Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/3138392e3132372e3136342e302f32342d3234203d3e20323730373634.roa
File:                     3138392e3132372e3136342e302f32342d3234203d3e20323730373634.roa (raw, json)
Hash identifier:          DlzJunf9iGS8DPDFRBic9bX1BGwXEQPjx+PJOkJc1hE=
Subject key identifier:   2C:F1:80:63:FB:50:F8:80:16:E1:7C:03:B7:E7:E2:0C:86:AD:28:76
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       18D67F69BE62734EA414F3AA96C9F48543F87893
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/3138392e3132372e3136342e302f32342d3234203d3e20323730373634.roa
Signing time:             Sat 04 Apr 2026 00:02:22 +0000
ROA not before:           Fri 03 Apr 2026 23:57:22 +0000
ROA not after:            Sat 03 Apr 2027 00:02:22 +0000
asID:                     270764
IP address blocks:        189.127.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d6:7f:69:be:62:73:4e:a4:14:f3:aa:96:c9:f4:85:43:f8:78:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: Apr  3 23:57:22 2026 GMT
            Not After : Apr  3 00:02:22 2027 GMT
        Subject: CN=2CF18063FB50F88016E17C03B7E7E20C86AD2876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9e:73:24:20:68:32:2b:bb:09:2e:1b:7c:f3:
                    be:eb:9e:0d:68:44:42:8f:ac:c3:84:36:e2:1a:0b:
                    b6:ed:1a:87:7e:0d:4b:f1:25:0e:1c:50:2e:62:7a:
                    78:e2:b7:48:29:17:df:f1:7c:5a:b9:24:12:7a:2c:
                    54:15:03:8a:af:28:76:a3:4f:ec:43:68:3c:3d:21:
                    35:ef:be:b9:1f:e2:b7:3c:d6:08:ea:a0:70:67:d9:
                    c6:f2:d0:76:93:ab:60:6f:0a:bc:c8:ab:78:70:79:
                    24:89:31:6d:b2:86:0b:6b:3f:ef:f0:a2:08:f9:46:
                    24:68:ac:a9:a0:cf:d9:11:ae:71:d6:c7:03:b9:04:
                    75:c3:db:66:9b:d9:c2:93:7b:26:fc:91:bf:ce:a6:
                    c3:b3:3a:57:68:0a:1d:ba:0b:9e:f7:2e:72:5a:77:
                    d8:d9:42:84:78:53:36:83:d0:de:d9:02:00:68:4e:
                    b0:1c:c5:1f:0e:0d:01:d6:2c:0d:91:8d:cb:b1:08:
                    8d:29:d2:4b:a7:dd:16:51:73:72:92:b3:48:09:cc:
                    00:0a:33:8c:9d:c3:6d:a8:58:2b:75:0b:af:36:ee:
                    45:63:53:ac:38:f2:22:56:a1:06:81:3a:61:04:df:
                    db:e7:ea:00:37:6a:82:a8:61:5c:d1:a9:b1:f4:78:
                    cc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F1:80:63:FB:50:F8:80:16:E1:7C:03:B7:E7:E2:0C:86:AD:28:76
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/3138392e3132372e3136342e302f32342d3234203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:a7:de:b9:6a:3f:78:3a:80:94:19:2a:3a:c7:e4:1e:f5:2e:
         bb:68:81:84:99:3c:9e:d4:af:b7:2c:fd:51:6c:2d:6a:f9:5f:
         ba:3c:c4:14:9c:ce:73:5d:ba:d4:8b:e0:0c:2a:aa:57:14:81:
         ac:f0:bb:a5:ae:fb:70:be:e8:dc:bb:6c:0e:70:a4:75:2c:d1:
         e7:55:0e:24:f1:2a:01:ab:54:4e:62:98:32:91:24:bd:7f:a1:
         24:ae:d5:d9:a0:93:f9:24:90:e0:1f:b3:2f:be:07:60:23:38:
         21:f6:d2:9e:5c:a8:62:fd:18:b5:fb:d0:08:a3:a6:c5:23:f3:
         50:4c:6e:d4:89:a5:9d:d2:7c:26:9c:a3:c0:38:e2:2f:dc:03:
         1d:24:7b:18:c6:6f:75:08:ca:51:2f:9a:8e:db:2f:36:55:fb:
         13:f9:76:bd:aa:3e:2d:10:e3:d9:a1:7b:f9:91:9e:c7:10:03:
         1b:c5:44:f4:42:fb:23:e5:63:9b:a8:be:42:f6:cf:ba:9d:1d:
         b0:be:b8:37:95:57:52:b6:c7:08:ac:c6:d9:36:da:d9:f4:f5:
         7b:03:d7:01:1f:ae:27:cb:2b:c9:20:65:30:ca:af:e7:3b:86:
         63:da:0f:20:4d:b0:4e:85:74:d3:2b:e5:bf:ab:f7:f1:fb:18:
         33:0f:9a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:24:11 2026 by rpki-client