Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/3138372e3130392e3131322e302f32332d3233203d3e20323732373533.roa
File:                     3138372e3130392e3131322e302f32332d3233203d3e20323732373533.roa (raw, json)
Hash identifier:          33tiS/UMCPSLFGrNTsH1Y78/cqF79ovrBP6C7YHv+HQ=
Subject key identifier:   E7:8F:6F:7F:3F:C7:43:E9:9C:3E:E5:A3:42:A9:DA:78:05:43:4A:3F
Certificate issuer:       /CN=6D70A8CADF1BE80A7A080BE16CF9B9C6B6B2EF34
Certificate serial:       4DDB07D9271B45483BE7060F3BA68B0D6B407941
Authority key identifier: 6D:70:A8:CA:DF:1B:E8:0A:7A:08:0B:E1:6C:F9:B9:C6:B6:B2:EF:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D70A8CADF1BE80A7A080BE16CF9B9C6B6B2EF34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/3138372e3130392e3131322e302f32332d3233203d3e20323732373533.roa
Signing time:             Tue 09 Jun 2026 13:03:21 +0000
ROA not before:           Tue 09 Jun 2026 12:58:21 +0000
ROA not after:            Tue 08 Jun 2027 13:03:21 +0000
asID:                     272753
IP address blocks:        187.109.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/6D70A8CADF1BE80A7A080BE16CF9B9C6B6B2EF34.crl
                          rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/6D70A8CADF1BE80A7A080BE16CF9B9C6B6B2EF34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D70A8CADF1BE80A7A080BE16CF9B9C6B6B2EF34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 03:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:db:07:d9:27:1b:45:48:3b:e7:06:0f:3b:a6:8b:0d:6b:40:79:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D70A8CADF1BE80A7A080BE16CF9B9C6B6B2EF34
        Validity
            Not Before: Jun  9 12:58:21 2026 GMT
            Not After : Jun  8 13:03:21 2027 GMT
        Subject: CN=E78F6F7F3FC743E99C3EE5A342A9DA7805434A3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3a:64:8d:66:94:2c:2f:43:6c:1b:b7:21:dc:
                    ea:d7:15:3a:b7:41:45:34:7e:fe:bf:29:39:14:03:
                    4d:0d:e0:7a:52:09:ff:7b:2b:82:23:d4:a9:05:cb:
                    34:19:bd:06:35:81:e0:b7:87:29:0c:5e:ca:a2:91:
                    39:fd:38:09:e6:c4:1f:80:e6:d1:0d:26:16:b1:8e:
                    91:64:80:8f:21:11:b9:a1:ab:ca:3b:b0:cb:77:c6:
                    54:82:d5:37:89:76:f7:4a:f4:ba:1f:12:a3:18:66:
                    25:04:2a:27:3b:68:89:53:50:56:b0:1c:cb:1d:90:
                    95:f7:7b:fb:58:a2:8b:8f:4b:95:21:10:30:00:d3:
                    51:fe:b8:64:0d:b1:e0:52:57:2d:ba:01:9a:1b:db:
                    a6:6a:64:d9:ca:43:84:a6:90:87:54:70:6f:d7:76:
                    fc:74:31:2c:53:81:ff:56:95:b5:88:3e:35:b9:e4:
                    ec:76:be:35:07:68:94:f4:48:e6:20:9a:99:0a:92:
                    0d:12:bb:02:fb:35:f7:e6:a1:62:44:32:27:07:e1:
                    93:b6:80:c8:43:46:29:b4:26:c3:27:d3:58:d0:7e:
                    9c:e9:ad:1f:7f:00:81:17:d5:79:02:0e:78:d9:52:
                    03:ee:96:1a:e6:4d:c6:fd:db:b9:a6:05:ae:c8:18:
                    5c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8F:6F:7F:3F:C7:43:E9:9C:3E:E5:A3:42:A9:DA:78:05:43:4A:3F
            X509v3 Authority Key Identifier:
                keyid:6D:70:A8:CA:DF:1B:E8:0A:7A:08:0B:E1:6C:F9:B9:C6:B6:B2:EF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/6D70A8CADF1BE80A7A080BE16CF9B9C6B6B2EF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D70A8CADF1BE80A7A080BE16CF9B9C6B6B2EF34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/3138372e3130392e3131322e302f32332d3233203d3e20323732373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:2e:d4:94:cf:6b:94:58:e7:72:cd:5f:89:94:ad:95:2a:7e:
         b2:3c:1a:46:24:d7:fd:56:da:80:cd:da:d2:f2:51:25:79:e3:
         79:be:c0:8c:2c:ef:0d:36:1e:95:7f:3f:50:9e:42:fe:72:99:
         93:89:6f:6a:d6:ec:a9:4d:da:d8:8b:30:94:30:b1:99:82:a1:
         1c:f8:93:79:f4:92:f2:c7:c4:ef:58:20:9b:2b:8a:bc:c9:98:
         41:86:b3:9d:ed:bd:a9:8d:34:f9:86:39:43:62:52:1d:fa:20:
         cd:a5:1f:4c:3f:d0:22:59:0f:13:c2:b4:c9:4a:7f:65:ce:a6:
         69:d9:59:7e:4d:30:43:2e:e1:fe:d8:00:9d:82:62:f2:2f:a4:
         8f:68:6b:62:29:ed:cf:bb:28:b9:03:a8:71:91:a3:5b:73:1f:
         02:12:d9:e7:01:42:a6:ef:92:7b:75:d3:9c:84:90:1f:1c:f6:
         a7:67:f9:b7:1c:7e:33:7d:00:21:c0:8b:13:0f:f2:e5:da:a7:
         ae:cd:a1:00:e0:b2:a4:f5:27:15:a9:73:ae:3a:50:49:2c:d9:
         09:29:f9:ed:1c:5a:75:cf:fd:ff:5e:01:0b:4d:93:c1:27:3e:
         e8:60:10:9f:60:fc:51:fd:a2:ce:45:02:7c:36:f9:80:0c:4b:
         b5:c2:ae:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:42:48 2026 by rpki-client