Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3139342e35322e302f32342d3234203d3e203133333335.roa
File:                     3138362e3139342e35322e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier:          DTmKklflP9sXnAdYX2CKU3Y8EdgV+yLWUC5higt8DQY=
Subject key identifier:   17:7E:6D:88:D2:F0:E3:8E:C8:FD:FB:84:93:9E:D5:71:CE:6B:BF:75
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       4EF0E7FBBDD0F938551FCA3B2975A64EBB695D74
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3139342e35322e302f32342d3234203d3e203133333335.roa
Signing time:             Mon 30 Mar 2026 23:05:43 +0000
ROA not before:           Mon 30 Mar 2026 23:00:43 +0000
ROA not after:            Mon 29 Mar 2027 23:05:43 +0000
asID:                     13335
IP address blocks:        186.194.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 05:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f0:e7:fb:bd:d0:f9:38:55:1f:ca:3b:29:75:a6:4e:bb:69:5d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Mar 30 23:00:43 2026 GMT
            Not After : Mar 29 23:05:43 2027 GMT
        Subject: CN=177E6D88D2F0E38EC8FDFB84939ED571CE6BBF75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3c:58:8e:72:32:5e:5e:77:01:4d:54:02:7c:
                    77:dc:0f:49:cf:32:1a:c2:76:fb:fe:07:c3:26:40:
                    e0:06:7d:92:86:9b:ba:f9:5b:ec:5a:c8:9a:59:cf:
                    cd:e8:0d:db:cd:6d:6c:f3:3c:91:b4:1f:56:5f:e6:
                    ca:91:df:40:d8:dc:bc:66:ea:04:76:31:08:50:d4:
                    f5:03:e7:2e:76:b2:44:f4:ce:f3:2f:ad:a8:0d:2a:
                    17:2e:ca:ea:18:74:d8:31:6f:2c:f9:a5:ab:57:68:
                    30:c5:07:0c:ce:c2:fb:1f:d0:63:e5:b6:1c:d1:fb:
                    57:12:c5:51:92:52:0a:43:df:54:32:8e:e8:20:0a:
                    43:75:76:3c:12:ce:3a:e8:a0:ec:af:da:c2:c1:24:
                    dc:a5:58:27:a9:43:c9:de:72:85:1a:68:ac:37:c4:
                    a1:e7:42:87:71:e7:3f:fd:b0:ff:16:06:cd:8d:90:
                    52:6c:9b:16:88:00:50:d4:8e:58:99:0e:5b:65:63:
                    7c:53:07:6d:07:77:ba:bd:18:de:b3:a4:8c:00:4f:
                    c3:84:b1:2e:4f:02:da:a4:59:32:09:1c:9e:86:fa:
                    36:17:51:54:7f:0e:d5:db:75:7c:2b:2e:8b:4c:02:
                    83:a0:d5:f3:5f:44:c6:e3:d9:aa:c0:44:03:8f:30:
                    63:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7E:6D:88:D2:F0:E3:8E:C8:FD:FB:84:93:9E:D5:71:CE:6B:BF:75
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3139342e35322e302f32342d3234203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:bf:1e:1a:5d:19:f0:6e:22:ec:17:81:67:7d:ae:90:d8:d5:
         1b:46:00:7d:8f:42:f8:8d:3e:e2:59:dc:de:5d:81:3a:ff:b2:
         6a:13:19:68:db:4b:06:e8:92:b6:34:12:02:3d:72:d9:db:1c:
         09:bc:93:8d:63:60:42:f2:d4:0f:ab:71:52:34:b3:7c:a2:b2:
         3c:a2:f2:73:40:6e:93:3f:67:ce:00:4f:3b:69:60:06:57:42:
         1c:b1:5a:06:d3:c8:aa:1b:d6:01:c6:2d:c9:16:f1:34:ba:d2:
         c9:b0:63:76:66:23:6e:ee:89:d1:4c:e1:d4:ee:00:b1:18:b8:
         91:b3:d8:0b:b3:f3:f8:8d:ce:bb:d3:d4:5a:04:f9:bc:5f:4f:
         22:d2:d1:35:c9:98:57:32:88:7b:9c:db:79:ab:a8:51:02:d9:
         6e:a9:ac:54:3a:6c:3e:38:e6:1c:65:f5:df:53:56:d1:ce:67:
         8f:f5:96:96:e1:89:b6:b0:b7:aa:62:74:41:1c:93:96:ae:72:
         5f:20:d4:7f:7c:64:12:0e:56:6b:97:f3:35:56:ed:41:e8:ac:
         71:99:26:9a:cf:0a:4f:aa:f2:78:01:a8:54:54:61:7a:46:7c:
         37:90:c8:73:24:da:e7:53:a1:5c:67:f7:27:a9:1a:cb:fa:5f:
         f4:08:b3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:40:55 2026 by rpki-client