Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e31362e302f32302d3234203d3e203238313235.roa
File:                     3138372e31392e31362e302f32302d3234203d3e203238313235.roa (raw, json)
Hash identifier:          /ot4KGpH/tqmwpJyx6ouOrTL20ouW0YqcaUdIRGnRl8=
Subject key identifier:   9D:AF:A1:1C:AE:E2:8B:E5:4A:39:A1:94:3E:80:F0:FD:58:4D:7F:7C
Certificate issuer:       /CN=040A99E102503B9DD68DAF74A5564601C25CBFF1
Certificate serial:       6D5E1275FAFB7F7C36514DF1874D37B9912EA297
Authority key identifier: 04:0A:99:E1:02:50:3B:9D:D6:8D:AF:74:A5:56:46:01:C2:5C:BF:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/040A99E102503B9DD68DAF74A5564601C25CBFF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e31362e302f32302d3234203d3e203238313235.roa
Signing time:             Mon 23 Mar 2026 13:24:13 +0000
ROA not before:           Mon 23 Mar 2026 13:19:13 +0000
ROA not after:            Mon 22 Mar 2027 13:24:13 +0000
asID:                     28125
IP address blocks:        187.19.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.crl
                          rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/040A99E102503B9DD68DAF74A5564601C25CBFF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5e:12:75:fa:fb:7f:7c:36:51:4d:f1:87:4d:37:b9:91:2e:a2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=040A99E102503B9DD68DAF74A5564601C25CBFF1
        Validity
            Not Before: Mar 23 13:19:13 2026 GMT
            Not After : Mar 22 13:24:13 2027 GMT
        Subject: CN=9DAFA11CAEE28BE54A39A1943E80F0FD584D7F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:47:5c:bb:e4:d0:e4:03:73:3a:1e:19:aa:93:
                    13:34:5a:1c:98:f2:2a:c6:3c:c6:22:3f:2d:54:ba:
                    bb:e8:1c:db:83:f2:60:85:3d:6d:7e:e4:85:f1:ff:
                    6e:59:5d:06:96:20:8b:28:ac:1c:55:a2:4a:60:f1:
                    19:66:f3:84:3e:0a:3f:4a:c0:57:bc:4d:b7:2c:ce:
                    c2:7b:dc:8b:80:76:87:c2:f7:42:39:2f:90:13:29:
                    20:a5:26:8a:b9:a1:f3:20:b6:31:62:ae:ae:39:c5:
                    b3:c4:b3:31:97:62:25:b8:ee:c4:77:22:2e:07:a2:
                    6f:a6:ad:97:42:c9:c2:0c:3c:69:21:76:48:3b:e5:
                    b0:d0:7a:9f:83:77:22:b2:7b:91:3f:2b:59:6b:08:
                    02:a3:d5:e6:91:ca:8b:42:8b:ca:ae:8e:d2:fb:56:
                    75:ab:71:ad:c4:17:e9:c0:fb:e2:09:e5:34:93:f3:
                    25:bd:54:b9:0c:28:45:d5:1b:a3:0d:7c:0f:09:d6:
                    ef:d1:75:26:18:7f:b0:8a:79:6c:4c:1a:99:fb:af:
                    83:0b:b0:7c:bc:c4:5a:d2:7e:67:b8:b9:a9:15:74:
                    50:08:bb:aa:38:52:80:5e:e1:b4:8c:f0:4e:aa:2f:
                    4b:eb:10:f8:85:47:90:c9:05:13:1f:5f:dd:ac:ee:
                    83:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AF:A1:1C:AE:E2:8B:E5:4A:39:A1:94:3E:80:F0:FD:58:4D:7F:7C
            X509v3 Authority Key Identifier:
                keyid:04:0A:99:E1:02:50:3B:9D:D6:8D:AF:74:A5:56:46:01:C2:5C:BF:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/040A99E102503B9DD68DAF74A5564601C25CBFF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e31362e302f32302d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:aa:87:32:39:5f:10:c6:3b:9e:1b:74:eb:24:f2:aa:d0:c3:
         9d:7f:75:90:e7:22:e7:ba:b2:81:8b:0b:13:be:fe:39:98:99:
         0d:f0:78:12:f5:55:b6:c7:1d:6c:6c:d5:0f:4c:2a:b2:03:f3:
         f9:c1:f3:9f:a0:32:60:9c:92:e5:38:fe:f6:f9:f8:e0:be:de:
         03:81:97:46:d0:2a:63:8a:72:7d:da:fc:a0:af:12:9e:d6:4a:
         d4:3b:1d:52:b8:39:79:47:52:78:dd:28:80:b1:a2:af:22:15:
         3f:12:ac:33:61:1e:94:83:6a:50:99:3f:5d:02:bd:34:69:68:
         91:f1:eb:44:69:99:9f:46:d4:df:03:27:eb:f5:7f:1b:0a:88:
         e9:d7:7e:05:2b:25:7d:57:55:ce:d7:43:40:98:66:25:81:8b:
         c1:f9:65:f2:c3:24:21:f1:e6:81:f6:db:9e:da:a1:63:85:f9:
         b9:cd:27:fe:dd:9b:04:eb:eb:97:82:23:68:e9:8f:2f:c6:b0:
         09:17:64:68:ee:7d:8d:9d:5e:bc:2e:96:c8:aa:df:53:2f:f6:
         04:b1:30:44:11:c8:6c:7a:03:d9:c7:2d:43:d1:7f:9f:7a:ef:
         a5:40:17:ad:e9:52:65:6c:71:14:f0:8b:5e:d3:48:7e:04:30:
         8b:17:76:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:19:15 2026 by rpki-client