Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e342e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e342e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          Ng9nHzUqZvcNZeAI7lb+fWKYl9/4AJKg1wpL6jG+hcY=
Subject key identifier:   26:9A:04:97:A0:A1:CC:E7:34:D7:92:78:AC:BB:EB:E6:8A:EC:25:FA
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       6D5E47137C406ABC0D9649AEAFCCDE7CD582A35F
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e342e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 01 Apr 2026 20:00:02 +0000
ROA not before:           Wed 01 Apr 2026 19:55:02 +0000
ROA not after:            Wed 31 Mar 2027 20:00:02 +0000
asID:                     28338
IP address blocks:        189.45.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5e:47:13:7c:40:6a:bc:0d:96:49:ae:af:cc:de:7c:d5:82:a3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr  1 19:55:02 2026 GMT
            Not After : Mar 31 20:00:02 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:0d:bf:5b:d9:a6:cb:19:c0:ba:46:ef:cc:
                    77:56:41:d1:05:33:03:91:e8:92:8d:7f:83:88:40:
                    27:b8:3b:d4:74:dd:27:69:66:34:6d:c7:b5:9a:cb:
                    db:65:25:65:28:3d:04:1a:a0:dc:31:aa:2c:d9:b1:
                    69:d4:57:00:03:2e:2b:a9:e2:e6:75:41:22:58:b6:
                    ae:da:50:f0:57:8e:a9:8a:a4:6f:89:32:90:8d:14:
                    ba:eb:9d:05:ec:99:e1:0d:ca:e3:ce:e7:75:cb:bf:
                    1b:2e:4c:89:79:de:6e:c7:3a:e6:55:7c:3f:e6:d5:
                    a6:64:8a:cf:95:0a:0a:bc:01:d8:d1:f2:00:12:76:
                    0d:fa:e7:ca:1a:b1:b1:af:89:b0:ea:74:05:29:a1:
                    88:62:43:a5:64:60:8e:12:01:99:36:89:6c:f8:61:
                    a4:e2:52:c4:da:cb:2c:8b:3e:69:4a:25:f8:6d:a5:
                    2f:4b:ee:28:3e:d8:86:06:aa:dd:e5:0a:3c:0e:e2:
                    7a:3e:f5:20:18:da:c4:73:aa:80:41:2f:65:8e:1a:
                    40:cf:b9:05:57:6c:7b:1a:da:90:9a:87:f6:a5:95:
                    8e:bd:14:26:ea:24:56:8c:d0:f6:40:4b:8f:bc:a4:
                    28:37:9d:d4:19:46:2f:35:3f:14:04:87:97:1b:5e:
                    60:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9A:04:97:A0:A1:CC:E7:34:D7:92:78:AC:BB:EB:E6:8A:EC:25:FA
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e342e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:c6:57:4a:38:d0:28:e4:69:f9:d7:c0:aa:e2:6f:bb:2d:bf:
         48:e5:1c:16:b1:c7:f8:be:ae:8e:43:5a:38:09:39:3d:f2:97:
         2a:82:bb:33:18:5b:13:c3:e3:4c:f5:18:b6:32:aa:a9:07:a2:
         7f:29:cc:5e:54:4f:5f:c9:d0:48:95:61:5c:dc:c2:83:91:04:
         7b:d2:65:db:73:d4:1a:2e:89:91:56:d6:70:b7:9b:95:8e:29:
         02:cb:8e:f9:c3:67:46:81:2e:06:21:a4:b5:74:35:cb:61:21:
         e9:1c:54:c6:84:3d:2c:30:9e:ee:dc:3d:ba:01:e1:39:bb:12:
         8b:af:f9:36:08:65:22:e0:09:01:9c:f6:14:0b:37:a8:a5:05:
         7e:a1:08:b2:1a:fe:72:a2:6d:59:92:40:64:6f:f6:1f:0d:52:
         4c:4e:1e:9f:48:20:47:f3:04:22:fe:af:ae:76:fa:96:b8:32:
         a3:0c:a1:65:69:80:8c:2d:93:a5:d9:aa:ac:ac:80:81:c9:6c:
         d5:89:67:f7:d9:48:53:47:50:06:c5:cc:10:64:04:38:5e:e4:
         2d:9e:b0:d8:74:74:f9:eb:68:1d:3c:b0:46:c0:9c:60:4c:a3:
         72:98:d8:3b:7b:58:1c:14:fe:36:bf:d0:cf:ee:22:83:c7:a1:
         52:06:a1:0c
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUbV5HE3xAarwNlkmur8zefNWCo18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGNjJENTVEQzc1ODg3NUI0OUFEQ0EwRkNEMTE1ODA3
QjJGMUREMTAeFw0yNjA0MDExOTU1MDJaFw0yNzAzMzEyMDAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzkxMjBEQkY1QkQ5QTZDQjE5
QzBCQTQ2RUZDQzc3NTY0MUQxMDUzMzAzOTFFODkyOEQ3RjgzODg0MDI3QjgzQkQ0
NzRERDI3Njk2NjM0NkRDN0I1OUFDQkRCNjUyNTY1MjgzRDA0MUFBMERDMzFBQTJD
RDlCMTY5RDQ1NzAwMDMyRTJCQTlFMkU2NzU0MTIyNThCNkFFREE1MEYwNTc4RUE5
OEFBNDZGODkzMjkwOEQxNEJBRUI5RDA1RUM5OUUxMERDQUUzQ0VFNzc1Q0JCRjFC
MkU0Qzg5NzlERTZFQzczQUU2NTU3QzNGRTZENUE2NjQ4QUNGOTUwQTBBQkMwMUQ4
RDFGMjAwMTI3NjBERkFFN0NBMUFCMUIxQUY4OUIwRUE3NDA1MjlBMTg4NjI0M0E1
NjQ2MDhFMTIwMTk5MzY4OTZDRjg2MUE0RTI1MkM0REFDQjJDOEIzRTY5NEEyNUY4
NkRBNTJGNEJFRTI4M0VEODg2MDZBQURERTUwQTNDMEVFMjdBM0VGNTIwMThEQUM0
NzNBQTgwNDEyRjY1OEUxQTQwQ0ZCOTA1NTc2QzdCMUFEQTkwOUE4N0Y2QTU5NThF
QkQxNDI2RUEyNDU2OENEMEY2NDA0QjhGQkNBNDI4Mzc5REQ0MTk0NjJGMzUzRjE0
MDQ4Nzk3MUI1RTYwOUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyRINv1vZpssZwLpG78x3VkHRBTMDkeiSjX+DiEAnuDvUdN0naWY0
bce1msvbZSVlKD0EGqDcMaos2bFp1FcAAy4rqeLmdUEiWLau2lDwV46piqRviTKQ
jRS6650F7JnhDcrjzud1y78bLkyJed5uxzrmVXw/5tWmZIrPlQoKvAHY0fIAEnYN
+ufKGrGxr4mw6nQFKaGIYkOlZGCOEgGZNols+GGk4lLE2sssiz5pSiX4baUvS+4o
PtiGBqrd5Qo8DuJ6PvUgGNrEc6qAQS9ljhpAz7kFV2x7GtqQmof2pZWOvRQm6iRW
jND2QEuPvKQoN53UGUYvNT8UBIeXG15gmwIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FCaaBJegocznNNeSeKy76+aK7CX6MB8GA1UdIwQYMBaAFLf2LVXcdYh1tJrcoPzR
FYB7Lx3RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRCeDg4RlhlOG41Ujc0
OXBXZ3JrQVMzZGV5cjVtZHl5ZnhCTmlXejV5dnZNLzEvQjdGNjJENTVEQzc1ODg3
NUI0OUFEQ0EwRkNEMTE1ODA3QjJGMUREMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CN0Y2MkQ1NURDNzU4ODc1QjQ5QURDQTBGQ0QxMTU4MDdCMkYx
REQxLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80Qng4OEZYZThuNVI3NDlwV2dy
a0FTM2RleXI1bWR5eWZ4Qk5pV3o1eXZ2TS8xLzMxMzgzOTJlMzQzNTJlMzQyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzMzMzM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvS0EMA0G
CSqGSIb3DQEBCwUAA4IBAQB8xldKONAo5Gn518Cq4m+7Lb9I5RwWscf4vq6OQ1o4
CTk98pcqgrszGFsTw+NM9Ri2MqqpB6J/KcxeVE9fydBIlWFc3MKDkQR70mXbc9Qa
LomRVtZwt5uVjikCy475w2dGgS4GIaS1dDXLYSHpHFTGhD0sMJ7u3D26AeE5uxKL
r/k2CGUi4AkBnPYUCzeopQV+oQiyGv5yom1ZkkBkb/YfDVJMTh6fSCBH8wQi/q+u
dvqWuDKjDKFlaYCMLZOl2aqsrICByWzViWf32UhTR1AGxcwQZAQ4XuQtnrDYdHT5
62gdPLBGwJxgTKNymNg7e1gcFP42v9DP7iKDx6FSBqEM
-----END CERTIFICATE-----
Generated at Wed Apr 8 13:27:34 2026 by rpki-client