Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232342e302f32302d3230203d3e203238333338.roa
File:                     3138392e38342e3232342e302f32302d3230203d3e203238333338.roa (raw, json)
Hash identifier:          2p37tVgrZuZNqZ++Send1Pwt4WYzUkeTL8knuXfIcx8=
Subject key identifier:   30:01:43:89:E6:50:3D:18:4D:75:D9:14:5A:2E:04:A7:D2:A6:37:DA
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       4CA86463AD3466006B7C666521ED5583AF986618
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232342e302f32302d3230203d3e203238333338.roa
Signing time:             Wed 01 Apr 2026 19:00:00 +0000
ROA not before:           Wed 01 Apr 2026 18:55:00 +0000
ROA not after:            Wed 31 Mar 2027 19:00:00 +0000
asID:                     28338
IP address blocks:        189.84.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a8:64:63:ad:34:66:00:6b:7c:66:65:21:ed:55:83:af:98:66:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr  1 18:55:00 2026 GMT
            Not After : Mar 31 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:79:e7:13:54:0a:14:e0:26:5e:fb:2e:be:82:
                    8f:b6:ba:2b:b7:3b:d0:3d:ac:de:98:c0:45:f8:d8:
                    e6:a9:65:04:fb:24:c5:e4:bf:8c:58:7e:1c:4a:2e:
                    0c:7c:5b:a1:25:5a:7f:e0:2f:3c:00:19:2d:93:ce:
                    a8:d7:42:1b:3b:86:de:53:93:9a:db:2d:7d:56:45:
                    54:7c:49:cb:02:50:8e:d8:8e:ac:d4:8c:50:2d:ab:
                    6d:4b:6b:d8:9a:52:53:0d:08:65:5e:82:ba:3d:ab:
                    26:6e:a2:03:a1:38:6b:82:56:77:0e:82:59:3b:e8:
                    6c:81:ff:20:64:84:a1:33:b7:78:df:a9:f8:b6:72:
                    52:a6:f9:09:5d:db:d4:6c:23:2d:be:5b:be:aa:3c:
                    12:da:54:66:06:c5:5c:35:4e:d6:0d:c4:ae:3f:c2:
                    9b:9a:92:09:39:16:0b:95:13:4c:c5:aa:b9:d7:14:
                    54:77:5c:05:46:47:5c:68:76:47:2d:86:8e:8e:15:
                    77:bf:73:1f:ce:cc:6b:44:b9:af:21:d3:7f:fd:3e:
                    06:79:1e:03:fc:5c:4a:a2:f7:31:12:28:7b:f6:44:
                    c7:4d:34:98:dc:2b:59:79:56:d6:c6:96:cd:f4:cf:
                    4a:49:55:ef:c4:ed:2a:8c:ea:45:a9:dd:16:c1:a4:
                    27:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:01:43:89:E6:50:3D:18:4D:75:D9:14:5A:2E:04:A7:D2:A6:37:DA
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232342e302f32302d3230203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:aa:92:6c:7a:40:78:8d:0e:d9:2e:01:c5:08:6a:ed:b7:a7:
         73:dc:2f:4b:28:e5:68:8f:17:32:cc:76:fa:59:80:08:44:e6:
         c4:9a:ed:69:7a:98:fe:01:9a:0f:d4:98:b5:86:bb:a3:70:20:
         b3:55:47:ea:9c:5a:b6:0e:cd:04:08:5e:a2:70:6a:1c:6f:e0:
         9b:e4:04:22:b6:cd:34:2d:ca:02:64:27:8c:e8:9b:b7:f8:fe:
         be:f2:18:25:72:bf:72:d6:ee:22:c9:b8:13:d2:a9:02:80:35:
         25:73:26:a0:ce:b3:ac:a1:0c:7e:51:af:7d:3c:1f:87:f5:0b:
         f0:e2:5d:df:6d:13:16:d3:cc:bc:04:9c:0e:5b:ac:27:44:d9:
         b7:bf:90:25:1a:13:bc:ed:96:bb:63:cf:c1:15:09:1f:bf:b3:
         c1:5d:90:69:c8:03:d4:12:92:f5:0b:87:b7:85:91:c0:00:97:
         93:58:b9:2a:76:04:42:eb:12:28:ef:16:41:f5:02:21:53:e5:
         59:87:5d:62:79:70:93:36:51:95:f1:ee:ac:94:b6:08:03:e9:
         db:6f:70:1e:12:9e:c0:3b:66:e9:ed:b9:38:26:18:9d:9d:2c:
         14:5a:54:74:ee:20:e6:cc:f9:8f:fa:2f:15:de:83:17:c5:7e:
         65:55:37:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:27:11 2026 by rpki-client