Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233372e302f32342d3234203d3e203532343638.roa
File:                     3138392e38342e3233372e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          sgGOuEXCjD4rTjk7mYvvQ5YK15oLfcYnjHr9tbrfbUQ=
Subject key identifier:   52:09:DF:7E:8F:88:FF:00:61:9B:48:4C:D2:C5:4C:58:AC:EF:9C:9E
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       6AD0726864EB732F12B696CC9C1F9249CE431695
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233372e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 01 Apr 2026 20:00:03 +0000
ROA not before:           Wed 01 Apr 2026 19:55:03 +0000
ROA not after:            Wed 31 Mar 2027 20:00:03 +0000
asID:                     52468
IP address blocks:        189.84.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 12:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d0:72:68:64:eb:73:2f:12:b6:96:cc:9c:1f:92:49:ce:43:16:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr  1 19:55:03 2026 GMT
            Not After : Mar 31 20:00:03 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:dd:a3:6e:25:bd:3c:0e:8c:51:70:01:30:89:
                    b0:75:6a:a0:50:13:93:55:8b:c7:da:83:0c:e8:2e:
                    ef:51:6a:53:2b:96:8e:26:e2:84:3e:31:c6:5b:50:
                    52:d4:30:17:d3:5e:e4:a9:95:a4:da:d6:76:69:0e:
                    6b:df:d1:8e:14:05:f9:c8:f2:6c:79:06:c1:c8:7d:
                    c5:49:b5:23:24:37:d5:8d:78:7c:d5:75:2a:ca:88:
                    bf:aa:4f:b8:b9:cb:37:ca:92:da:0d:43:86:65:ef:
                    df:76:d9:bb:33:e8:3c:31:dd:90:32:d9:f9:f8:8b:
                    09:2a:1a:af:97:98:b9:a3:2e:90:9e:17:70:be:fa:
                    91:2c:71:8a:b1:af:fe:ea:29:82:df:6b:18:f6:ba:
                    79:64:5b:a9:56:77:17:ef:8d:3f:6c:9e:4b:9d:4c:
                    45:0b:27:81:b3:84:73:55:e0:f7:c9:2f:1e:9b:ad:
                    14:d6:66:37:ee:0a:4d:cd:c5:84:43:6d:71:b3:bd:
                    4d:ea:03:7f:42:5c:75:56:69:96:15:9b:bd:7e:57:
                    bc:35:51:0a:c7:01:72:25:91:2a:e3:b4:0a:8c:55:
                    df:d4:30:cc:57:b4:fd:3d:2b:e6:39:8f:62:fa:35:
                    54:84:f3:7b:42:b2:e4:e8:78:15:00:26:6b:19:e3:
                    3d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:09:DF:7E:8F:88:FF:00:61:9B:48:4C:D2:C5:4C:58:AC:EF:9C:9E
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233372e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:d2:0c:4e:c4:a4:60:39:79:ff:f0:a5:29:cd:f3:aa:96:93:
         02:9e:c0:2f:11:cb:d8:33:f2:a1:77:83:fa:46:0b:c8:1b:ca:
         c5:67:6e:bb:d7:8e:d5:dc:f4:c9:1d:44:ea:fe:53:7c:18:72:
         6a:e0:8e:fa:3a:51:c8:ad:d7:c5:ee:05:fa:fe:75:89:71:d5:
         d9:cf:45:c2:44:4a:d8:53:09:0e:09:f0:0d:7c:e6:3c:66:09:
         01:70:36:4a:23:30:a8:97:da:91:62:e6:39:f0:f7:ae:d7:7b:
         f1:f3:8e:e7:20:f3:3a:ea:dd:90:3c:dc:c2:d1:c1:62:b8:ad:
         60:d2:1b:5e:cc:f6:49:eb:26:fc:f3:c3:57:7e:d1:4d:8c:8c:
         d0:a7:86:d7:1b:6f:7c:bd:fa:dd:3f:38:3f:5d:c4:39:9e:43:
         1b:d5:94:ea:3f:ee:ec:64:9e:00:f9:10:6b:21:ff:39:e3:86:
         23:f3:77:48:6c:e3:0d:2e:d5:7d:72:83:a4:54:3a:81:91:79:
         8d:97:96:94:68:10:47:40:c1:85:50:67:2a:6f:02:59:ab:16:
         35:9e:cc:96:2d:3b:b3:7e:7f:ee:6d:50:6b:b7:e2:d9:92:bc:
         aa:f9:51:57:52:52:43:df:cd:7b:da:15:f0:fe:6e:10:93:4a:
         54:66:0a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 20:24:22 2026 by rpki-client