Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e312e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e312e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          oVNRWim5kHQ3GtO8M6X3b+jLX7QS3zrhosd2KatAFbI=
Subject key identifier:   D3:9B:F9:B3:C3:69:3F:14:FA:31:4D:CE:E5:C4:38:E6:6D:FA:5E:C4
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       037B83D1F88BDF8CAB124B6025B8B5E1EB27D599
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e312e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 01 Apr 2026 20:00:00 +0000
ROA not before:           Wed 01 Apr 2026 19:55:00 +0000
ROA not after:            Wed 31 Mar 2027 20:00:00 +0000
asID:                     28338
IP address blocks:        189.45.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7b:83:d1:f8:8b:df:8c:ab:12:4b:60:25:b8:b5:e1:eb:27:d5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr  1 19:55:00 2026 GMT
            Not After : Mar 31 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:44:ab:33:b8:a7:09:ab:4f:d8:d1:d6:f1:a5:
                    73:cf:2d:d6:73:0e:10:2b:28:13:5d:fc:0d:43:05:
                    a3:f3:98:15:a3:57:39:cc:f8:0e:de:6f:b1:d6:75:
                    10:9b:56:69:bd:fb:90:a8:53:7f:54:41:aa:b3:4f:
                    0d:b1:31:5a:86:bf:d7:41:e4:e2:30:9d:f9:93:ce:
                    b5:00:7c:a2:66:00:ee:dd:52:9e:11:26:73:46:b3:
                    a4:26:b4:33:1d:f2:af:5c:a6:d9:99:1b:c0:aa:36:
                    ae:a5:4e:38:ef:d5:26:9f:8b:ed:7c:7b:54:e2:4b:
                    4c:c6:59:1e:0e:7f:3b:63:dc:66:a1:6e:cf:f0:e6:
                    7f:2d:bc:a7:86:f5:9b:77:ed:85:29:c9:cc:70:98:
                    2e:38:79:ff:4c:f5:65:41:52:9c:a8:6c:38:49:f2:
                    21:96:74:22:14:57:c5:d4:8c:9e:9f:ec:03:b3:46:
                    3f:b3:b9:22:de:71:53:28:53:30:48:86:26:47:17:
                    49:3e:57:5b:ba:2b:a3:f6:39:da:db:8a:8d:8b:aa:
                    73:53:fb:91:e6:03:e7:a0:d1:25:d7:1e:46:00:25:
                    cc:18:90:8a:5a:ba:19:dc:10:ef:53:d6:8d:10:72:
                    be:b2:fd:7b:89:28:d9:03:da:c4:9e:62:a0:e7:1a:
                    d3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9B:F9:B3:C3:69:3F:14:FA:31:4D:CE:E5:C4:38:E6:6D:FA:5E:C4
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e312e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:8f:79:3f:5d:73:ae:9f:51:7a:35:92:68:54:64:47:67:41:
         77:c2:a3:49:48:62:43:72:59:67:8e:95:c1:af:d9:af:25:4c:
         df:ad:d8:78:1b:d2:5f:db:52:a6:88:1e:38:82:d3:4a:ec:6e:
         0c:46:aa:f6:57:df:7a:c9:ed:ce:32:9b:61:b4:bc:b6:63:a8:
         22:7f:b7:83:9c:ea:8e:68:38:b9:df:06:40:ae:ae:13:a9:07:
         f2:ba:96:e9:89:d1:bb:10:6d:a8:7a:52:36:86:74:c1:d5:bc:
         3b:37:89:f1:e1:e6:28:0f:01:43:ab:1d:bd:09:2f:23:09:b8:
         9e:a1:59:91:dc:c7:35:2d:90:2b:25:6c:e3:c4:db:87:83:44:
         b1:3b:ac:3c:02:80:0a:53:cb:7c:7d:40:8c:89:60:36:2f:28:
         e0:6b:fa:48:91:fa:41:ea:4d:d5:f4:51:1a:a6:f4:0d:b3:df:
         5d:f0:6d:a5:ae:09:17:c1:93:c4:48:a1:20:a5:df:e8:2f:0f:
         eb:b8:25:ac:cd:15:47:4d:1d:4c:d1:53:bc:ec:8a:db:76:29:
         26:fc:63:3b:4b:20:49:85:fd:4b:d4:02:c3:4b:3a:7a:11:44:
         85:aa:44:6d:58:23:6c:d6:0c:e6:60:09:0f:44:7b:f9:cd:95:
         05:85:3f:66
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUA3uD0fiL34yrEktgJbi14esn1ZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGNjJENTVEQzc1ODg3NUI0OUFEQ0EwRkNEMTE1ODA3
QjJGMUREMTAeFw0yNjA0MDExOTU1MDBaFw0yNzAzMzEyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzk0NEFCMzNCOEE3MDlBQjRG
RDhEMUQ2RjFBNTczQ0YyREQ2NzMwRTEwMkIyODEzNURGQzBENDMwNUEzRjM5ODE1
QTM1NzM5Q0NGODBFREU2RkIxRDY3NTEwOUI1NjY5QkRGQjkwQTg1MzdGNTQ0MUFB
QjM0RjBEQjEzMTVBODZCRkQ3NDFFNEUyMzA5REY5OTNDRUI1MDA3Q0EyNjYwMEVF
REQ1MjlFMTEyNjczNDZCM0E0MjZCNDMzMURGMkFGNUNBNkQ5OTkxQkMwQUEzNkFF
QTU0RTM4RUZENTI2OUY4QkVEN0M3QjU0RTI0QjRDQzY1OTFFMEU3RjNCNjNEQzY2
QTE2RUNGRjBFNjdGMkRCQ0E3ODZGNTlCNzdFRDg1MjlDOUNDNzA5ODJFMzg3OUZG
NENGNTY1NDE1MjlDQTg2QzM4NDlGMjIxOTY3NDIyMTQ1N0M1RDQ4QzlFOUZFQzAz
QjM0NjNGQjNCOTIyREU3MTUzMjg1MzMwNDg4NjI2NDcxNzQ5M0U1NzVCQkEyQkEz
RjYzOURBREI4QThEOEJBQTczNTNGQjkxRTYwM0U3QTBEMTI1RDcxRTQ2MDAyNUND
MTg5MDhBNUFCQTE5REMxMEVGNTNENjhEMTA3MkJFQjJGRDdCODkyOEQ5MDNEQUM0
OUU2MkEwRTcxQUQzODUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyUSrM7inCatP2NHW8aVzzy3Wcw4QKygTXfwNQwWj85gVo1c5zPgO
3m+x1nUQm1ZpvfuQqFN/VEGqs08NsTFahr/XQeTiMJ35k861AHyiZgDu3VKeESZz
RrOkJrQzHfKvXKbZmRvAqjaupU4479Umn4vtfHtU4ktMxlkeDn87Y9xmoW7P8OZ/
LbynhvWbd+2FKcnMcJguOHn/TPVlQVKcqGw4SfIhlnQiFFfF1Iyen+wDs0Y/s7ki
3nFTKFMwSIYmRxdJPldbuiuj9jna24qNi6pzU/uR5gPnoNEl1x5GACXMGJCKWroZ
3BDvU9aNEHK+sv17iSjZA9rEnmKg5xrThQIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FNOb+bPDaT8U+jFNzuXEOOZt+l7EMB8GA1UdIwQYMBaAFLf2LVXcdYh1tJrcoPzR
FYB7Lx3RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRCeDg4RlhlOG41Ujc0
OXBXZ3JrQVMzZGV5cjVtZHl5ZnhCTmlXejV5dnZNLzEvQjdGNjJENTVEQzc1ODg3
NUI0OUFEQ0EwRkNEMTE1ODA3QjJGMUREMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CN0Y2MkQ1NURDNzU4ODc1QjQ5QURDQTBGQ0QxMTU4MDdCMkYx
REQxLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80Qng4OEZYZThuNVI3NDlwV2dy
a0FTM2RleXI1bWR5eWZ4Qk5pV3o1eXZ2TS8xLzMxMzgzOTJlMzQzNTJlMzEyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzMzMzM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvS0BMA0G
CSqGSIb3DQEBCwUAA4IBAQB9j3k/XXOun1F6NZJoVGRHZ0F3wqNJSGJDcllnjpXB
r9mvJUzfrdh4G9Jf21KmiB44gtNK7G4MRqr2V996ye3OMpthtLy2Y6gif7eDnOqO
aDi53wZArq4TqQfyupbpidG7EG2oelI2hnTB1bw7N4nx4eYoDwFDqx29CS8jCbie
oVmR3Mc1LZArJWzjxNuHg0SxO6w8AoAKU8t8fUCMiWA2Lyjga/pIkfpB6k3V9FEa
pvQNs99d8G2lrgkXwZPESKEgpd/oLw/ruCWszRVHTR1M0VO87Irbdikm/GM7SyBJ
hf1L1ALDSzp6EUSFqkRtWCNs1gzmYAkPRHv5zZUFhT9m
-----END CERTIFICATE-----
Generated at Wed Apr 8 13:27:34 2026 by rpki-client