Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31322e302f32322d3234203d3e20323635333737.roa
File:                     3136382e3139342e31322e302f32322d3234203d3e20323635333737.roa (raw, json)
Hash identifier:          V2l6zSpJS7pKeSL0qVkQMBRprNxxsQq75q1RS2INOr0=
Subject key identifier:   DD:B2:40:60:50:2E:D5:83:39:42:32:08:4B:52:45:0F:B9:98:06:2B
Certificate issuer:       /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial:       1BE7C09963CBE337E2BE3D0BB583D5530E88D8AF
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31322e302f32322d3234203d3e20323635333737.roa
Signing time:             Wed 17 Jun 2026 19:48:55 +0000
ROA not before:           Wed 17 Jun 2026 19:43:55 +0000
ROA not after:            Wed 16 Jun 2027 19:48:55 +0000
asID:                     265377
IP address blocks:        168.194.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
                          rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e7:c0:99:63:cb:e3:37:e2:be:3d:0b:b5:83:d5:53:0e:88:d8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
        Validity
            Not Before: Jun 17 19:43:55 2026 GMT
            Not After : Jun 16 19:48:55 2027 GMT
        Subject: CN=DDB24060502ED583394232084B52450FB998062B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4b:85:1b:8a:a4:86:62:2c:d6:35:27:a1:74:
                    30:36:9a:49:d8:ac:6c:2e:85:5a:21:92:58:af:31:
                    82:95:64:7c:b1:e0:61:74:02:42:da:8a:a0:57:92:
                    97:52:99:23:47:18:fd:98:3c:3f:f6:0b:e7:8a:50:
                    08:cd:e2:73:5d:23:fb:30:ef:a9:15:6e:b5:ee:17:
                    9f:3d:ae:5e:1c:d2:13:c3:29:95:8d:f0:e5:58:50:
                    0f:94:1e:f5:38:82:6e:e4:a2:ac:7b:a1:69:d4:63:
                    18:f8:f7:8a:64:da:d8:9d:36:e3:ed:35:7f:68:75:
                    76:11:b3:5b:53:7d:94:d8:fa:2c:a0:25:11:ca:51:
                    6f:93:aa:39:cc:18:88:da:0e:84:b9:0d:42:e2:2b:
                    d8:5f:05:8e:58:9b:7a:85:57:7a:bf:0e:7a:a9:e3:
                    90:01:a2:be:d1:f3:5f:f8:2e:b0:40:c0:3e:75:11:
                    74:c4:9b:59:50:fa:6e:b1:d7:df:d9:fc:03:74:2a:
                    7b:1c:99:c7:de:b3:cf:c0:d0:5c:60:54:54:39:ab:
                    ac:09:cc:16:79:b0:1b:3d:0e:ab:82:d5:86:80:12:
                    b4:a2:c6:5f:85:61:f5:64:07:23:22:3a:33:45:a0:
                    b1:9d:39:3d:cc:6c:e6:4b:a1:3c:b5:9d:8d:14:42:
                    05:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B2:40:60:50:2E:D5:83:39:42:32:08:4B:52:45:0F:B9:98:06:2B
            X509v3 Authority Key Identifier:
                keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31322e302f32322d3234203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:d0:e4:a3:09:bb:99:8d:e0:fd:6e:17:ac:07:95:0e:bb:8f:
         2e:8d:75:4e:7d:5b:70:f7:41:c5:9c:a2:0f:ac:99:fd:15:6a:
         c0:7c:8c:48:47:16:8e:3c:6f:04:df:cd:d6:a1:bc:50:91:25:
         89:78:52:bd:81:a5:c4:47:9b:8a:7c:ec:c3:20:d5:ab:3e:e4:
         c8:70:61:f8:9a:c9:10:ad:e9:23:10:80:1e:e8:22:13:a1:1e:
         8d:c4:55:f8:3b:44:db:e2:77:f8:61:4d:4c:36:b6:95:18:de:
         43:45:67:f3:bd:f3:a4:84:17:c4:65:21:9f:98:32:30:0b:36:
         f0:4b:d6:ff:8f:fe:46:f4:c8:85:7b:19:8f:c7:aa:3e:16:62:
         20:7c:7e:53:ad:f2:93:58:0d:0f:99:8d:03:40:a3:c4:51:3f:
         e7:6f:c6:61:d8:10:3d:2d:13:ec:50:d5:f1:ff:bf:b8:3a:0b:
         6c:83:72:89:61:39:e7:da:e5:b9:5a:86:5d:89:73:2a:f4:1e:
         b1:5b:25:fa:9e:52:20:61:04:67:13:4d:cf:f6:7e:c7:4e:42:
         93:30:e7:7e:fe:89:09:ad:38:50:40:2b:33:44:e3:87:31:a2:
         d3:39:60:5f:35:2c:7b:67:28:3c:75:07:ea:10:56:90:85:9d:
         92:fb:d6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:10:19 2026 by rpki-client