Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e362e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e362e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          CbZEmtyKKB5CmG73+yEuToVBKhUgoi2LC1kj7cbpwpY=
Subject key identifier:   DC:C9:49:FD:7E:6B:09:0C:4C:F5:B7:63:3D:20:FE:42:3C:2F:48:1B
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       117F291E50E350947006D64C7F19A79D914AEBF3
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e362e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 01 Apr 2026 20:00:01 +0000
ROA not before:           Wed 01 Apr 2026 19:55:01 +0000
ROA not after:            Wed 31 Mar 2027 20:00:01 +0000
asID:                     28338
IP address blocks:        189.45.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7f:29:1e:50:e3:50:94:70:06:d6:4c:7f:19:a7:9d:91:4a:eb:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr  1 19:55:01 2026 GMT
            Not After : Mar 31 20:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:81:5e:94:75:a6:f8:ad:4b:3a:d8:b4:3e:f4:
                    39:91:20:2d:7f:0a:8e:d4:0f:e0:a8:55:dc:c4:3d:
                    b0:0f:8c:7c:6d:e5:ac:8d:72:68:76:14:8d:bd:42:
                    01:2c:2f:7e:e7:c8:d8:75:7e:f9:90:09:36:ab:a2:
                    b8:01:02:31:7d:1d:da:91:e3:ae:6f:b0:4e:01:da:
                    d8:37:a2:90:16:92:82:90:72:65:f8:dc:ea:fc:28:
                    49:5e:e3:1d:e7:85:ff:78:3a:30:65:0e:4e:17:df:
                    92:0d:7b:f1:df:07:25:6e:50:b1:5f:56:61:41:15:
                    75:58:63:1f:9a:a6:0b:0e:09:0a:6c:cf:76:1e:fe:
                    72:43:37:0c:28:0b:37:99:31:6f:90:93:7a:00:4a:
                    2c:49:1a:18:c3:ae:8f:c6:71:1d:48:c0:17:ad:df:
                    7e:df:62:69:c9:48:47:57:e5:72:0f:71:a0:78:ff:
                    a3:89:3a:cd:6c:46:b8:07:b5:33:09:00:15:c6:b8:
                    fb:97:b3:36:26:ed:df:29:e7:19:f3:d6:6a:1b:19:
                    55:5d:41:54:90:fd:a8:1d:5c:1f:e1:73:6b:a8:e2:
                    fa:cf:98:f6:33:3c:ed:fd:ee:48:1f:89:1a:ae:c6:
                    35:23:a4:ca:7a:3d:9c:64:6e:dd:29:c7:c9:e3:e9:
                    8d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C9:49:FD:7E:6B:09:0C:4C:F5:B7:63:3D:20:FE:42:3C:2F:48:1B
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e362e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:c9:8d:63:29:a9:b7:52:38:4f:3a:bf:f8:f5:b3:c1:95:f6:
         cf:d6:c3:ab:32:0b:8f:50:bf:7a:cd:bd:6d:d5:00:66:2b:13:
         cb:30:0e:8f:98:12:f7:a4:85:21:95:b5:c1:f7:7e:b9:31:91:
         de:b1:29:16:77:f5:4d:cd:92:74:f8:a7:b5:ac:24:02:49:da:
         80:09:62:41:98:8f:48:6a:d0:96:13:fe:51:df:eb:d6:52:59:
         5e:ca:93:66:8a:1e:f2:c8:5d:ea:de:f7:e4:aa:33:ff:b7:fd:
         8c:ce:28:cf:18:f7:43:eb:38:62:da:71:70:22:ee:d9:ac:93:
         59:cd:33:c5:d3:47:23:80:88:34:a4:17:78:c6:70:99:7a:da:
         a6:1d:3e:6a:cb:49:05:89:9d:e2:5c:a2:00:15:5f:7c:db:9c:
         d5:db:95:07:44:d3:e5:66:81:97:08:8b:6c:fa:35:58:b0:8f:
         c7:42:62:39:83:41:2d:06:c3:06:fc:f7:c9:05:7f:54:6c:0f:
         c8:74:75:eb:d3:5d:08:5b:83:2a:a2:0f:1a:b8:b0:a3:c7:06:
         c3:86:9c:6a:55:5b:aa:29:2d:3d:26:d8:be:eb:f3:40:00:0f:
         2a:c2:6f:c1:bf:4a:19:62:ea:15:c4:7d:db:33:47:1b:1b:44:
         3d:d1:f3:02
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUEX8pHlDjUJRwBtZMfxmnnZFK6/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGNjJENTVEQzc1ODg3NUI0OUFEQ0EwRkNEMTE1ODA3
QjJGMUREMTAeFw0yNjA0MDExOTU1MDFaFw0yNzAzMzEyMDAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTg4MTVFOTQ3NUE2RjhBRDRC
M0FEOEI0M0VGNDM5OTEyMDJEN0YwQThFRDQwRkUwQTg1NURDQzQzREIwMEY4QzdD
NkRFNUFDOEQ3MjY4NzYxNDhEQkQ0MjAxMkMyRjdFRTdDOEQ4NzU3RUY5OTAwOTM2
QUJBMkI4MDEwMjMxN0QxRERBOTFFM0FFNkZCMDRFMDFEQUQ4MzdBMjkwMTY5Mjgy
OTA3MjY1RjhEQ0VBRkMyODQ5NUVFMzFERTc4NUZGNzgzQTMwNjUwRTRFMTdERjky
MEQ3QkYxREYwNzI1NkU1MEIxNUY1NjYxNDExNTc1NTg2MzFGOUFBNjBCMEUwOTBB
NkNDRjc2MUVGRTcyNDMzNzBDMjgwQjM3OTkzMTZGOTA5MzdBMDA0QTJDNDkxQTE4
QzNBRThGQzY3MTFENDhDMDE3QURERjdFREY2MjY5Qzk0ODQ3NTdFNTcyMEY3MUEw
NzhGRkEzODkzQUNENkM0NkI4MDdCNTMzMDkwMDE1QzZCOEZCOTdCMzM2MjZFRERG
MjlFNzE5RjNENjZBMUIxOTU1NUQ0MTU0OTBGREE4MUQ1QzFGRTE3MzZCQThFMkZB
Q0Y5OEY2MzMzQ0VERkRFRTQ4MUY4OTFBQUVDNjM1MjNBNENBN0EzRDlDNjQ2RURE
MjlDN0M5RTNFOThENzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqIFelHWm+K1LOti0PvQ5kSAtfwqO1A/gqFXcxD2wD4x8beWsjXJo
dhSNvUIBLC9+58jYdX75kAk2q6K4AQIxfR3akeOub7BOAdrYN6KQFpKCkHJl+Nzq
/ChJXuMd54X/eDowZQ5OF9+SDXvx3wclblCxX1ZhQRV1WGMfmqYLDgkKbM92Hv5y
QzcMKAs3mTFvkJN6AEosSRoYw66PxnEdSMAXrd9+32JpyUhHV+VyD3GgeP+jiTrN
bEa4B7UzCQAVxrj7l7M2Ju3fKecZ89ZqGxlVXUFUkP2oHVwf4XNrqOL6z5j2Mzzt
/e5IH4karsY1I6TKej2cZG7dKcfJ4+mNeQIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FNzJSf1+awkMTPW3Yz0g/kI8L0gbMB8GA1UdIwQYMBaAFLf2LVXcdYh1tJrcoPzR
FYB7Lx3RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRCeDg4RlhlOG41Ujc0
OXBXZ3JrQVMzZGV5cjVtZHl5ZnhCTmlXejV5dnZNLzEvQjdGNjJENTVEQzc1ODg3
NUI0OUFEQ0EwRkNEMTE1ODA3QjJGMUREMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CN0Y2MkQ1NURDNzU4ODc1QjQ5QURDQTBGQ0QxMTU4MDdCMkYx
REQxLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80Qng4OEZYZThuNVI3NDlwV2dy
a0FTM2RleXI1bWR5eWZ4Qk5pV3o1eXZ2TS8xLzMxMzgzOTJlMzQzNTJlMzYyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzMzMzM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvS0GMA0G
CSqGSIb3DQEBCwUAA4IBAQBWyY1jKam3UjhPOr/49bPBlfbP1sOrMguPUL96zb1t
1QBmKxPLMA6PmBL3pIUhlbXB9365MZHesSkWd/VNzZJ0+Ke1rCQCSdqACWJBmI9I
atCWE/5R3+vWUlleypNmih7yyF3q3vfkqjP/t/2MzijPGPdD6zhi2nFwIu7ZrJNZ
zTPF00cjgIg0pBd4xnCZetqmHT5qy0kFiZ3iXKIAFV9825zV25UHRNPlZoGXCIts
+jVYsI/HQmI5g0EtBsMG/PfJBX9UbA/IdHXr010IW4Mqog8auLCjxwbDhpxqVVuq
KS09Jti+6/NAAA8qwm/Bv0oZYuoVxH3bM0cbG0Q90fMC
-----END CERTIFICATE-----
Generated at Wed Apr 8 13:28:13 2026 by rpki-client