Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232382e302f32342d3234203d3e203532343638.roa
File:                     3138392e38342e3232382e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          QNeDeoPCfP2pO0qBjpJ2jLcDfHTybez0r1CIgdEFFZo=
Subject key identifier:   C1:ED:B6:64:BE:7E:23:E0:C7:0B:07:A4:38:53:2E:C9:72:89:2F:5C
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       4150247C4F2A8EB5BEDFFAE34376DDCA27A3236E
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232382e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 01 Apr 2026 20:00:02 +0000
ROA not before:           Wed 01 Apr 2026 19:55:02 +0000
ROA not after:            Wed 31 Mar 2027 20:00:02 +0000
asID:                     52468
IP address blocks:        189.84.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 12:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:50:24:7c:4f:2a:8e:b5:be:df:fa:e3:43:76:dd:ca:27:a3:23:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr  1 19:55:02 2026 GMT
            Not After : Mar 31 20:00:02 2027 GMT
        Subject: CN=3082010A0282010100DF7658E34554EB1053FF3445E03E6FED3A15BBE665642C2842D3FE11EC6B334FB94681C44CE29B35A005D52F79E62F16A4B59963A6294FC9734E09FAAACCEF644DA2BC9C5EA9B59F889117E74E710375AAC680244497EE25DFB6F7A2942E7E0A56D422F92473FE31D7C8E41848FE1770D9C7A0552312B3709A5DAFE47BE3EE9479C9FB5AC67415EAAA0BEC5B9F556294D8526C7935DBF9B14A894EC3272891B072897D2E7CC0E3975140BB53291349231F764323B0573AAD60498D19ADC4EC9BF53451594A5F300ABA6CB4DD215D070ACFEA942C89FD87883A0CDB7B23010A9FD2055CC2069E9728B071C46C2A83A4B4814692BCCA290AD58FD17E0C744687F70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:76:58:e3:45:54:eb:10:53:ff:34:45:e0:3e:
                    6f:ed:3a:15:bb:e6:65:64:2c:28:42:d3:fe:11:ec:
                    6b:33:4f:b9:46:81:c4:4c:e2:9b:35:a0:05:d5:2f:
                    79:e6:2f:16:a4:b5:99:63:a6:29:4f:c9:73:4e:09:
                    fa:aa:cc:ef:64:4d:a2:bc:9c:5e:a9:b5:9f:88:91:
                    17:e7:4e:71:03:75:aa:c6:80:24:44:97:ee:25:df:
                    b6:f7:a2:94:2e:7e:0a:56:d4:22:f9:24:73:fe:31:
                    d7:c8:e4:18:48:fe:17:70:d9:c7:a0:55:23:12:b3:
                    70:9a:5d:af:e4:7b:e3:ee:94:79:c9:fb:5a:c6:74:
                    15:ea:aa:0b:ec:5b:9f:55:62:94:d8:52:6c:79:35:
                    db:f9:b1:4a:89:4e:c3:27:28:91:b0:72:89:7d:2e:
                    7c:c0:e3:97:51:40:bb:53:29:13:49:23:1f:76:43:
                    23:b0:57:3a:ad:60:49:8d:19:ad:c4:ec:9b:f5:34:
                    51:59:4a:5f:30:0a:ba:6c:b4:dd:21:5d:07:0a:cf:
                    ea:94:2c:89:fd:87:88:3a:0c:db:7b:23:01:0a:9f:
                    d2:05:5c:c2:06:9e:97:28:b0:71:c4:6c:2a:83:a4:
                    b4:81:46:92:bc:ca:29:0a:d5:8f:d1:7e:0c:74:46:
                    87:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:ED:B6:64:BE:7E:23:E0:C7:0B:07:A4:38:53:2E:C9:72:89:2F:5C
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232382e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:94:bc:4b:9a:ef:c1:6e:87:b8:02:35:57:f4:79:18:c4:cb:
         82:74:fd:47:82:0a:15:52:0f:41:8e:7e:bb:e6:e0:21:ef:60:
         b4:2b:61:8f:2b:3e:b9:02:b2:c2:5e:13:c3:1b:45:09:6c:13:
         41:ab:58:0b:e4:3e:52:c9:79:55:0b:37:12:60:91:19:21:74:
         59:f8:3f:d0:04:dd:57:49:cb:b0:e1:67:8b:71:97:36:51:1b:
         c3:4d:31:0e:cf:ee:61:14:d1:e7:e5:dd:2c:6e:6f:31:61:7b:
         c1:92:de:af:93:67:7d:3c:4a:16:b9:2e:4a:54:f7:bf:77:6e:
         30:a6:df:26:63:f0:00:2d:b1:8f:35:a9:c8:72:1b:7a:ba:79:
         6d:2d:e1:03:4a:46:d0:a0:84:26:5c:76:8f:52:7b:8e:ac:e2:
         fd:6e:84:bc:c5:eb:41:62:56:29:d0:bd:a5:4d:22:44:01:44:
         33:d2:bc:7b:01:df:cd:6d:3b:03:da:6b:55:d1:97:7d:7b:7a:
         e1:94:4b:b0:db:7b:40:21:a8:30:7f:9e:22:13:eb:6a:7a:ea:
         10:61:c6:b7:54:ec:c3:fd:0c:c2:42:6e:ec:58:b2:54:0e:37:
         71:ba:af:a5:8c:99:d8:5d:34:2d:6e:ef:40:30:ff:3c:41:63:
         16:0b:9f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:42:48 2026 by rpki-client