Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2cpqa3BNj6t9CvwcfeSorDdoN1re1LYwzcJqG9nQz9Cj/0/3138362e3139362e37362e302f32342d3234203d3e20323735363834.roa
File:                     3138362e3139362e37362e302f32342d3234203d3e20323735363834.roa (raw, json)
Hash identifier:          sJG2jEsBVH8Jfyh9fFMSMdAB9UgPwL6Oic0Bav4e2Z0=
Subject key identifier:   48:5C:24:B9:D3:87:61:F2:9E:63:1F:3E:40:DC:7D:33:1C:C2:96:3D
Certificate issuer:       /CN=430CD1D6B9B9198126541B1AD730933179ABF872
Certificate serial:       4274959763D5A237FD558CA63B49031343F9B7BC
Authority key identifier: 43:0C:D1:D6:B9:B9:19:81:26:54:1B:1A:D7:30:93:31:79:AB:F8:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430CD1D6B9B9198126541B1AD730933179ABF872.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cpqa3BNj6t9CvwcfeSorDdoN1re1LYwzcJqG9nQz9Cj/0/3138362e3139362e37362e302f32342d3234203d3e20323735363834.roa
Signing time:             Tue 11 Aug 2026 13:49:42 +0000
ROA not before:           Tue 11 Aug 2026 13:44:42 +0000
ROA not after:            Tue 10 Aug 2027 13:49:42 +0000
asID:                     275684
IP address blocks:        186.196.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cpqa3BNj6t9CvwcfeSorDdoN1re1LYwzcJqG9nQz9Cj/0/430CD1D6B9B9198126541B1AD730933179ABF872.crl
                          rsync://rpki-repo.registro.br/repo/2cpqa3BNj6t9CvwcfeSorDdoN1re1LYwzcJqG9nQz9Cj/0/430CD1D6B9B9198126541B1AD730933179ABF872.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430CD1D6B9B9198126541B1AD730933179ABF872.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:74:95:97:63:d5:a2:37:fd:55:8c:a6:3b:49:03:13:43:f9:b7:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430CD1D6B9B9198126541B1AD730933179ABF872
        Validity
            Not Before: Aug 11 13:44:42 2026 GMT
            Not After : Aug 10 13:49:42 2027 GMT
        Subject: CN=485C24B9D38761F29E631F3E40DC7D331CC2963D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:6a:2a:10:dc:5a:33:c1:ab:a6:a3:c8:e5:
                    8f:ca:7d:d9:c6:7a:fe:bb:6f:38:55:e5:a4:23:e6:
                    a6:3d:35:da:13:6b:97:40:ff:8c:56:56:e4:fb:11:
                    72:2c:ff:e9:1f:82:d8:61:f8:86:d3:a8:82:6f:00:
                    0d:9d:0e:c1:55:70:07:36:30:01:02:ad:3f:0d:7a:
                    11:c0:eb:81:d3:6f:1b:3f:a5:5a:97:c1:b0:8c:61:
                    2b:71:36:dd:38:1b:30:e6:00:68:17:0d:60:36:f6:
                    4b:58:c4:d2:5b:d2:c7:91:48:06:df:14:14:21:87:
                    14:5b:d5:6f:a5:c2:2b:22:f6:d9:d7:1d:b7:c5:7b:
                    83:dc:fd:80:99:1f:0a:9f:ac:5f:dd:ef:90:62:ae:
                    1d:76:65:66:ec:1f:eb:c0:d4:09:76:f3:13:63:f7:
                    98:94:e0:55:82:99:88:4c:c0:63:4b:e5:61:8a:cf:
                    7d:b9:4a:3a:c0:27:55:29:ee:93:da:43:75:77:99:
                    30:af:9d:ee:88:7c:54:a0:f6:f2:b3:f3:f2:f6:2c:
                    a2:25:c2:7c:b8:a8:56:8a:b6:85:30:8e:2e:6a:df:
                    4d:42:6b:8d:20:1c:39:33:75:2a:ac:28:00:85:77:
                    a2:9c:70:cf:6c:af:98:3a:97:12:59:c9:4a:fa:59:
                    09:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5C:24:B9:D3:87:61:F2:9E:63:1F:3E:40:DC:7D:33:1C:C2:96:3D
            X509v3 Authority Key Identifier:
                keyid:43:0C:D1:D6:B9:B9:19:81:26:54:1B:1A:D7:30:93:31:79:AB:F8:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cpqa3BNj6t9CvwcfeSorDdoN1re1LYwzcJqG9nQz9Cj/0/430CD1D6B9B9198126541B1AD730933179ABF872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430CD1D6B9B9198126541B1AD730933179ABF872.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cpqa3BNj6t9CvwcfeSorDdoN1re1LYwzcJqG9nQz9Cj/0/3138362e3139362e37362e302f32342d3234203d3e20323735363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:83:de:7f:ab:ea:cc:1a:7d:76:5f:45:15:b0:fe:6f:e0:7e:
         ba:c8:0f:76:63:83:32:dd:00:02:b2:e2:29:fe:db:68:e0:06:
         b3:60:c8:f3:17:35:56:d2:96:54:dc:db:10:05:a9:29:15:75:
         41:f7:be:ab:d0:86:88:4f:88:67:d5:8f:46:6c:a6:0d:85:d9:
         c2:d9:9f:ca:b6:4c:ff:36:32:44:7f:eb:c5:42:4e:c4:a8:0b:
         9a:0a:cf:13:29:b9:19:5e:bf:25:ab:95:d5:b1:71:5e:b7:77:
         db:4f:92:4e:70:af:fa:5f:d0:b1:65:fb:17:ce:81:76:51:a9:
         5a:45:0f:b5:b8:c1:66:94:a6:e2:b3:7f:63:e9:c4:fa:03:fa:
         4c:ac:6c:c2:9c:4e:1f:e0:80:91:63:94:f7:0a:56:56:1e:66:
         a1:9a:3c:eb:13:a1:02:f4:bb:26:5c:50:37:8d:32:08:a2:7c:
         b4:e2:e3:9a:3d:1f:ca:1a:1c:d0:7d:77:99:f6:9e:aa:99:ae:
         03:54:cc:db:57:5c:d5:11:2d:fa:25:50:b6:d5:27:9f:db:29:
         ce:ff:ba:75:67:d3:c2:3e:7a:52:92:a8:5a:4a:b0:33:bd:bb:
         93:ce:50:43:d1:6b:f4:22:6e:d2:89:33:c1:26:cf:08:3a:9a:
         65:d2:79:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:23:39 2026 by rpki-client