Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e352e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e352e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          AGz5JEGOgX16d6klimhvIgoaYB13fooM21I5+KNrWNw=
Subject key identifier:   15:6F:50:E5:4F:5D:2F:77:F8:A2:98:FC:1F:EC:8E:12:FA:C2:8B:09
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       3132158499D058067506F82FA462B8309793CEAD
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e352e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 01 Apr 2026 20:00:06 +0000
ROA not before:           Wed 01 Apr 2026 19:55:06 +0000
ROA not after:            Wed 31 Mar 2027 20:00:06 +0000
asID:                     28338
IP address blocks:        189.45.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:32:15:84:99:d0:58:06:75:06:f8:2f:a4:62:b8:30:97:93:ce:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr  1 19:55:06 2026 GMT
            Not After : Mar 31 20:00:06 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:9f:ff:57:5b:9f:55:07:47:6d:24:99:46:
                    7a:4e:d9:fd:bb:a7:33:6e:d5:1a:3b:a2:ab:37:be:
                    d7:12:c2:d0:8a:a8:e1:c1:37:e9:e1:86:49:5b:45:
                    13:dc:16:60:88:bb:45:27:97:a2:1e:87:8e:9b:44:
                    09:3b:3c:19:de:2e:6c:fa:79:01:c0:a8:58:d4:a9:
                    f6:32:12:7e:45:f7:81:f4:1a:e4:a6:ef:52:a9:07:
                    da:9d:04:5f:72:7c:82:d6:56:35:3d:53:f6:a1:3c:
                    10:db:f7:b3:14:b5:fe:91:e5:31:ff:e3:66:f1:7b:
                    78:9b:93:5b:57:48:88:17:ba:96:0c:d9:fa:f9:ab:
                    c5:8a:dd:5f:24:64:bb:04:7e:7b:8f:ea:c0:27:61:
                    fa:b1:e5:43:12:5e:6c:b7:c0:01:f6:da:bd:3b:05:
                    33:4e:92:b0:25:47:ae:ff:be:91:b4:c8:42:c3:94:
                    a7:e7:a1:81:77:14:44:3c:06:37:24:76:00:d5:fb:
                    2b:12:99:fa:c7:b9:49:c1:98:7c:d4:2e:a4:c4:e9:
                    be:f4:26:76:d5:2e:d5:3c:27:2c:be:7c:e5:03:36:
                    5a:15:dd:c7:6e:f8:c2:85:11:85:c4:6e:19:e8:f9:
                    8f:59:53:a4:12:df:7d:25:f6:e9:50:d6:6a:93:81:
                    97:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6F:50:E5:4F:5D:2F:77:F8:A2:98:FC:1F:EC:8E:12:FA:C2:8B:09
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e352e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:45:b6:1e:a4:4c:2d:d6:73:bc:e7:c8:58:40:65:ea:99:df:
         2f:b9:19:25:b7:e6:18:dc:90:f4:53:4e:7d:67:4c:95:74:d8:
         2f:47:f7:27:b9:a7:aa:79:a9:12:62:ad:c6:df:7b:8e:d9:c7:
         62:95:b1:dd:51:a9:56:76:b8:d0:f6:6d:a1:f0:67:ae:95:4a:
         b7:15:b8:e6:8a:58:a0:85:53:f7:4a:00:cd:86:c2:63:19:29:
         30:be:a0:0d:ad:38:ab:8d:24:de:db:e5:d6:e9:c8:20:4f:d8:
         b3:83:d9:72:ca:a2:10:9c:85:7d:c6:86:89:2c:55:1a:00:78:
         27:19:fa:b0:41:ce:7c:f2:64:1d:ac:9f:e0:66:11:6e:6d:16:
         9a:bd:b5:90:0f:dc:a3:94:4d:17:fe:1b:25:17:7b:c6:2c:f1:
         39:54:82:92:b5:38:6c:26:ed:a2:a5:3c:5e:26:31:2f:c1:9e:
         5d:5f:03:d5:54:1a:c7:f9:15:34:7a:4c:5c:c7:62:f0:ff:83:
         e5:9e:8d:f6:e0:0c:60:85:17:7d:ea:b3:30:11:3f:e4:2b:84:
         b8:6c:47:98:4b:89:a4:76:af:c2:e9:0d:2e:10:d7:1f:be:3a:
         2e:29:1a:aa:db:62:d0:75:bb:d3:07:18:11:e9:63:bf:d1:6e:
         b6:4a:96:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:27:33 2026 by rpki-client