ROA not before:           Thu 12 Mar 2026 17:19:40 +0000
ROA not after:            Thu 11 Mar 2027 17:24:40 +0000
asID:                     269096
IP address blocks:        186.232.88.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.crl
                          rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d6:53:45:f9:af:ad:bd:63:5b:98:6d:52:fc:65:0f:61:a5:e4:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20
        Validity
            Not Before: Mar 12 17:19:40 2026 GMT
            Not After : Mar 11 17:24:40 2027 GMT
        Subject: CN=315E42D77A08765632706D22BEC8CD5F8559A165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:23:da:19:5f:50:f3:10:bd:58:f8:82:ba:
                    7c:5c:e1:f4:20:ba:09:38:8d:1c:10:35:98:01:25:
                    e3:d4:88:c1:10:13:fc:d8:23:39:20:6a:d1:c4:60:
                    92:6f:f6:65:3e:5e:32:a7:76:3b:c4:29:28:cd:17:
                    e0:3b:5b:fe:42:c6:76:8a:76:fe:61:ea:41:aa:48:
                    2e:36:7b:d7:6b:3a:b3:c7:e6:26:d1:f2:89:38:5f:
                    99:31:cd:f4:3a:b5:50:ac:4a:eb:23:1d:e7:72:03:
                    f3:9f:1a:bb:2a:2e:b8:2d:56:d0:bc:bc:5c:42:06:
                    75:16:66:2d:95:da:87:5b:a5:1d:ac:b7:0c:97:1e:
                    34:69:12:4b:09:ef:32:f8:29:c6:69:6e:3d:c9:f2:
                    f5:41:8f:14:7c:17:1b:38:f7:84:ad:a2:41:12:e0:
                    52:a8:fa:a6:a3:79:8f:98:43:e1:16:04:91:f2:01:
                    21:1f:db:b0:06:43:cf:6d:16:fd:76:50:22:f8:4d:
                    1a:18:7c:1b:3f:83:14:3a:c6:55:54:ab:21:d8:73:
                    aa:5a:0f:d7:1c:af:b4:78:6c:60:d5:fa:20:e3:0b:
                    4f:90:15:8a:c9:31:f5:00:e5:7c:49:b3:0b:f5:ec:
                    fe:76:5e:59:bc:6a:45:ac:8a:bd:c0:8b:33:0e:77:
                    57:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5E:42:D7:7A:08:76:56:32:70:6D:22:BE:C8:CD:5F:85:59:A1:65
            X509v3 Authority Key Identifier:
                keyid:E8:9D:DA:5F:F6:82:E4:D4:B2:64:3A:27:1C:5D:49:EB:9D:DC:4E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3138362e3233322e38382e302f32312d3332203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0b:68:2d:17:82:07:0a:59:33:4d:73:41:2e:7b:8d:fe:a9:00:
         95:bd:8d:60:34:ab:8c:3c:be:d4:00:e1:97:c8:47:bb:02:8b:
         7f:18:cf:53:d4:79:a0:8c:1b:9d:7d:e3:21:a6:62:40:e5:7f:
         1e:d9:5d:61:76:42:4b:3d:0d:bc:df:cd:05:03:32:f7:de:aa:
         e6:08:80:3d:bf:03:d0:6a:f7:db:4d:a7:91:f6:f7:be:b3:44:
         bf:e7:96:17:b7:5d:51:bf:00:12:32:1c:e6:9a:bf:50:1e:ac:
         03:03:30:07:60:4c:ce:b1:86:3d:dc:fe:43:8a:cd:ff:13:2f:
         8e:c8:bf:b3:62:d8:2f:86:6e:25:a7:cb:6d:02:a7:f8:18:38:
         50:e1:5c:2f:6f:88:55:d5:99:3e:b1:02:a8:8f:05:f8:79:84:
         2b:6a:2d:f0:2a:20:05:d9:ae:9f:76:ae:12:63:bd:29:e0:79:
         5d:ea:d7:a6:c6:86:bd:b9:31:18:46:a1:6d:69:68:63:68:20:
         83:e3:a2:44:a0:4f:d1:c7:3b:40:1b:00:d8:6d:3d:1a:1b:d2:
         96:4a:56:87:57:6c:46:08:47:7e:02:d2:38:4d:fb:0c:dc:67:
         ec:3f:61:54:51:56:10:db:a7:d9:99:e5:8a:10:eb:05:e6:58:
         34:1a:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:38:08 2026 by rpki-client