Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/3138392e3132372e3136352e302f32342d3234203d3e20323730373634.roa
File:                     3138392e3132372e3136352e302f32342d3234203d3e20323730373634.roa (raw, json)
Hash identifier:          4ritKEtu0cw0NFhr3+Kkd3C+3ti3LGI9rXbnBUhfolA=
Subject key identifier:   07:C3:AE:23:14:9F:CE:BE:86:72:08:02:44:72:C2:0C:8C:D6:2D:8D
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       67F0B0406AC6CEF81F3B06091EB5FC6F1EAC0D18
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/3138392e3132372e3136352e302f32342d3234203d3e20323730373634.roa
Signing time:             Sat 04 Apr 2026 00:02:19 +0000
ROA not before:           Fri 03 Apr 2026 23:57:19 +0000
ROA not after:            Sat 03 Apr 2027 00:02:19 +0000
asID:                     270764
IP address blocks:        189.127.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f0:b0:40:6a:c6:ce:f8:1f:3b:06:09:1e:b5:fc:6f:1e:ac:0d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: Apr  3 23:57:19 2026 GMT
            Not After : Apr  3 00:02:19 2027 GMT
        Subject: CN=07C3AE23149FCEBE867208024472C20C8CD62D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a9:02:35:93:5e:68:1b:4f:2d:27:dd:cd:2d:
                    f7:88:75:ad:fe:fa:81:89:4a:ff:a0:8d:a1:4b:c5:
                    4c:5b:9e:af:9e:a2:b8:02:aa:c8:2a:95:d8:a0:a1:
                    5c:cb:4f:f9:a6:20:1e:34:66:b5:19:67:1c:fe:d0:
                    b4:a6:63:bd:99:57:a7:fc:07:16:4a:1a:0f:e4:86:
                    2d:d6:55:94:f6:d8:61:47:e7:75:1d:89:68:ec:dc:
                    52:37:9b:ef:91:32:11:6e:9c:df:b4:1e:7a:7a:7a:
                    d6:e1:b9:ba:fe:e4:b7:9f:6b:5c:1c:b3:74:e1:1d:
                    98:48:73:d9:c3:85:6c:df:a8:b7:07:cc:2c:57:46:
                    e7:06:48:b8:74:05:6e:64:87:6a:81:e6:46:24:9c:
                    2a:11:14:97:a5:46:3d:35:2d:60:7f:6b:be:98:b9:
                    62:51:ee:77:d2:b0:ff:f6:c1:a0:85:a4:17:02:e9:
                    8d:02:10:5f:c7:25:13:52:62:c8:bd:97:32:4b:15:
                    35:47:28:21:3a:e8:7b:35:77:58:d2:a1:35:78:fb:
                    11:6a:da:e2:9b:46:11:1b:ce:f8:61:d8:d4:51:d6:
                    29:95:7b:2f:9b:e0:be:4f:65:9c:15:ca:a5:1d:3e:
                    63:46:3b:8b:77:f0:51:99:81:21:0d:3d:35:a1:76:
                    e2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C3:AE:23:14:9F:CE:BE:86:72:08:02:44:72:C2:0C:8C:D6:2D:8D
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/3138392e3132372e3136352e302f32342d3234203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:b8:99:1a:94:e1:19:ea:a0:49:2d:00:3c:6a:eb:45:f6:b5:
         66:73:27:ec:54:64:7f:43:ef:ee:a1:3e:7d:b7:50:78:5a:46:
         55:ec:eb:10:bf:38:e9:7b:04:47:07:1d:67:fc:6d:fe:74:f5:
         6a:78:c2:18:eb:52:53:67:0c:39:a1:b4:e5:9f:9a:07:5a:ac:
         c5:05:17:a9:8d:96:eb:c3:a3:58:3c:70:83:7f:be:92:0f:f8:
         a9:e3:06:d1:a3:65:b3:71:bf:2d:5d:d8:c7:83:a1:b6:f2:b0:
         97:f4:e6:33:f2:af:ce:f3:c3:d7:bf:f0:1f:72:73:c3:83:1a:
         55:6c:11:a4:52:ef:c4:77:6a:90:a2:6e:bf:55:b1:2c:29:a0:
         59:04:47:16:3e:d1:7a:9a:ec:25:b6:bb:9a:53:3b:97:bd:db:
         38:ef:b3:cd:97:07:1b:4a:5f:fd:22:3a:2d:7e:2a:36:76:c9:
         5e:1f:d9:d4:5e:fb:ac:45:25:81:1b:f6:10:7b:70:cb:09:1e:
         aa:7e:a5:fa:99:0e:a4:f4:25:bc:6c:d0:33:74:96:f7:0e:1b:
         30:18:74:89:dd:4b:58:f1:8a:36:d9:4f:83:d1:ca:09:35:1c:
         aa:dd:07:0a:29:3c:df:e3:e3:e2:51:72:70:6c:3f:b8:ad:9b:
         dc:1d:f8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:23:10 2026 by rpki-client