Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138372e3131302e3137322e302f32342d3234203d3e203133333335.roa
File:                     3138372e3131302e3137322e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier:          ARCQr5bu5HgujWoSJ3Kegd8khBpysMcus0Udb8nxe1s=
Subject key identifier:   28:B1:8E:B3:46:92:3E:DC:11:0D:19:7A:62:A2:06:6B:82:6F:54:27
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       03873785E46CBF9BF04E5A164EBD30768AAE1E6B
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138372e3131302e3137322e302f32342d3234203d3e203133333335.roa
Signing time:             Mon 30 Mar 2026 23:00:18 +0000
ROA not before:           Mon 30 Mar 2026 22:55:18 +0000
ROA not after:            Mon 29 Mar 2027 23:00:18 +0000
asID:                     13335
IP address blocks:        187.110.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 05:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:87:37:85:e4:6c:bf:9b:f0:4e:5a:16:4e:bd:30:76:8a:ae:1e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Mar 30 22:55:18 2026 GMT
            Not After : Mar 29 23:00:18 2027 GMT
        Subject: CN=28B18EB346923EDC110D197A62A2066B826F5427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:23:8c:31:43:4b:06:a0:fa:c1:f1:0d:0a:
                    6b:df:f8:cd:77:f8:82:82:35:85:6c:21:37:58:88:
                    86:e2:a1:ae:ec:e2:fa:84:3f:4d:38:f5:8f:a3:11:
                    cd:c6:c3:c4:10:48:f1:f0:a8:3d:4b:b8:4d:c0:76:
                    f5:de:0d:fc:1e:b8:e5:98:7d:28:17:22:8f:c1:be:
                    bb:34:f0:94:52:cf:a5:f4:05:b8:d7:56:68:3a:91:
                    37:2d:5d:79:53:0c:0a:b2:ac:30:c8:fc:f4:9b:ca:
                    92:c2:32:20:ff:ec:73:5e:0d:61:a5:54:af:25:aa:
                    36:a7:ad:5c:60:bb:5a:70:b4:f4:45:f9:38:4c:7c:
                    66:bd:72:d3:26:7d:75:ab:54:a1:a6:5a:54:6f:58:
                    f1:37:b6:28:93:b7:66:22:c9:08:fc:4f:e1:c1:d4:
                    ed:37:2e:64:dc:f6:22:5a:0f:a4:7e:36:84:d4:5c:
                    40:e8:5c:48:95:b6:b9:e3:2b:37:1d:fb:d9:34:71:
                    b8:c0:01:76:e4:ec:58:d8:2d:5d:60:0a:e8:32:a5:
                    0b:d5:87:83:29:8d:bd:c1:15:c1:58:85:38:e3:3c:
                    97:27:62:df:60:2b:a5:80:5f:e1:71:51:d0:2f:02:
                    0e:00:5e:6b:6f:7a:d4:7b:33:84:24:e1:8e:30:71:
                    75:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B1:8E:B3:46:92:3E:DC:11:0D:19:7A:62:A2:06:6B:82:6F:54:27
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138372e3131302e3137322e302f32342d3234203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:34:00:04:0e:68:4e:3e:df:dc:07:b8:1e:e5:8c:3c:b1:d3:
         92:4a:ef:6a:e7:99:9e:7f:f9:a5:ad:d6:57:f2:6f:9d:05:b7:
         1a:46:3a:94:1b:c3:08:c7:37:27:77:98:50:6d:49:67:ca:fa:
         95:0b:c0:53:c7:cf:27:6c:fe:dd:69:9a:85:88:3a:30:31:fa:
         90:eb:83:7a:92:98:9e:60:54:35:89:21:6f:9c:d5:56:a3:7b:
         df:d9:13:dc:b7:7d:a8:3e:ef:39:f1:bd:43:26:4e:19:dc:c8:
         df:03:0a:07:4a:d7:9a:a8:27:39:e3:d9:74:35:0c:f3:49:4a:
         f0:dd:02:a4:2e:fd:c0:5a:fe:4d:56:0a:a4:c7:60:ea:a5:90:
         27:dd:6a:8c:2d:d6:d1:e9:e2:e4:23:07:8b:b3:0b:08:47:e8:
         33:3e:77:c8:7a:52:48:59:13:b5:6f:cc:0d:de:01:80:5c:17:
         a7:ba:c8:2c:da:8a:36:40:ca:21:ac:c2:c6:a5:4a:50:05:40:
         86:5b:d8:a2:90:0b:31:34:06:2e:4c:07:23:d1:46:d3:17:21:
         10:98:b8:02:52:cb:d8:bd:58:a1:6f:fa:80:e8:06:c9:15:7d:
         89:e6:d6:10:43:c0:f2:7d:92:f7:99:1c:6d:63:a5:11:d6:45:
         0c:ec:43:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:41:04 2026 by rpki-client