Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232352e302f32342d3234203d3e203532343638.roa
File:                     3138392e38342e3232352e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          lsUnJhV91wwU9lVjI0C2Nn82HqDpn+UP5MNq1KeQyk0=
Subject key identifier:   ED:A1:B2:D3:E1:11:B1:FC:3B:60:01:72:6B:0B:68:EC:71:23:88:D9
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       647A452E923796060C0090DEF78BC909DD06D236
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232352e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 01 Apr 2026 20:00:00 +0000
ROA not before:           Wed 01 Apr 2026 19:55:00 +0000
ROA not after:            Wed 31 Mar 2027 20:00:00 +0000
asID:                     52468
IP address blocks:        189.84.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 12:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7a:45:2e:92:37:96:06:0c:00:90:de:f7:8b:c9:09:dd:06:d2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr  1 19:55:00 2026 GMT
            Not After : Mar 31 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:77:6f:c8:05:49:34:06:ec:00:c3:74:7d:23:
                    8b:18:fc:0c:04:80:f0:0d:35:c4:f7:ed:d8:a9:ce:
                    78:59:78:29:54:89:a1:76:a5:ce:12:3d:f0:b1:91:
                    ba:a2:11:67:22:7c:1e:55:a5:4b:50:7c:27:5a:cb:
                    37:3a:24:df:00:db:f1:91:99:0c:f6:c8:dc:5b:41:
                    62:43:ac:c4:45:c1:90:66:17:a2:bf:91:23:00:00:
                    b7:9c:49:72:5e:2f:f3:8a:c3:7a:ed:78:ed:c4:54:
                    b4:33:7b:a3:8c:7b:36:33:6f:eb:54:a4:2f:94:8a:
                    96:5d:9d:76:a8:4c:f4:34:2e:ca:a2:ef:99:7d:c9:
                    bb:69:78:36:7f:70:a1:3c:01:90:40:cd:cd:61:c8:
                    b1:e6:bf:7f:1e:62:a1:c5:ac:b5:1a:80:ca:04:ef:
                    e4:f4:99:a0:77:8b:4e:13:3d:c9:2a:17:94:ea:f2:
                    8b:55:52:8b:9a:03:bc:ce:ea:2b:d1:1f:ff:bd:05:
                    51:4f:65:38:b8:75:19:c2:e0:7a:fd:25:73:01:60:
                    91:c7:da:29:b0:1e:c3:de:75:7b:01:17:19:49:64:
                    65:9f:b1:e9:cb:26:3b:fc:7f:7f:2e:1a:c4:2e:37:
                    8f:8f:1b:fe:25:e4:c7:55:69:07:ab:82:91:ba:0e:
                    57:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A1:B2:D3:E1:11:B1:FC:3B:60:01:72:6B:0B:68:EC:71:23:88:D9
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232352e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:71:9b:de:59:fd:b2:56:3c:e1:b4:f7:11:63:51:35:c0:a0:
         2b:51:67:d7:79:85:58:a1:34:b9:f4:b0:f2:be:4b:4c:01:9e:
         3c:1b:f9:fa:4f:49:e7:3a:1c:9d:6b:b7:7d:2c:b1:11:04:d0:
         33:ff:3a:30:3d:8f:81:07:8e:4d:0c:a3:2e:ce:9f:41:6f:f8:
         a3:bd:4e:7d:28:32:cf:52:72:0c:10:32:81:9c:3c:ed:73:c7:
         79:e2:ec:20:f9:e7:55:3e:3e:06:30:40:c1:fa:1f:b7:d2:34:
         7c:17:ec:78:a4:ba:10:e2:52:cf:72:65:25:59:49:52:da:d5:
         ac:78:31:11:c1:02:31:50:03:1e:6b:d6:72:9d:9a:a5:f5:bb:
         5a:bf:d1:1e:c8:06:82:8a:52:3e:77:35:6b:84:0e:44:1f:7d:
         68:30:5b:03:e8:6d:93:05:5d:a7:7c:16:23:16:44:cc:ac:06:
         1a:11:fa:fb:62:66:1c:26:11:bb:64:2e:e4:92:ae:66:fb:75:
         55:0e:3d:86:c7:4e:7d:a7:9c:92:da:aa:18:7b:39:3e:27:e2:
         eb:80:19:e8:f5:c7:65:9d:01:b0:e1:c5:90:55:a7:d4:b7:94:
         68:69:86:37:61:70:2e:c2:f0:59:ce:ee:7c:82:76:87:d2:26:
         67:ae:9d:92
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUZHpFLpI3lgYMAJDe94vJCd0G0jYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGNjJENTVEQzc1ODg3NUI0OUFEQ0EwRkNEMTE1ODA3
QjJGMUREMTAeFw0yNjA0MDExOTU1MDBaFw0yNzAzMzEyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTY3NzZGQzgwNTQ5MzQwNkVD
MDBDMzc0N0QyMzhCMThGQzBDMDQ4MEYwMEQzNUM0RjdFREQ4QTlDRTc4NTk3ODI5
NTQ4OUExNzZBNUNFMTIzREYwQjE5MUJBQTIxMTY3MjI3QzFFNTVBNTRCNTA3QzI3
NUFDQjM3M0EyNERGMDBEQkYxOTE5OTBDRjZDOERDNUI0MTYyNDNBQ0M0NDVDMTkw
NjYxN0EyQkY5MTIzMDAwMEI3OUM0OTcyNUUyRkYzOEFDMzdBRUQ3OEVEQzQ1NEI0
MzM3QkEzOEM3QjM2MzM2RkVCNTRBNDJGOTQ4QTk2NUQ5RDc2QTg0Q0Y0MzQyRUNB
QTJFRjk5N0RDOUJCNjk3ODM2N0Y3MEExM0MwMTkwNDBDRENENjFDOEIxRTZCRjdG
MUU2MkExQzVBQ0I1MUE4MENBMDRFRkU0RjQ5OUEwNzc4QjRFMTMzREM5MkExNzk0
RUFGMjhCNTU1MjhCOUEwM0JDQ0VFQTJCRDExRkZGQkQwNTUxNEY2NTM4Qjg3NTE5
QzJFMDdBRkQyNTczMDE2MDkxQzdEQTI5QjAxRUMzREU3NTdCMDExNzE5NDk2NDY1
OUZCMUU5Q0IyNjNCRkM3RjdGMkUxQUM0MkUzNzhGOEYxQkZFMjVFNEM3NTU2OTA3
QUI4MjkxQkEwRTU3ODEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAlndvyAVJNAbsAMN0fSOLGPwMBIDwDTXE9+3Yqc54WXgpVImhdqXO
Ej3wsZG6ohFnInweVaVLUHwnWss3OiTfANvxkZkM9sjcW0FiQ6zERcGQZheiv5Ej
AAC3nElyXi/zisN67XjtxFS0M3ujjHs2M2/rVKQvlIqWXZ12qEz0NC7Kou+Zfcm7
aXg2f3ChPAGQQM3NYcix5r9/HmKhxay1GoDKBO/k9Jmgd4tOEz3JKheU6vKLVVKL
mgO8zuor0R//vQVRT2U4uHUZwuB6/SVzAWCRx9opsB7D3nV7ARcZSWRln7HpyyY7
/H9/LhrELjePjxv+JeTHVWkHq4KRug5XgQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FO2hstPhEbH8O2ABcmsLaOxxI4jZMB8GA1UdIwQYMBaAFLf2LVXcdYh1tJrcoPzR
FYB7Lx3RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRCeDg4RlhlOG41Ujc0
OXBXZ3JrQVMzZGV5cjVtZHl5ZnhCTmlXejV5dnZNLzEvQjdGNjJENTVEQzc1ODg3
NUI0OUFEQ0EwRkNEMTE1ODA3QjJGMUREMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CN0Y2MkQ1NURDNzU4ODc1QjQ5QURDQTBGQ0QxMTU4MDdCMkYx
REQxLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80Qng4OEZYZThuNVI3NDlwV2dy
a0FTM2RleXI1bWR5eWZ4Qk5pV3o1eXZ2TS8xLzMxMzgzOTJlMzgzNDJlMzIzMjM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL1U
4TANBgkqhkiG9w0BAQsFAAOCAQEAOnGb3ln9slY84bT3EWNRNcCgK1Fn13mFWKE0
ufSw8r5LTAGePBv5+k9J5zocnWu3fSyxEQTQM/86MD2PgQeOTQyjLs6fQW/4o71O
fSgyz1JyDBAygZw87XPHeeLsIPnnVT4+BjBAwfoft9I0fBfseKS6EOJSz3JlJVlJ
UtrVrHgxEcECMVADHmvWcp2apfW7Wr/RHsgGgopSPnc1a4QORB99aDBbA+htkwVd
p3wWIxZEzKwGGhH6+2JmHCYRu2Qu5JKuZvt1VQ49hsdOfaecktqqGHs5Pifi64AZ
6PXHZZ0BsOHFkFWn1LeUaGmGN2FwLsLwWc7ufIJ2h9ImZ66dkg==
-----END CERTIFICATE-----
Generated at Wed Apr 8 16:42:44 2026 by rpki-client