Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137322e302f32322d3332203d3e20323731333030.roa
File:                     3138392e39312e3137322e302f32322d3332203d3e20323731333030.roa (raw, json)
Hash identifier:          OVGzAJZtSkSwGob6KlbA7ZufRig9MuRkixP5nrxda/4=
Subject key identifier:   FB:6C:23:D8:71:BA:09:77:EB:4B:CF:EA:A3:F3:1B:07:6A:5B:83:74
Certificate issuer:       /CN=4FE40A6F50732749EF4639D0CD3746356543A732
Certificate serial:       41C475314199E57A39B0B58B5F3195F53BD49B55
Authority key identifier: 4F:E4:0A:6F:50:73:27:49:EF:46:39:D0:CD:37:46:35:65:43:A7:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE40A6F50732749EF4639D0CD3746356543A732.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137322e302f32322d3332203d3e20323731333030.roa
Signing time:             Fri 09 Oct 2026 14:14:34 +0000
ROA not before:           Fri 09 Oct 2026 14:09:34 +0000
ROA not after:            Fri 08 Oct 2027 14:14:34 +0000
asID:                     271300
IP address blocks:        189.91.172.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/4FE40A6F50732749EF4639D0CD3746356543A732.crl
                          rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/4FE40A6F50732749EF4639D0CD3746356543A732.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE40A6F50732749EF4639D0CD3746356543A732.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 12:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c4:75:31:41:99:e5:7a:39:b0:b5:8b:5f:31:95:f5:3b:d4:9b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE40A6F50732749EF4639D0CD3746356543A732
        Validity
            Not Before: Oct  9 14:09:34 2026 GMT
            Not After : Oct  8 14:14:34 2027 GMT
        Subject: CN=FB6C23D871BA0977EB4BCFEAA3F31B076A5B8374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:b6:60:03:06:64:c6:e6:7a:7e:95:59:c2:
                    93:63:f8:45:b8:92:c2:6c:a5:4d:15:ac:27:31:e3:
                    f5:24:24:cd:20:8a:b9:62:37:9a:72:b8:36:37:bf:
                    7b:a2:57:8a:5a:6b:6a:e2:18:2d:6d:e3:58:62:48:
                    e0:a9:cf:ad:ef:5d:20:f2:cd:45:d8:d1:7f:c5:06:
                    71:5e:b0:d0:7d:f8:f2:2c:a4:7d:14:cf:94:97:ff:
                    eb:16:ea:87:ad:10:8f:87:2a:74:87:53:38:99:67:
                    b1:be:5a:d2:27:0c:52:bc:31:41:23:5c:9c:15:ec:
                    f7:6b:e9:21:c5:c8:f6:67:c5:35:92:e4:d0:34:3a:
                    5d:1f:a5:b2:0c:ce:60:ef:a5:9a:e0:1e:77:86:17:
                    c1:16:b7:d7:25:8c:ff:93:02:4c:83:d5:39:6f:94:
                    ca:45:4a:f1:7e:fe:a2:cf:cf:d1:80:60:52:c3:7c:
                    17:c3:fc:04:2e:f3:6f:0f:82:41:78:0d:bb:b9:13:
                    88:44:c7:11:20:c2:7e:f7:7d:39:96:f0:65:70:4b:
                    26:bd:b3:86:8b:71:60:84:ba:2c:a4:72:fa:01:ab:
                    7e:f8:15:d5:c0:37:aa:1d:84:2f:67:b9:65:9f:0e:
                    86:f9:f5:a1:f8:42:c3:30:a5:da:54:e6:7e:72:57:
                    78:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6C:23:D8:71:BA:09:77:EB:4B:CF:EA:A3:F3:1B:07:6A:5B:83:74
            X509v3 Authority Key Identifier:
                keyid:4F:E4:0A:6F:50:73:27:49:EF:46:39:D0:CD:37:46:35:65:43:A7:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/4FE40A6F50732749EF4639D0CD3746356543A732.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE40A6F50732749EF4639D0CD3746356543A732.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137322e302f32322d3332203d3e20323731333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:da:ed:71:e8:f9:f0:e0:7b:8e:e0:4e:b0:d8:46:00:be:55:
         69:7a:c4:56:fe:0d:2a:79:37:79:13:ed:b4:5f:d8:0a:68:3f:
         df:2f:ea:64:55:5b:27:8c:02:0a:65:4d:8b:53:d8:fa:52:9a:
         ee:b4:dc:6b:a1:1e:94:ed:6d:39:74:88:61:cb:cc:3e:87:a4:
         f0:da:b6:1d:eb:79:77:9e:80:b5:73:3b:fd:fa:ce:19:3c:13:
         b4:0a:53:f4:04:2a:56:68:5c:4c:ce:16:96:88:38:19:f5:a4:
         c3:84:a5:30:59:ac:42:d5:c6:ee:28:59:c1:d0:f9:bc:ec:6f:
         ae:7e:c5:e5:b0:6b:37:07:e9:f0:53:54:a9:93:6e:b5:11:da:
         3d:b6:70:85:15:9d:21:96:68:62:7a:2e:26:d6:f9:70:e5:43:
         33:4a:3d:a9:33:9c:7c:0d:00:6f:a2:06:ff:80:5b:6e:b4:12:
         f3:d7:c3:8a:1d:69:31:25:8a:28:a1:61:6d:e3:95:ca:70:52:
         2d:35:87:65:ff:e2:a1:2e:c4:df:35:3b:b9:4f:76:21:a0:1d:
         4e:20:13:99:95:c9:95:db:b3:b2:02:bf:a6:1d:f8:bc:22:8b:
         7f:c0:e4:ec:ab:8f:f9:a9:b1:36:a7:36:7d:48:7c:65:33:42:
         43:a9:da:86
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQcR1MUGZ5Xo5sLWLXzGV9TvUm1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZFNDBBNkY1MDczMjc0OUVGNDYzOUQwQ0QzNzQ2MzU2
NTQzQTczMjAeFw0yNjEwMDkxNDA5MzRaFw0yNzEwMDgxNDE0MzRaMDMxMTAvBgNV
BAMTKEZCNkMyM0Q4NzFCQTA5NzdFQjRCQ0ZFQUEzRjMxQjA3NkE1QjgzNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvlrZgAwZkxuZ6fpVZwpNj+EW4
ksJspU0VrCcx4/UkJM0girliN5pyuDY3v3uiV4paa2riGC1t41hiSOCpz63vXSDy
zUXY0X/FBnFesNB9+PIspH0Uz5SX/+sW6oetEI+HKnSHUziZZ7G+WtInDFK8MUEj
XJwV7Pdr6SHFyPZnxTWS5NA0Ol0fpbIMzmDvpZrgHneGF8EWt9cljP+TAkyD1Tlv
lMpFSvF+/qLPz9GAYFLDfBfD/AQu828PgkF4Dbu5E4hExxEgwn73fTmW8GVwSya9
s4aLcWCEuiykcvoBq374FdXAN6odhC9nuWWfDob59aH4QsMwpdpU5n5yV3gnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+2wj2HG6CXfrS8/qo/MbB2pbg3QwHwYDVR0j
BBgwFoAUT+QKb1BzJ0nvRjnQzTdGNWVDpzIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVDZ1ZyY3ZoUlRyTkJZUmlBS0Q5U2JzNUo5YjEzM1R2SnNvU1VaRHBq
ZjcvMC80RkU0MEE2RjUwNzMyNzQ5RUY0NjM5RDBDRDM3NDYzNTY1NDNBNzMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGRTQwQTZGNTA3MzI3NDlF
RjQ2MzlEMENEMzc0NjM1NjU0M0E3MzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1Q2dWcmN2aFJUck5CWVJpQUtEOVNiczVKOWIxMzNUdkpzb1NVWkRwamY3LzAv
MzEzODM5MmUzOTMxMmUzMTM3MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzEzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9W6wwDQYJKoZIhvcNAQELBQADggEBAHTa7XHo
+fDge47gTrDYRgC+VWl6xFb+DSp5N3kT7bRf2ApoP98v6mRVWyeMAgplTYtT2PpS
mu603GuhHpTtbTl0iGHLzD6HpPDath3reXeegLVzO/36zhk8E7QKU/QEKlZoXEzO
FpaIOBn1pMOEpTBZrELVxu4oWcHQ+bzsb65+xeWwazcH6fBTVKmTbrUR2j22cIUV
nSGWaGJ6LibW+XDlQzNKPakznHwNAG+iBv+AW260EvPXw4odaTEliiihYW3jlcpw
Ui01h2X/4qEuxN81O7lPdiGgHU4gE5mVyZXbs7ICv6Yd+Lwii3/A5Oyrj/mpsTan
Nn1IfGUzQkOp2oY=
-----END CERTIFICATE-----
Generated at Tue Nov 3 15:33:41 2026 by rpki-client