Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233382e302f32342d3234203d3e203532343638.roa
File:                     3138392e38342e3233382e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          RDBxuqn9uNXAIaIkhBKYFufsLfWEhQjQJClo/djACQc=
Subject key identifier:   71:E8:A3:F6:23:FC:D0:26:07:0B:C3:8C:13:C2:5D:D0:83:AA:3B:3A
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       190D7B9D04928ACE07B43CC9CF4C37EBE54F9099
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233382e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 01 Apr 2026 20:00:01 +0000
ROA not before:           Wed 01 Apr 2026 19:55:01 +0000
ROA not after:            Wed 31 Mar 2027 20:00:01 +0000
asID:                     52468
IP address blocks:        189.84.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 12:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0d:7b:9d:04:92:8a:ce:07:b4:3c:c9:cf:4c:37:eb:e5:4f:90:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr  1 19:55:01 2026 GMT
            Not After : Mar 31 20:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:5c:13:46:9f:0c:e5:05:7a:6e:4a:1f:04:
                    3d:14:95:11:45:29:f4:b6:4a:f2:ee:0f:d9:a3:dd:
                    fe:f0:24:85:57:40:da:83:68:0c:e5:9b:4d:e5:e7:
                    d1:9c:5a:69:3c:ee:e0:cc:60:25:6b:8f:bf:d4:26:
                    c4:65:c5:05:ca:5a:48:5e:a9:a7:33:bb:56:ce:d9:
                    09:1b:e7:3e:0d:eb:88:35:f9:c0:d6:e0:86:1a:f0:
                    ba:6c:85:d4:cd:c6:e2:41:47:25:22:12:a4:cc:a0:
                    09:45:88:1b:83:4e:83:4e:00:f2:c3:1a:0e:2b:7f:
                    ff:a1:bf:c9:20:ca:b1:d4:bf:db:d5:14:b8:80:ca:
                    b5:4f:94:bd:81:a7:73:dc:12:95:22:0f:72:bf:c3:
                    8c:38:85:56:0f:9d:fd:f7:64:5b:d9:8a:c5:ee:73:
                    c5:3b:fd:2a:8c:a5:2d:b4:99:52:6a:ba:8d:2b:be:
                    68:1e:51:54:11:af:a1:99:f4:d3:9b:cf:cf:d1:17:
                    af:1b:06:f1:06:a0:3a:9f:6d:0e:36:48:ca:80:0b:
                    8e:72:58:86:99:7b:45:13:96:f1:db:48:d9:a6:91:
                    e2:bd:22:6a:23:87:c2:f9:70:05:da:ee:c0:2d:ac:
                    59:a7:fd:c5:ac:e9:7b:a1:0f:26:a9:fb:21:42:a6:
                    6f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E8:A3:F6:23:FC:D0:26:07:0B:C3:8C:13:C2:5D:D0:83:AA:3B:3A
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233382e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e0:a2:20:2f:4c:fe:1d:7e:01:02:ad:58:cc:d5:3d:0a:e2:
         0c:22:9b:3f:89:85:91:92:cd:72:90:da:ac:88:3e:e6:bc:9a:
         f9:57:1f:e7:bf:13:0d:f7:1a:0a:61:b3:78:02:88:4f:8d:6d:
         3f:ee:fb:e3:ac:49:0c:f6:49:09:43:2d:e5:31:8a:bb:52:ce:
         0e:29:27:06:2a:ea:22:4b:e0:ea:29:8d:7d:92:3f:86:c6:ab:
         b7:fa:a9:09:5f:9d:7b:93:ba:3a:3a:eb:ee:01:03:25:2b:06:
         4b:c9:87:10:33:66:51:9b:57:c8:35:a6:2b:42:e1:d3:f7:9c:
         e7:3b:95:29:87:e5:84:d6:ce:3f:6b:71:e2:a5:99:c9:fd:3b:
         a5:08:9b:7a:bf:2d:5e:9f:41:44:18:1f:c3:ad:98:a7:71:7f:
         84:d2:7f:70:3d:55:06:a1:c7:52:3c:3b:b9:2e:e0:51:c5:c7:
         d1:d2:e7:59:14:1d:0c:f9:0c:7f:fd:a3:4b:11:41:ec:90:76:
         0b:70:80:6c:61:61:f6:da:ce:50:99:72:f5:a6:4b:73:25:29:
         e7:36:f8:7c:2f:49:5a:70:06:65:19:63:2e:5c:5c:e1:01:cb:
         19:3a:5c:87:3d:f3:06:1e:29:07:4c:24:ee:20:09:7e:6c:7b:
         c9:54:81:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 15:42:17 2026 by rpki-client