Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233342e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233342e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          RjgMYTtp/QR+Tr38kqDaYm7f8L5fbG0d3IhT7g6VzdY=
Subject key identifier:   16:50:4D:22:96:52:B7:5B:2E:21:73:78:22:D2:6F:F4:77:D7:8C:82
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       0EC56C3ED0558752B0A79D8362721E4FEA1F14D9
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233342e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 01 Apr 2026 19:00:00 +0000
ROA not before:           Wed 01 Apr 2026 18:55:00 +0000
ROA not after:            Wed 31 Mar 2027 19:00:00 +0000
asID:                     28338
IP address blocks:        189.84.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c5:6c:3e:d0:55:87:52:b0:a7:9d:83:62:72:1e:4f:ea:1f:14:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr  1 18:55:00 2026 GMT
            Not After : Mar 31 19:00:00 2027 GMT
        Subject: CN=3082010A0282010100CB0ED3B01689185D47DA63479CFB4DE82B2149F5F9A9E69FC4FD28F3E10296C0675DDB092C1CCD682F1CBBFB076667977CBA4C883790664183188787DB598098D6B9EA998723D7E966B40421763AFF64FCCD41DA9D3CF185E9E255AD50049618ED1383E97C3DF00A4CEC9275EECCE3E01E46C09636C7017DE83C15354D6C2D7A6A6AE5BEA8D6CBDB09853F3C0D4A157F63F41B7F61AD8BBC5D31B8E0432EAFE7C2A8706B124FD91C508B3192DE4F900EB59E8E8E074FB2D206BDADB31EF3BE16227BD54111EBAEA1526115C424388AE4FC3BAA6476B35C5FA3A0CCF103D4425B027AC37372B11DF4354AF34E1819974EED522BB5CD168CC13F771EE221E41F4B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:d3:b0:16:89:18:5d:47:da:63:47:9c:fb:
                    4d:e8:2b:21:49:f5:f9:a9:e6:9f:c4:fd:28:f3:e1:
                    02:96:c0:67:5d:db:09:2c:1c:cd:68:2f:1c:bb:fb:
                    07:66:67:97:7c:ba:4c:88:37:90:66:41:83:18:87:
                    87:db:59:80:98:d6:b9:ea:99:87:23:d7:e9:66:b4:
                    04:21:76:3a:ff:64:fc:cd:41:da:9d:3c:f1:85:e9:
                    e2:55:ad:50:04:96:18:ed:13:83:e9:7c:3d:f0:0a:
                    4c:ec:92:75:ee:cc:e3:e0:1e:46:c0:96:36:c7:01:
                    7d:e8:3c:15:35:4d:6c:2d:7a:6a:6a:e5:be:a8:d6:
                    cb:db:09:85:3f:3c:0d:4a:15:7f:63:f4:1b:7f:61:
                    ad:8b:bc:5d:31:b8:e0:43:2e:af:e7:c2:a8:70:6b:
                    12:4f:d9:1c:50:8b:31:92:de:4f:90:0e:b5:9e:8e:
                    8e:07:4f:b2:d2:06:bd:ad:b3:1e:f3:be:16:22:7b:
                    d5:41:11:eb:ae:a1:52:61:15:c4:24:38:8a:e4:fc:
                    3b:aa:64:76:b3:5c:5f:a3:a0:cc:f1:03:d4:42:5b:
                    02:7a:c3:73:72:b1:1d:f4:35:4a:f3:4e:18:19:97:
                    4e:ed:52:2b:b5:cd:16:8c:c1:3f:77:1e:e2:21:e4:
                    1f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:50:4D:22:96:52:B7:5B:2E:21:73:78:22:D2:6F:F4:77:D7:8C:82
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233342e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:cd:96:3e:30:78:5d:51:1c:02:df:33:a6:62:25:d4:3c:0f:
         db:1c:20:ef:e1:22:2c:b7:44:79:61:d9:ee:b2:28:2f:5e:02:
         fb:51:bb:06:7d:9f:81:1d:61:32:92:2f:48:33:28:61:23:dd:
         71:45:18:7e:ff:78:5b:a5:0f:f6:5b:77:b3:ba:6b:25:79:54:
         a4:cd:36:fc:2a:be:28:8c:8f:28:95:87:9a:b8:05:53:47:81:
         a0:79:1a:aa:44:a2:aa:d7:76:51:8b:62:a1:69:44:ee:df:81:
         bf:ab:62:8b:1e:37:35:31:d1:bf:52:f1:a6:16:e9:3e:2d:c5:
         30:35:fa:18:b2:d8:2c:27:fe:4c:07:ed:44:22:7f:99:5f:31:
         d7:b5:32:65:e6:2d:42:74:59:17:d2:f7:5d:1a:e3:13:63:8e:
         2d:e6:8b:50:5a:02:c7:36:e5:22:c7:55:53:1d:0c:fa:d4:95:
         09:3a:2c:b6:d2:c6:a7:18:19:4b:ed:a6:5a:8b:64:30:7a:a3:
         ec:9e:e3:94:e5:dc:1e:76:4d:a2:52:3b:8c:fb:86:06:e9:d5:
         fc:a4:5c:a2:d5:a5:78:92:24:66:1a:8b:9a:38:98:51:00:cc:
         6c:71:fe:6b:91:71:bf:a0:23:62:08:4f:08:b4:4d:87:f3:bd:
         fc:51:39:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:27:25 2026 by rpki-client