Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138362e3235312e3134382e302f32322d3234203d3e20313938393439.roa
File:                     3138362e3235312e3134382e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          vm/gPaGTpZPD9kYfzKAuvj9V92Tmc55qNWhLrxuEQlw=
Subject key identifier:   85:0A:07:A8:ED:67:F0:70:D9:FF:18:7D:63:49:0E:44:AF:F3:08:59
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       2569B92FF841EEE602849C44C7C49F1D9EFF1D
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138362e3235312e3134382e302f32322d3234203d3e20313938393439.roa
Signing time:             Wed 18 Mar 2026 01:16:45 +0000
ROA not before:           Wed 18 Mar 2026 01:11:45 +0000
ROA not after:            Wed 17 Mar 2027 01:16:45 +0000
asID:                     198949
IP address blocks:        186.251.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:69:b9:2f:f8:41:ee:e6:02:84:9c:44:c7:c4:9f:1d:9e:ff:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Mar 18 01:11:45 2026 GMT
            Not After : Mar 17 01:16:45 2027 GMT
        Subject: CN=850A07A8ED67F070D9FF187D63490E44AFF30859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e8:10:c0:cf:04:c2:1c:0c:1e:a8:aa:b5:c7:
                    e3:cc:d9:77:fa:e8:08:e7:50:77:74:b8:4a:fe:94:
                    1b:99:55:dc:11:61:a8:28:a2:2a:b0:62:bc:52:82:
                    ef:31:fd:1e:c0:75:9e:3d:14:e2:a9:25:09:5b:af:
                    e3:e6:37:8b:f2:19:6d:82:48:c1:ed:6d:32:7e:ac:
                    02:e7:c4:aa:6c:58:83:ab:2d:4c:09:77:30:11:56:
                    76:aa:b4:23:c3:78:8e:ba:4f:09:55:b7:7b:44:35:
                    29:ad:49:7e:8e:d3:e0:7b:40:ae:90:ea:0f:27:07:
                    f0:af:1b:df:bc:14:e4:35:69:89:d2:97:5f:b5:b5:
                    64:e3:e0:7a:bc:9d:82:92:1b:a0:12:bb:d7:5d:85:
                    b5:5e:ee:c7:10:9e:b6:67:f0:e0:9f:ab:98:c2:b0:
                    9d:48:c8:7f:44:51:13:f8:21:19:91:0e:bf:a6:f3:
                    b9:1c:5c:1b:81:cc:28:ab:7f:54:8b:07:fc:ce:d4:
                    fc:5f:77:dc:a6:2f:0f:83:9a:ad:33:d1:3d:bb:c3:
                    fc:77:b2:69:e2:6a:92:6c:86:d0:36:14:79:22:e9:
                    61:4f:4e:92:ee:a0:a3:98:23:f9:b2:60:15:10:da:
                    54:a4:17:d0:60:50:2f:49:29:51:d2:30:23:64:4b:
                    7c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0A:07:A8:ED:67:F0:70:D9:FF:18:7D:63:49:0E:44:AF:F3:08:59
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138362e3235312e3134382e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:79:ad:a5:3b:e8:eb:00:af:1a:70:67:0d:29:82:e9:6e:f1:
         ed:66:d0:ce:1c:58:86:88:a9:09:90:c9:3a:d7:29:e5:d2:5c:
         c6:b1:e3:db:f1:d6:a2:2b:e2:b8:54:97:b3:e6:73:cf:3c:72:
         6c:3f:4e:2a:bf:35:05:8d:03:84:3d:5c:c9:6a:03:3a:0b:2c:
         8c:75:48:89:00:39:f2:25:b9:1c:2f:4d:91:95:b2:f0:94:c5:
         2e:c6:fa:8b:70:68:fc:d3:f1:f0:d9:50:c3:cf:c8:4a:fc:4a:
         6f:c7:64:0d:61:57:ca:ef:b1:51:62:61:16:80:79:06:9c:e6:
         34:74:f2:6b:43:23:bd:53:29:a4:21:c4:1b:9d:b9:19:a9:28:
         65:b9:8a:db:ce:20:0b:69:54:ca:59:b2:49:0f:1c:8c:ad:97:
         5d:a9:95:f1:09:81:32:15:2e:43:82:02:15:d4:b5:f4:16:59:
         17:74:0f:f4:9c:22:3b:90:5d:36:d7:76:bd:20:5e:b4:a5:c8:
         05:64:f7:68:4e:77:24:ae:06:ff:d2:df:a7:46:d1:38:dd:08:
         ee:88:9e:76:fb:5b:1c:4d:35:32:18:79:3a:3f:8f:2d:78:53:
         86:ae:2d:ca:de:e4:0e:b5:e4:37:b4:06:90:05:41:5b:a4:74:
         e8:32:cf:3f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgITJWm5L/hB7uYChJxEx8SfHZ7/HTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg0QjEzREI2NEJDQzI1QzlGQTk5RkEyQjlERkFDNDk2MUQz
REMwOUUwMB4XDTI2MDMxODAxMTE0NVoXDTI3MDMxNzAxMTY0NVowMzExMC8GA1UE
AxMoODUwQTA3QThFRDY3RjA3MEQ5RkYxODdENjM0OTBFNDRBRkYzMDg1OTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMjoEMDPBMIcDB6oqrXH48zZd/ro
COdQd3S4Sv6UG5lV3BFhqCiiKrBivFKC7zH9HsB1nj0U4qklCVuv4+Y3i/IZbYJI
we1tMn6sAufEqmxYg6stTAl3MBFWdqq0I8N4jrpPCVW3e0Q1Ka1Jfo7T4HtArpDq
DycH8K8b37wU5DVpidKXX7W1ZOPgerydgpIboBK7112FtV7uxxCetmfw4J+rmMKw
nUjIf0RRE/ghGZEOv6bzuRxcG4HMKKt/VIsH/M7U/F933KYvD4OarTPRPbvD/Hey
aeJqkmyG0DYUeSLpYU9Oku6go5gj+bJgFRDaVKQX0GBQL0kpUdIwI2RLfN8CAwEA
AaOCAlAwggJMMB0GA1UdDgQWBBSFCgeo7WfwcNn/GH1jSQ5Er/MIWTAfBgNVHSME
GDAWgBRLE9tkvMJcn6mfornfrElh09wJ4DAOBgNVHQ8BAf8EBAMCB4AwgZIGA1Ud
HwSBijCBhzCBhKCBgaB/hn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9y
ZXBvL2hYcDMxNEFWb241VlVCODUzb01WRDY5YVprcktzdUdmSkR6b3lHeGdBczIv
MS80QjEzREI2NEJDQzI1QzlGQTk5RkEyQjlERkFDNDk2MUQzREMwOUUwLmNybDB4
BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCMTNEQjY0QkNDMjVDOUZBOTlG
QTJCOURGQUM0OTYxRDNEQzA5RTAuY2VyMIGvBggrBgEFBQcBCwSBojCBnzCBnAYI
KwYBBQUHMAuGgY9yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2hY
cDMxNEFWb241VlVCODUzb01WRDY5YVprcktzdUdmSkR6b3lHeGdBczIvMS8zMTM4
MzYyZTMyMzUzMTJlMzEzNDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzOTM4
MzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCuvuUMA0GCSqGSIb3DQEBCwUAA4IBAQBZea2lO+jr
AK8acGcNKYLpbvHtZtDOHFiGiKkJkMk61ynl0lzGsePb8daiK+K4VJez5nPPPHJs
P04qvzUFjQOEPVzJagM6CyyMdUiJADnyJbkcL02RlbLwlMUuxvqLcGj80/Hw2VDD
z8hK/Epvx2QNYVfK77FRYmEWgHkGnOY0dPJrQyO9UymkIcQbnbkZqShluYrbziAL
aVTKWbJJDxyMrZddqZXxCYEyFS5DggIV1LX0FlkXdA/0nCI7kF0213a9IF60pcgF
ZPdoTnckrgb/0t+nRtE43QjuiJ52+1scTTUyGHk6P48teFOGri3K3uQOteQ3tAaQ
BUFbpHToMs8/
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:56:46 2026 by rpki-client