Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e382e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e382e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          xwSsSBMifpu0N2/q22vIMszEqAyIl7vI2KBHYJB0BO8=
Subject key identifier:   18:00:81:E8:2A:CC:64:D6:DD:51:A0:BC:20:4C:3E:E9:48:70:BE:02
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       67294194D2D66B69275CE4A2DD284B4C817C65C1
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e382e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 01 Apr 2026 20:00:05 +0000
ROA not before:           Wed 01 Apr 2026 19:55:05 +0000
ROA not after:            Wed 31 Mar 2027 20:00:05 +0000
asID:                     28338
IP address blocks:        189.45.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:29:41:94:d2:d6:6b:69:27:5c:e4:a2:dd:28:4b:4c:81:7c:65:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr  1 19:55:05 2026 GMT
            Not After : Mar 31 20:00:05 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:fd:c3:27:f3:af:9a:bb:77:61:bc:dd:91:
                    8d:d6:44:6f:cd:62:dd:a5:5c:a1:1d:aa:bc:d9:52:
                    5e:6f:5c:d3:3f:99:1d:d5:e1:21:d1:03:e6:61:0a:
                    7a:44:cd:77:6a:3d:64:28:f3:3c:c4:5d:31:ad:3e:
                    be:a1:af:1a:ad:d5:db:7e:c9:f3:f6:9c:ce:21:c9:
                    b5:2c:c0:c1:7d:8c:1b:ae:a1:8c:28:49:0e:10:e8:
                    bb:b9:fb:91:10:9c:b2:8e:db:b4:34:4e:ba:8c:fb:
                    fd:5e:28:2f:99:68:78:dc:9f:13:73:1c:11:f6:d8:
                    22:5a:e0:b6:b4:eb:07:66:69:f9:51:aa:ce:7d:27:
                    ad:a2:24:e2:58:aa:90:10:42:f3:5e:86:46:b0:85:
                    2a:1d:a3:09:41:81:dd:69:d2:49:a4:1f:3f:9c:96:
                    ca:62:7e:32:8c:25:d2:cd:3c:47:44:5e:ed:02:fb:
                    f0:b4:0c:79:f8:3f:98:42:3c:f5:ac:a7:01:01:98:
                    a6:cd:dd:a9:e5:0b:60:b8:85:4c:72:da:20:07:5d:
                    e8:db:52:34:23:18:1f:ff:63:6b:e4:5e:74:60:0f:
                    90:2b:45:7c:87:f2:c1:86:d9:20:d3:8f:74:e3:62:
                    e9:5a:60:f0:26:da:b2:4e:ab:a2:89:3a:77:5f:28:
                    25:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:00:81:E8:2A:CC:64:D6:DD:51:A0:BC:20:4C:3E:E9:48:70:BE:02
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e382e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:4d:d5:a2:2a:e0:ce:0c:31:c8:b4:42:f0:87:6a:fa:cf:32:
         47:b2:00:98:54:d1:19:b2:e8:c9:8e:e8:d2:5d:0d:40:6f:91:
         fc:56:57:90:30:4a:02:d5:8f:9c:e5:d9:ae:8f:85:29:4e:bc:
         d1:9e:c2:94:31:88:dc:cb:9c:b9:8e:ff:08:2e:ef:8e:dc:10:
         ca:13:85:6a:bf:29:82:d2:01:42:9f:d3:27:d6:48:7e:c8:48:
         fd:16:34:b6:6b:2f:aa:02:5e:3a:38:20:a6:5c:e0:ca:c0:57:
         33:e1:fb:9a:ab:a5:9e:4f:65:00:8d:bb:31:83:1a:e0:ea:d9:
         82:58:44:a4:69:a6:a1:3a:18:b3:2e:87:45:5d:ea:59:22:76:
         5c:91:e4:2c:d3:7e:90:75:bd:27:c4:6e:8e:71:0f:24:df:22:
         7e:92:3c:a4:10:a6:06:e0:82:bf:c9:09:89:17:05:19:34:97:
         73:9d:bf:f2:86:30:db:64:71:19:db:d0:4b:bb:97:71:4f:b2:
         b0:bb:d5:e4:3a:0c:ce:64:9c:4b:28:b2:40:85:40:23:c9:41:
         74:07:a1:7e:cb:91:bf:12:a3:1e:e9:5d:5f:fd:41:cd:dc:45:
         18:b4:9c:ab:c0:61:ac:24:b9:78:24:76:27:b7:e0:fd:29:00:
         7d:3a:54:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:28:10 2026 by rpki-client