Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37352e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e37352e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          GosbHVDQp+SaIE7XTuK7vEvfajHRInK61GftIy6bM5Q=
Subject key identifier:   01:3C:3C:E1:28:9B:CE:F1:59:AE:1A:B2:C9:D4:56:D0:C6:17:6B:1B
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       544349896E0C05CA8FF22877A66B6297798613B0
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37352e302f32342d3332203d3e203532353830.roa
Signing time:             Mon 07 Sep 2026 12:40:07 +0000
ROA not before:           Mon 07 Sep 2026 12:35:07 +0000
ROA not after:            Mon 06 Sep 2027 12:40:07 +0000
asID:                     52580
IP address blocks:        186.195.75.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 02:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:43:49:89:6e:0c:05:ca:8f:f2:28:77:a6:6b:62:97:79:86:13:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Sep  7 12:35:07 2026 GMT
            Not After : Sep  6 12:40:07 2027 GMT
        Subject: CN=013C3CE1289BCEF159AE1AB2C9D456D0C6176B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:92:12:12:5f:96:a2:68:a9:09:86:b9:5f:
                    4f:f1:15:fa:fd:10:40:b3:85:08:ef:04:fa:9a:91:
                    88:80:ed:7b:fc:ec:34:e5:42:4c:d0:7e:f1:9f:91:
                    f3:f6:99:2f:d9:5c:18:e1:2d:9b:d2:b9:bd:8b:1f:
                    85:04:fb:c3:e9:8d:68:08:4b:35:3a:54:b1:2f:e7:
                    1d:ce:ca:b3:b7:da:2a:7a:ca:b4:15:ed:48:66:8c:
                    9f:e8:16:63:26:32:d8:a8:65:5e:44:b0:9c:57:c5:
                    32:33:17:61:88:37:0c:3a:21:dd:7d:c2:0a:38:4a:
                    47:b6:e9:51:02:6d:41:c7:43:52:ad:a3:4f:61:16:
                    8d:6a:7f:af:e4:14:12:9d:1e:c4:4d:b1:13:fb:68:
                    4d:56:83:43:7c:2a:d9:8f:09:bb:76:d7:7b:cd:2c:
                    31:bd:2d:b7:15:c3:b7:41:0d:3b:71:25:05:f4:d7:
                    d7:0b:95:1e:b7:1a:a7:ae:7d:83:4f:87:d1:32:6a:
                    6f:61:0f:5a:31:f1:f1:76:7e:c4:33:de:d0:7d:35:
                    d4:2d:e4:31:7f:9e:40:bc:c5:a5:34:d6:3c:9a:56:
                    1b:d7:b2:f1:8b:e9:1e:aa:83:ba:5b:ce:c8:9c:05:
                    68:16:87:13:fc:42:6b:4f:ab:5d:b2:2b:c5:26:1b:
                    f2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3C:3C:E1:28:9B:CE:F1:59:AE:1A:B2:C9:D4:56:D0:C6:17:6B:1B
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37352e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:0a:d6:c7:c2:c0:fc:b7:3f:69:00:1e:cf:96:33:c6:ab:a0:
         68:71:44:9d:c6:25:b9:c7:d8:0e:9e:08:03:c6:27:6a:99:47:
         a8:8b:50:7f:ad:85:fd:c9:ff:df:ed:27:4b:f8:6b:1b:05:a9:
         1c:47:49:9e:59:c4:4e:cc:b5:9a:44:8f:d9:f4:9a:b0:00:e9:
         46:52:31:c1:9c:83:0d:0e:4d:ab:3c:fb:a6:52:7e:3d:55:4c:
         03:81:38:14:88:dc:6e:60:c8:bf:a6:9b:12:38:2c:58:f3:d2:
         5d:48:c7:9f:77:aa:e7:60:0f:ef:3b:47:a9:78:44:98:cb:df:
         d6:e8:23:7b:d4:f3:c2:70:7e:1e:ec:0d:dc:0e:a7:4f:50:8c:
         37:4f:9b:20:01:76:aa:32:b1:98:fe:3c:0f:04:f9:db:6f:d2:
         0b:24:13:c8:6d:0d:7c:cd:9e:fd:5b:a0:1c:21:8b:c7:17:d8:
         ec:d8:2c:fb:5e:50:36:8b:57:40:4d:71:02:50:63:90:40:25:
         6d:c1:aa:1f:6f:51:d6:da:07:48:e8:79:13:8a:7c:88:c2:fe:
         a9:53:96:eb:f7:a9:05:ea:74:5b:be:0e:0f:c0:cc:5c:d1:20:
         dc:ee:54:84:41:82:57:59:b1:83:01:7a:87:49:28:9d:f3:1d:
         e1:7d:5e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:38:11 2026 by rpki-client