Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e302e302f32302d3230203d3e203238333338.roa
File:                     3138392e34352e302e302f32302d3230203d3e203238333338.roa (raw, json)
Hash identifier:          z8Uw5xQa9+ApV0cQZbp0y/sN7amudJe8kUfJ/a28oK0=
Subject key identifier:   2E:BE:85:63:03:DA:56:FE:7F:8A:44:59:51:F9:F5:AC:39:9B:92:C2
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       5FF8389EEE59432206D1BDC3D53ADE895627F4F0
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e302e302f32302d3230203d3e203238333338.roa
Signing time:             Wed 01 Apr 2026 19:00:00 +0000
ROA not before:           Wed 01 Apr 2026 18:55:00 +0000
ROA not after:            Wed 31 Mar 2027 19:00:00 +0000
asID:                     28338
IP address blocks:        189.45.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f8:38:9e:ee:59:43:22:06:d1:bd:c3:d5:3a:de:89:56:27:f4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr  1 18:55:00 2026 GMT
            Not After : Mar 31 19:00:00 2027 GMT
        Subject: CN=3082010A0282010100B7FCB6D9FB3F2D54832B56B48EBD2B5B3DA1FDE199339CA869E89BE9DA1894551DFD7681157B51A6582644D3E9D4325D3C6BD8A49F0071CF29A937531141222EF6F87E8D2EDCC20CCAE2B22E1A3872F388C398CA3558B6FF2DDAC50A8B3B21E5C7A35D8A70325CF4BF30BBC7405BF0AD918E06FEC26889D0183C8EAA68B356D9ABC5A747B28BB9DE5306A5E9ECC633E5A7CF447782EA7233552A550D25F98BEF12EC235892D364C888B6E6EA177C24EED7C67E809DFF0B61ABBD38B5E1CEB6DC4231E118A980DA755DA5721836BACDA81E83399B20F0017D8BA001D2E35F782C1D807F4A3516F1D382534E47E689E3D04CC6B9BEF52B8B190AAB18477B6C52FF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:b6:d9:fb:3f:2d:54:83:2b:56:b4:8e:bd:
                    2b:5b:3d:a1:fd:e1:99:33:9c:a8:69:e8:9b:e9:da:
                    18:94:55:1d:fd:76:81:15:7b:51:a6:58:26:44:d3:
                    e9:d4:32:5d:3c:6b:d8:a4:9f:00:71:cf:29:a9:37:
                    53:11:41:22:2e:f6:f8:7e:8d:2e:dc:c2:0c:ca:e2:
                    b2:2e:1a:38:72:f3:88:c3:98:ca:35:58:b6:ff:2d:
                    da:c5:0a:8b:3b:21:e5:c7:a3:5d:8a:70:32:5c:f4:
                    bf:30:bb:c7:40:5b:f0:ad:91:8e:06:fe:c2:68:89:
                    d0:18:3c:8e:aa:68:b3:56:d9:ab:c5:a7:47:b2:8b:
                    b9:de:53:06:a5:e9:ec:c6:33:e5:a7:cf:44:77:82:
                    ea:72:33:55:2a:55:0d:25:f9:8b:ef:12:ec:23:58:
                    92:d3:64:c8:88:b6:e6:ea:17:7c:24:ee:d7:c6:7e:
                    80:9d:ff:0b:61:ab:bd:38:b5:e1:ce:b6:dc:42:31:
                    e1:18:a9:80:da:75:5d:a5:72:18:36:ba:cd:a8:1e:
                    83:39:9b:20:f0:01:7d:8b:a0:01:d2:e3:5f:78:2c:
                    1d:80:7f:4a:35:16:f1:d3:82:53:4e:47:e6:89:e3:
                    d0:4c:c6:b9:be:f5:2b:8b:19:0a:ab:18:47:7b:6c:
                    52:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BE:85:63:03:DA:56:FE:7F:8A:44:59:51:F9:F5:AC:39:9B:92:C2
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e302e302f32302d3230203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:d3:1a:c0:0a:31:04:c7:92:28:76:90:01:37:b9:df:ef:22:
         7b:be:37:1b:69:32:3c:a6:16:f8:29:a1:32:95:e6:6c:db:b2:
         83:2a:68:b5:6a:ac:60:36:97:d6:19:89:f1:8f:90:0c:ea:d2:
         62:74:a8:d2:7e:c0:9f:1d:96:7b:28:f5:50:69:c2:0a:d8:87:
         65:38:8c:be:4c:07:09:5c:2a:d9:02:58:41:86:7b:6a:b6:94:
         23:99:b2:2d:84:65:6d:95:ea:6d:fd:9d:73:6c:cf:6e:10:22:
         6e:86:5e:7d:73:91:2f:be:69:26:7e:6a:5f:18:e1:15:7a:bc:
         77:7a:3f:a0:e9:ac:f1:3c:a0:32:ce:a1:02:14:a1:be:6d:e8:
         93:0d:bc:28:c5:9c:61:03:3a:09:86:c9:56:c3:35:a0:87:a5:
         26:cc:42:9f:b3:cb:00:b1:f1:98:5f:2a:88:a5:9a:12:66:f4:
         e4:29:66:3d:56:ae:f3:32:be:aa:fb:33:ff:77:b8:6a:39:d5:
         45:1e:2e:49:94:58:2e:05:e1:34:72:3e:e0:98:dd:73:41:00:
         1f:5b:49:84:6f:29:78:ba:dc:5f:0d:b5:4f:df:c8:85:a3:f0:
         af:ec:cd:9f:be:f8:bd:d7:2b:4e:32:2c:b5:ee:01:3a:b2:5e:
         39:1f:64:29
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUX/g4nu5ZQyIG0b3D1TreiVYn9PAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGNjJENTVEQzc1ODg3NUI0OUFEQ0EwRkNEMTE1ODA3
QjJGMUREMTAeFw0yNjA0MDExODU1MDBaFw0yNzAzMzExOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjdGQ0I2RDlGQjNGMkQ1NDgz
MkI1NkI0OEVCRDJCNUIzREExRkRFMTk5MzM5Q0E4NjlFODlCRTlEQTE4OTQ1NTFE
RkQ3NjgxMTU3QjUxQTY1ODI2NDREM0U5RDQzMjVEM0M2QkQ4QTQ5RjAwNzFDRjI5
QTkzNzUzMTE0MTIyMkVGNkY4N0U4RDJFRENDMjBDQ0FFMkIyMkUxQTM4NzJGMzg4
QzM5OENBMzU1OEI2RkYyRERBQzUwQThCM0IyMUU1QzdBMzVEOEE3MDMyNUNGNEJG
MzBCQkM3NDA1QkYwQUQ5MThFMDZGRUMyNjg4OUQwMTgzQzhFQUE2OEIzNTZEOUFC
QzVBNzQ3QjI4QkI5REU1MzA2QTVFOUVDQzYzM0U1QTdDRjQ0Nzc4MkVBNzIzMzU1
MkE1NTBEMjVGOThCRUYxMkVDMjM1ODkyRDM2NEM4ODhCNkU2RUExNzdDMjRFRUQ3
QzY3RTgwOURGRjBCNjFBQkJEMzhCNUUxQ0VCNkRDNDIzMUUxMThBOTgwREE3NTVE
QTU3MjE4MzZCQUNEQTgxRTgzMzk5QjIwRjAwMTdEOEJBMDAxRDJFMzVGNzgyQzFE
ODA3RjRBMzUxNkYxRDM4MjUzNEU0N0U2ODlFM0QwNENDNkI5QkVGNTJCOEIxOTBB
QUIxODQ3N0I2QzUyRkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt/y22fs/LVSDK1a0jr0rWz2h/eGZM5yoaeib6doYlFUd/XaBFXtR
plgmRNPp1DJdPGvYpJ8Acc8pqTdTEUEiLvb4fo0u3MIMyuKyLho4cvOIw5jKNVi2
/y3axQqLOyHlx6NdinAyXPS/MLvHQFvwrZGOBv7CaInQGDyOqmizVtmrxadHsou5
3lMGpensxjPlp89Ed4LqcjNVKlUNJfmL7xLsI1iS02TIiLbm6hd8JO7Xxn6Anf8L
Yau9OLXhzrbcQjHhGKmA2nVdpXIYNrrNqB6DOZsg8AF9i6AB0uNfeCwdgH9KNRbx
04JTTkfmiePQTMa5vvUrixkKqxhHe2xS/wIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FC6+hWMD2lb+f4pEWVH59aw5m5LCMB8GA1UdIwQYMBaAFLf2LVXcdYh1tJrcoPzR
FYB7Lx3RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRCeDg4RlhlOG41Ujc0
OXBXZ3JrQVMzZGV5cjVtZHl5ZnhCTmlXejV5dnZNLzEvQjdGNjJENTVEQzc1ODg3
NUI0OUFEQ0EwRkNEMTE1ODA3QjJGMUREMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CN0Y2MkQ1NURDNzU4ODc1QjQ5QURDQTBGQ0QxMTU4MDdCMkYx
REQxLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80Qng4OEZYZThuNVI3NDlwV2dy
a0FTM2RleXI1bWR5eWZ4Qk5pV3o1eXZ2TS8xLzMxMzgzOTJlMzQzNTJlMzAyZTMw
MmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM4MzMzMzM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvS0AMA0G
CSqGSIb3DQEBCwUAA4IBAQCq0xrACjEEx5IodpABN7nf7yJ7vjcbaTI8phb4KaEy
leZs27KDKmi1aqxgNpfWGYnxj5AM6tJidKjSfsCfHZZ7KPVQacIK2IdlOIy+TAcJ
XCrZAlhBhntqtpQjmbIthGVtlept/Z1zbM9uECJuhl59c5EvvmkmfmpfGOEVerx3
ej+g6azxPKAyzqECFKG+beiTDbwoxZxhAzoJhslWwzWgh6UmzEKfs8sAsfGYXyqI
pZoSZvTkKWY9Vq7zMr6q+zP/d7hqOdVFHi5JlFguBeE0cj7gmN1zQQAfW0mEbyl4
utxfDbVP38iFo/Cv7M2fvvi91ytOMiy17gE6sl45H2Qp
-----END CERTIFICATE-----
Generated at Wed Apr 8 13:27:26 2026 by rpki-client