Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233352e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233352e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          8uF1+V58HcxXSvHF/A9NgeNb2MQPe/ADNdHAFBN0VkY=
Subject key identifier:   42:4A:2A:27:9F:98:A3:95:78:21:D7:35:E4:76:9C:70:C7:51:34:E1
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       487B5C1C23EAAE03ACABF1CEB7DD0A38E1162C67
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233352e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 01 Apr 2026 20:00:01 +0000
ROA not before:           Wed 01 Apr 2026 19:55:01 +0000
ROA not after:            Wed 31 Mar 2027 20:00:01 +0000
asID:                     28338
IP address blocks:        189.84.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7b:5c:1c:23:ea:ae:03:ac:ab:f1:ce:b7:dd:0a:38:e1:16:2c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr  1 19:55:01 2026 GMT
            Not After : Mar 31 20:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:99:66:15:cf:e1:44:f0:5d:a7:1e:55:43:b4:
                    45:a7:00:71:53:e6:12:0c:91:3e:fb:23:c9:18:f2:
                    23:d9:45:ef:ee:09:c6:e4:6d:98:f5:d2:46:8e:dc:
                    bd:75:67:a1:a8:fb:13:11:e5:d4:25:b4:94:ee:b0:
                    08:45:a1:98:6d:2f:44:c4:7e:0a:85:ee:76:83:0d:
                    37:75:09:da:6d:64:1c:e9:bd:20:dc:5e:da:fe:2f:
                    ec:db:3c:d6:cc:bd:1a:f3:de:f4:45:b6:e0:98:6e:
                    71:b8:43:0d:41:0a:0e:f4:ed:eb:a5:56:07:e7:15:
                    2b:b5:bf:88:3c:e1:aa:8b:3f:45:a6:04:9e:06:76:
                    78:09:a9:76:20:60:2e:cd:b5:62:ab:c0:64:e5:42:
                    a9:72:1c:51:ff:cd:bd:f0:0f:96:5d:75:60:11:63:
                    15:87:a8:30:b6:51:b3:5e:b8:54:45:1a:0a:62:44:
                    69:17:f4:59:48:b7:95:0b:52:9b:58:c2:5c:00:55:
                    7d:73:3e:8b:62:3b:f7:ed:36:cd:7e:22:5e:af:94:
                    ca:92:ff:91:db:bb:f3:27:f6:42:22:7d:e0:5e:1e:
                    79:41:91:78:bb:e0:92:72:f1:d7:71:73:2c:f9:22:
                    13:f0:96:af:bb:9a:51:08:71:4c:23:a5:d1:66:fc:
                    b7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4A:2A:27:9F:98:A3:95:78:21:D7:35:E4:76:9C:70:C7:51:34:E1
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233352e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:80:c3:06:84:53:a4:59:29:d4:9f:d1:1d:4a:b9:f0:4f:6b:
         39:82:97:6d:97:ba:68:b4:52:1d:17:ee:50:95:2f:58:5c:e3:
         6b:af:39:32:38:53:d0:f9:8e:59:71:99:b4:39:70:e5:cf:66:
         a6:aa:18:9d:d7:15:92:6b:87:d4:da:8b:43:aa:cf:a3:ea:54:
         ce:4c:3e:10:87:3c:a8:09:cc:e3:4d:21:13:11:aa:9b:71:86:
         83:32:b9:37:92:93:ae:36:41:e4:3c:97:42:90:4e:75:80:f5:
         71:60:9a:73:a1:e1:1e:ae:7c:64:ee:4a:3d:c1:1b:50:53:17:
         fd:49:d0:c2:3a:40:55:f2:b3:7e:09:b7:c7:c9:82:4c:59:9f:
         00:1e:ac:f6:9e:6b:a1:ad:8b:92:13:15:d8:d1:b9:ba:c1:3b:
         69:72:0c:8d:c7:dc:7a:af:73:35:cd:7a:09:c2:43:d9:46:1e:
         bb:15:01:84:67:b9:41:ec:56:ec:b3:25:4c:bd:bb:1a:03:da:
         bc:d5:6a:ad:a8:4d:68:2b:bc:1e:c9:bd:5e:1b:1e:3c:6f:cc:
         c1:a2:df:3f:a2:93:07:fa:ec:12:60:a8:37:ca:b5:0b:a9:ff:
         9a:0d:88:0f:08:88:5a:fd:2e:cf:cb:0f:48:ae:52:5f:57:b6:
         00:07:b5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:28:24 2026 by rpki-client