Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31322e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e31322e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          cALNnQIRtHsGtlXrdDnxdQvHc1YaIS3seK5bGSkeU/w=
Subject key identifier:   F4:8F:C1:B4:1C:E7:4F:B9:F0:D3:9F:D2:65:FE:03:04:AC:2F:81:EC
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       68415C55DFEFCFEBC34A7173775B1DB482A1A08A
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31322e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 01 Apr 2026 20:00:05 +0000
ROA not before:           Wed 01 Apr 2026 19:55:05 +0000
ROA not after:            Wed 31 Mar 2027 20:00:05 +0000
asID:                     28338
IP address blocks:        189.45.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:41:5c:55:df:ef:cf:eb:c3:4a:71:73:77:5b:1d:b4:82:a1:a0:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr  1 19:55:05 2026 GMT
            Not After : Mar 31 20:00:05 2027 GMT
        Subject: CN=3082010A0282010100CAC99A16EBB50E40A92182CC7A47B40AEDD4DC92BF9BFB30F42968D60D583C18FBACB1965385F96791A37CB47220673DC1A06755E134D7DD86AEE5B95FDB6249BFBB4ECC3D4BA785530F0F5A98FB4EA62F37E55E311020B3E6D43C00C1D42806C73322C00434FEADAECB70D801950A8B9C06510E31CB426A4C313FF0A4C4540A01DB62C85953F7833EFECF82DAEF25E071ECE3C3C6B82CD47DF72682827818C7A4DC79E645BED5E091A6A65BF7F6A45B0365CEBE7C025DAC82C4CD079FB8FFE84F3307943E3B41216EB694EF9D8DEA864C5C0C79F4248792A687DBB0115D99316180F51AC80AF097D78185C87EC51AAC306F9B9CF84FC16823A1959C478B54B50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c9:9a:16:eb:b5:0e:40:a9:21:82:cc:7a:47:
                    b4:0a:ed:d4:dc:92:bf:9b:fb:30:f4:29:68:d6:0d:
                    58:3c:18:fb:ac:b1:96:53:85:f9:67:91:a3:7c:b4:
                    72:20:67:3d:c1:a0:67:55:e1:34:d7:dd:86:ae:e5:
                    b9:5f:db:62:49:bf:bb:4e:cc:3d:4b:a7:85:53:0f:
                    0f:5a:98:fb:4e:a6:2f:37:e5:5e:31:10:20:b3:e6:
                    d4:3c:00:c1:d4:28:06:c7:33:22:c0:04:34:fe:ad:
                    ae:cb:70:d8:01:95:0a:8b:9c:06:51:0e:31:cb:42:
                    6a:4c:31:3f:f0:a4:c4:54:0a:01:db:62:c8:59:53:
                    f7:83:3e:fe:cf:82:da:ef:25:e0:71:ec:e3:c3:c6:
                    b8:2c:d4:7d:f7:26:82:82:78:18:c7:a4:dc:79:e6:
                    45:be:d5:e0:91:a6:a6:5b:f7:f6:a4:5b:03:65:ce:
                    be:7c:02:5d:ac:82:c4:cd:07:9f:b8:ff:e8:4f:33:
                    07:94:3e:3b:41:21:6e:b6:94:ef:9d:8d:ea:86:4c:
                    5c:0c:79:f4:24:87:92:a6:87:db:b0:11:5d:99:31:
                    61:80:f5:1a:c8:0a:f0:97:d7:81:85:c8:7e:c5:1a:
                    ac:30:6f:9b:9c:f8:4f:c1:68:23:a1:95:9c:47:8b:
                    54:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8F:C1:B4:1C:E7:4F:B9:F0:D3:9F:D2:65:FE:03:04:AC:2F:81:EC
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31322e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:09:8a:bf:7e:90:8b:17:62:f1:9d:f0:44:8f:d6:7b:b1:53:
         c7:a2:96:20:7d:4b:51:41:47:53:a1:d0:ec:d9:08:74:b0:0a:
         11:d3:c3:00:b6:40:29:cb:33:a1:65:43:c7:75:71:1d:62:ee:
         ef:93:07:f8:6e:ae:24:4a:87:58:4d:41:f7:8d:79:9d:a4:f9:
         f1:a0:80:e0:2a:58:70:31:91:fe:98:95:f2:fe:21:9b:8b:06:
         71:83:0b:6c:8a:92:01:bd:53:fe:9c:7c:62:c8:6f:72:d6:e8:
         92:37:64:d0:2f:ce:5f:cc:f9:e5:d6:99:cd:fd:52:ae:89:4d:
         7e:a3:52:af:f0:7c:c3:ee:0f:ad:98:27:82:29:ab:a6:f3:5b:
         7a:e2:dd:e1:02:47:5a:9b:ae:ea:e9:cf:b7:a9:9d:8c:d8:98:
         ae:91:67:5f:41:a9:68:38:35:00:65:92:f1:fc:80:f2:ee:1e:
         4b:16:94:89:c0:5f:bc:2d:5e:d9:30:08:39:e7:69:14:4e:5d:
         8a:db:03:d8:6a:2e:3a:cc:77:a5:89:1d:92:b4:9a:e4:21:f1:
         d8:9e:5e:59:42:f2:21:0a:9e:8c:f0:06:1f:78:cd:c0:5d:77:
         ef:e9:7b:9f:6a:8b:ee:ee:c4:e5:f7:e6:3a:c7:df:dd:e4:d8:
         91:8f:c9:67
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUaEFcVd/vz+vDSnFzd1sdtIKhoIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGNjJENTVEQzc1ODg3NUI0OUFEQ0EwRkNEMTE1ODA3
QjJGMUREMTAeFw0yNjA0MDExOTU1MDVaFw0yNzAzMzEyMDAwMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0FDOTlBMTZFQkI1MEU0MEE5
MjE4MkNDN0E0N0I0MEFFREQ0REM5MkJGOUJGQjMwRjQyOTY4RDYwRDU4M0MxOEZC
QUNCMTk2NTM4NUY5Njc5MUEzN0NCNDcyMjA2NzNEQzFBMDY3NTVFMTM0RDdERDg2
QUVFNUI5NUZEQjYyNDlCRkJCNEVDQzNENEJBNzg1NTMwRjBGNUE5OEZCNEVBNjJG
MzdFNTVFMzExMDIwQjNFNkQ0M0MwMEMxRDQyODA2QzczMzIyQzAwNDM0RkVBREFF
Q0I3MEQ4MDE5NTBBOEI5QzA2NTEwRTMxQ0I0MjZBNEMzMTNGRjBBNEM0NTQwQTAx
REI2MkM4NTk1M0Y3ODMzRUZFQ0Y4MkRBRUYyNUUwNzFFQ0UzQzNDNkI4MkNENDdE
RjcyNjgyODI3ODE4QzdBNERDNzlFNjQ1QkVENUUwOTFBNkE2NUJGN0Y2QTQ1QjAz
NjVDRUJFN0MwMjVEQUM4MkM0Q0QwNzlGQjhGRkU4NEYzMzA3OTQzRTNCNDEyMTZF
QjY5NEVGOUQ4REVBODY0QzVDMEM3OUY0MjQ4NzkyQTY4N0RCQjAxMTVEOTkzMTYx
ODBGNTFBQzgwQUYwOTdENzgxODVDODdFQzUxQUFDMzA2RjlCOUNGODRGQzE2ODIz
QTE5NTlDNDc4QjU0QjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAysmaFuu1DkCpIYLMeke0Cu3U3JK/m/sw9Clo1g1YPBj7rLGWU4X5
Z5GjfLRyIGc9waBnVeE0192GruW5X9tiSb+7Tsw9S6eFUw8PWpj7TqYvN+VeMRAg
s+bUPADB1CgGxzMiwAQ0/q2uy3DYAZUKi5wGUQ4xy0JqTDE/8KTEVAoB22LIWVP3
gz7+z4La7yXgcezjw8a4LNR99yaCgngYx6TceeZFvtXgkaamW/f2pFsDZc6+fAJd
rILEzQefuP/oTzMHlD47QSFutpTvnY3qhkxcDHn0JIeSpofbsBFdmTFhgPUayArw
l9eBhch+xRqsMG+bnPhPwWgjoZWcR4tUtQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FPSPwbQc50+58NOf0mX+AwSsL4HsMB8GA1UdIwQYMBaAFLf2LVXcdYh1tJrcoPzR
FYB7Lx3RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRCeDg4RlhlOG41Ujc0
OXBXZ3JrQVMzZGV5cjVtZHl5ZnhCTmlXejV5dnZNLzEvQjdGNjJENTVEQzc1ODg3
NUI0OUFEQ0EwRkNEMTE1ODA3QjJGMUREMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CN0Y2MkQ1NURDNzU4ODc1QjQ5QURDQTBGQ0QxMTU4MDdCMkYx
REQxLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80Qng4OEZYZThuNVI3NDlwV2dy
a0FTM2RleXI1bWR5eWZ4Qk5pV3o1eXZ2TS8xLzMxMzgzOTJlMzQzNTJlMzEzMjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMzMzMzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC9LQww
DQYJKoZIhvcNAQELBQADggEBAEgJir9+kIsXYvGd8ESP1nuxU8eiliB9S1FBR1Oh
0OzZCHSwChHTwwC2QCnLM6FlQ8d1cR1i7u+TB/huriRKh1hNQfeNeZ2k+fGggOAq
WHAxkf6YlfL+IZuLBnGDC2yKkgG9U/6cfGLIb3LW6JI3ZNAvzl/M+eXWmc39Uq6J
TX6jUq/wfMPuD62YJ4Ipq6bzW3ri3eECR1qbrurpz7epnYzYmK6RZ19BqWg4NQBl
kvH8gPLuHksWlInAX7wtXtkwCDnnaRROXYrbA9hqLjrMd6WJHZK0muQh8dieXllC
8iEKnozwBh94zcBdd+/pe59qi+7uxOX35jrH393k2JGPyWc=
-----END CERTIFICATE-----
Generated at Wed Apr 8 13:28:04 2026 by rpki-client