Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/3138372e3131312e3132342e302f32322d3234203d3e20323731363934.roa
File:                     3138372e3131312e3132342e302f32322d3234203d3e20323731363934.roa (raw, json)
Hash identifier:          uhP4SjS0mBh9yr4PiqO/OCZ1NqHHVRRKPfPz5y0hZTw=
Subject key identifier:   6A:66:D4:E4:9E:37:82:9A:48:03:97:61:66:6B:A6:5A:28:47:6B:2A
Certificate issuer:       /CN=96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5
Certificate serial:       3708E1BE86F9883ECECA7FAAD503DBA7F5D87E50
Authority key identifier: 96:DB:E9:0E:8A:60:54:2D:04:3F:B3:67:D6:0D:CE:4A:CA:C2:B1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/3138372e3131312e3132342e302f32322d3234203d3e20323731363934.roa
Signing time:             Mon 01 Jun 2026 17:21:37 +0000
ROA not before:           Mon 01 Jun 2026 17:16:37 +0000
ROA not after:            Mon 31 May 2027 17:21:37 +0000
asID:                     271694
IP address blocks:        187.111.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5.crl
                          rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 02:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:08:e1:be:86:f9:88:3e:ce:ca:7f:aa:d5:03:db:a7:f5:d8:7e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5
        Validity
            Not Before: Jun  1 17:16:37 2026 GMT
            Not After : May 31 17:21:37 2027 GMT
        Subject: CN=6A66D4E49E37829A48039761666BA65A28476B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:d1:f9:82:9c:61:32:d0:2e:a5:6a:54:61:
                    b0:ce:dd:e8:9b:16:57:6f:3a:59:24:b2:69:86:5a:
                    44:12:ba:aa:bd:35:42:c6:e7:dd:92:9b:76:bf:2f:
                    bf:28:4c:fb:02:86:07:43:6f:d2:5d:93:f6:b4:a6:
                    9b:99:c5:ac:20:9e:20:4e:fc:3a:22:dd:67:0a:4e:
                    a5:f2:b3:ca:87:e8:28:7c:2d:7c:97:9e:6a:2d:86:
                    6d:8a:f7:cc:80:b7:94:9a:1c:09:b6:d8:52:f5:95:
                    03:d4:c8:57:fd:4c:f6:c0:81:ab:6c:30:ef:fd:c7:
                    e4:0a:56:8a:79:e5:19:ff:9b:8c:86:b7:7d:ea:a2:
                    3b:d5:72:6b:0e:4b:f0:75:73:eb:fc:ce:da:53:42:
                    c9:1f:1c:f2:40:78:9a:d7:a9:ed:7d:ca:ed:19:e5:
                    ab:44:7f:93:12:b7:0c:f5:94:cb:43:5b:b5:1d:3a:
                    f8:5c:e1:1f:29:54:b0:2c:9e:c7:c3:7f:3a:75:3d:
                    8b:bb:9c:1a:0b:61:d8:29:f0:89:d7:8a:b6:b0:e7:
                    f4:cd:dd:f5:06:fb:74:83:76:62:a3:52:b6:ab:b4:
                    c7:db:68:ce:c6:6e:7e:e1:54:40:5d:10:2e:69:ed:
                    12:c8:7c:e5:3b:32:97:6e:3c:da:46:a8:b5:c5:1e:
                    b5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:66:D4:E4:9E:37:82:9A:48:03:97:61:66:6B:A6:5A:28:47:6B:2A
            X509v3 Authority Key Identifier:
                keyid:96:DB:E9:0E:8A:60:54:2D:04:3F:B3:67:D6:0D:CE:4A:CA:C2:B1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/3138372e3131312e3132342e302f32322d3234203d3e20323731363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:b2:af:20:05:e1:55:3d:74:9e:1a:ab:0a:07:3f:7c:2b:78:
         2c:ee:5e:be:19:20:9b:68:0d:d6:e5:c8:57:a2:f0:ca:b1:cd:
         36:11:59:b4:7c:0d:c3:df:14:5c:3e:8d:9c:c6:bd:66:ff:f0:
         63:22:c9:7c:c4:2f:dc:ba:45:25:1b:20:bb:de:93:ce:37:28:
         52:83:a2:82:92:2c:93:82:55:24:a1:20:20:77:73:93:1b:27:
         91:84:ac:dc:47:48:0c:57:61:96:ea:a3:0b:78:5d:bd:40:d8:
         8c:f9:f5:d2:49:ab:92:db:17:8a:ea:18:9b:ee:31:7e:a3:84:
         b3:c8:8c:97:3e:c8:c2:ec:12:a6:4d:ac:98:ac:bc:3d:3e:5b:
         3d:b0:ca:b8:2f:4f:d5:e2:dd:0b:83:75:db:fe:5f:fd:38:ef:
         d4:e0:1e:76:f9:bf:b9:56:b3:c3:d6:f3:ae:cf:b8:b5:3e:24:
         71:10:bd:a8:ef:18:b8:a5:76:57:50:99:08:cd:41:d8:cd:a5:
         aa:40:55:b8:8a:5e:c4:8f:4c:9f:c7:5c:ee:6d:04:cd:cf:c6:
         01:45:39:58:c2:a2:1f:10:e4:0d:bb:9b:c6:b4:aa:bc:81:10:
         6e:ab:25:7e:53:fe:d5:53:18:35:4a:4d:12:e0:5e:ba:31:ee:
         b0:c7:8c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:13:45 2026 by rpki-client