Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/3139302e3132332e3139362e302f32322d3332203d3e20323636323034.roa
File:                     3139302e3132332e3139362e302f32322d3332203d3e20323636323034.roa (raw, json)
Hash identifier:          KQ2UZ03kfc9VGMGW+0WklkHIXdNOr69n5w54YQzGTFw=
Subject key identifier:   CA:81:5D:22:DE:4F:4C:64:19:8D:89:F4:5E:55:3E:E6:DD:26:7D:AE
Certificate issuer:       /CN=B04B868951C3A7AE2D91019FE58449D74D561224
Certificate serial:       379281CE5FAD4358961515166323DA0A9C3338B1
Authority key identifier: B0:4B:86:89:51:C3:A7:AE:2D:91:01:9F:E5:84:49:D7:4D:56:12:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04B868951C3A7AE2D91019FE58449D74D561224.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/3139302e3132332e3139362e302f32322d3332203d3e20323636323034.roa
Signing time:             Mon 30 Mar 2026 23:27:15 +0000
ROA not before:           Mon 30 Mar 2026 23:22:15 +0000
ROA not after:            Mon 29 Mar 2027 23:27:15 +0000
asID:                     266204
IP address blocks:        190.123.196.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/B04B868951C3A7AE2D91019FE58449D74D561224.crl
                          rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/B04B868951C3A7AE2D91019FE58449D74D561224.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04B868951C3A7AE2D91019FE58449D74D561224.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 10:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:92:81:ce:5f:ad:43:58:96:15:15:16:63:23:da:0a:9c:33:38:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B04B868951C3A7AE2D91019FE58449D74D561224
        Validity
            Not Before: Mar 30 23:22:15 2026 GMT
            Not After : Mar 29 23:27:15 2027 GMT
        Subject: CN=CA815D22DE4F4C64198D89F45E553EE6DD267DAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e6:ac:98:7a:38:4a:9b:75:dc:f7:9b:36:c3:
                    47:d0:d3:a2:f4:2e:ac:f5:fe:22:21:3f:c2:14:da:
                    af:3d:cf:10:db:9e:d8:71:2e:1a:b6:b6:9f:bb:e7:
                    a6:1e:7b:9b:03:1f:ed:f6:13:77:a6:85:8e:d7:95:
                    67:ce:4b:d7:60:9e:0f:69:00:06:83:d5:d5:8c:13:
                    30:13:5d:9a:ec:13:e6:a0:82:2c:77:2c:8f:47:69:
                    8d:a8:ee:6c:4e:15:24:06:ce:5d:b4:0c:8b:93:86:
                    a6:24:5a:0f:28:a6:61:a6:c5:45:6f:11:51:d6:3d:
                    05:74:d6:26:8d:4e:dc:e1:01:97:94:e9:8e:94:b3:
                    72:fd:13:cf:c4:27:a4:40:80:60:28:74:89:72:e4:
                    60:00:20:75:7b:30:b7:da:ae:f7:b8:97:42:3b:ca:
                    cf:01:cc:be:65:33:60:f7:9d:54:7a:03:73:13:61:
                    26:84:5b:6a:17:a9:e6:6b:10:24:f1:aa:f4:46:88:
                    3b:6e:e8:59:94:de:78:f6:8f:e4:6f:fd:ec:a3:d6:
                    f1:0e:fb:69:a0:f2:2f:a2:c6:80:a4:f9:2f:8a:4c:
                    21:11:1c:0b:95:23:e8:fc:4e:0a:28:2f:f7:a6:75:
                    7f:a5:b3:05:07:48:4a:fe:4e:7f:7a:c3:1b:53:99:
                    66:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:81:5D:22:DE:4F:4C:64:19:8D:89:F4:5E:55:3E:E6:DD:26:7D:AE
            X509v3 Authority Key Identifier:
                keyid:B0:4B:86:89:51:C3:A7:AE:2D:91:01:9F:E5:84:49:D7:4D:56:12:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/B04B868951C3A7AE2D91019FE58449D74D561224.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04B868951C3A7AE2D91019FE58449D74D561224.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/3139302e3132332e3139362e302f32322d3332203d3e20323636323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:f9:fc:b4:a1:42:b5:1f:6e:74:c0:2c:c3:ab:aa:42:e8:d4:
         44:33:41:77:56:e9:a4:1f:e6:27:e0:9b:10:23:40:92:8f:3d:
         a4:43:54:f1:dc:e4:99:95:e6:d2:5b:b8:78:e5:cb:11:71:cf:
         f7:6d:1d:96:3a:69:40:ff:ef:44:da:a3:a1:f7:a0:5b:40:cd:
         e2:5f:14:67:8d:a8:6f:8b:61:95:f5:f1:72:20:d9:5b:92:53:
         d8:a1:e9:5f:9f:2d:4d:e3:cb:85:05:c6:84:06:70:0f:b0:5b:
         85:4e:6e:29:ba:74:91:82:c3:aa:97:72:55:24:84:ee:91:e3:
         06:3e:d7:ce:9f:f6:d7:45:e2:7a:8a:fb:c8:09:4c:6b:3a:08:
         08:10:9c:75:9c:77:c2:81:e8:ca:76:d5:92:40:98:11:c0:af:
         5a:ec:df:22:0c:6c:79:d5:b6:e7:c8:dd:97:b1:c0:2b:cb:6f:
         4a:84:8f:30:c4:ce:d4:2f:ee:cf:4e:c5:e0:9e:2e:92:50:f5:
         7a:64:f2:ba:07:df:f2:43:ee:4c:52:e3:70:0b:0a:25:f1:6d:
         27:26:f5:b8:5c:8e:3b:19:36:5f:ec:89:1b:6a:5d:b6:39:1d:
         7f:06:ce:ed:28:05:ae:fd:3e:1e:a2:4e:71:4d:cf:a0:de:43:
         81:c3:81:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:00:36 2026 by rpki-client