Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139372e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139372e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          dpvkZw/u7l1qPfV/Ps0au1gBXlywCha/Qi7/d2tPIg4=
Subject key identifier:   32:04:FB:C3:B3:C5:13:2F:6A:AE:A1:94:6A:05:C8:4A:24:43:ED:D0
Certificate issuer:       /CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
Certificate serial:       3E2B72A92EC548A33FC2C7ECEFEF1C73FA6D4FF4
Authority key identifier: D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139372e302f32342d3234203d3e20323632363837.roa
Signing time:             Fri 30 Jan 2026 14:01:41 +0000
ROA not before:           Fri 30 Jan 2026 13:56:41 +0000
ROA not after:            Fri 29 Jan 2027 14:01:41 +0000
asID:                     262687
IP address blocks:        187.87.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2b:72:a9:2e:c5:48:a3:3f:c2:c7:ec:ef:ef:1c:73:fa:6d:4f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
        Validity
            Not Before: Jan 30 13:56:41 2026 GMT
            Not After : Jan 29 14:01:41 2027 GMT
        Subject: CN=3204FBC3B3C5132F6AAEA1946A05C84A2443EDD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:97:37:54:66:79:8b:4e:e6:76:9e:24:31:
                    56:b2:9b:6b:1e:e4:65:3e:2e:2a:59:4c:30:14:fd:
                    82:f4:f2:a7:03:b1:ad:b0:4a:1d:34:1d:b3:0a:45:
                    51:d6:2b:a7:2f:21:dc:ad:48:24:42:f7:2d:08:3f:
                    62:c9:b9:14:0e:47:76:f8:50:35:d7:ab:79:c3:b3:
                    ce:14:60:1c:1b:12:b0:60:1d:6f:20:a4:96:82:03:
                    63:b6:dc:b3:29:1e:3c:77:a4:3b:f1:c5:ad:b7:32:
                    f7:4b:cf:6a:a6:94:56:ba:10:c1:37:68:bc:c7:33:
                    f8:81:87:6e:a4:88:fb:f4:4a:94:dc:20:5c:41:1b:
                    66:20:85:65:b9:21:e1:27:a7:53:61:a6:4b:bd:f5:
                    32:22:e7:16:94:7c:51:53:68:74:6a:fa:7d:5c:48:
                    20:78:89:2c:4f:d7:a7:39:e9:00:3a:0f:80:69:77:
                    ed:80:58:1c:ac:d1:77:f5:12:b5:29:27:88:c8:dd:
                    6c:2d:4b:48:a4:23:97:5b:76:fd:0c:ab:1b:fc:f6:
                    5d:22:5c:4e:6d:ab:cf:cd:26:60:8a:e3:b5:17:a1:
                    83:28:9c:8b:14:cd:fc:d4:c4:42:2f:6c:f1:b2:f5:
                    53:a7:f5:81:97:49:1e:3c:8d:98:78:b0:e4:86:c2:
                    ca:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:04:FB:C3:B3:C5:13:2F:6A:AE:A1:94:6A:05:C8:4A:24:43:ED:D0
            X509v3 Authority Key Identifier:
                keyid:D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139372e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:f0:fc:f9:74:ec:0b:38:11:7e:07:3b:a7:12:c1:b5:62:c1:
         f1:2d:a3:8c:68:0d:c5:78:2e:64:01:be:c5:f2:c9:ce:7b:26:
         2c:e8:a1:ee:6c:56:79:d3:b2:6a:15:9f:f8:2a:3c:13:c2:7c:
         b7:b0:d7:d6:9b:ad:81:00:62:e2:46:f2:dc:c6:03:20:3f:f8:
         b8:da:ef:11:41:58:a9:06:24:94:5b:17:c7:3c:e8:ca:c5:61:
         39:4d:5d:fa:eb:96:e7:c8:42:6e:46:41:c5:8d:e5:45:11:bd:
         36:2c:77:0e:87:7d:3b:37:ee:d5:39:0f:fc:19:31:2b:ee:ce:
         71:fa:bd:b9:ed:88:58:b7:58:46:c5:ee:c9:d5:d1:0b:4e:bd:
         01:48:5f:42:aa:82:84:68:4b:a0:d3:fd:66:f4:f4:83:bd:cc:
         1e:f5:d9:a2:14:f5:c0:d6:30:7c:01:8b:7d:f3:94:1e:df:e0:
         9e:81:fd:4e:30:88:80:46:19:0b:f9:01:bc:bd:0b:f9:e9:da:
         82:89:30:77:aa:8b:28:e7:af:93:94:17:41:20:b4:b9:d1:20:
         49:46:0e:c0:a7:7f:a5:dc:e6:46:93:c4:3f:3c:29:13:75:a6:
         a2:10:75:c8:93:be:c0:ce:50:64:ee:39:23:6a:e8:17:8f:85:
         f6:79:b9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:58:03 2026 by rpki-client