Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32342d3234203d3e20323639363136.roa
File:                     3138372e36312e39362e302f32342d3234203d3e20323639363136.roa (raw, json)
Hash identifier:          G24VoHFDQWZ8sz/KUsSYmc3t01OjP0+r/9zh8MJ+Azk=
Subject key identifier:   A3:2E:B4:DF:9B:F1:82:AB:58:15:19:40:88:B1:EC:C9:EC:0F:2D:32
Certificate issuer:       /CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
Certificate serial:       6FC063B7E13CC4D5F06079CE116D88B548DDCE06
Authority key identifier: 81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32342d3234203d3e20323639363136.roa
Signing time:             Wed 29 Apr 2026 14:34:54 +0000
ROA not before:           Wed 29 Apr 2026 14:29:54 +0000
ROA not after:            Wed 28 Apr 2027 14:34:54 +0000
asID:                     269616
IP address blocks:        187.61.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 May 2026 14:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c0:63:b7:e1:3c:c4:d5:f0:60:79:ce:11:6d:88:b5:48:dd:ce:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
        Validity
            Not Before: Apr 29 14:29:54 2026 GMT
            Not After : Apr 28 14:34:54 2027 GMT
        Subject: CN=A32EB4DF9BF182AB5815194088B1ECC9EC0F2D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:e4:16:52:32:0a:78:b5:02:61:e9:ab:ce:
                    55:1e:8b:07:97:34:f8:24:9c:15:85:65:b4:38:54:
                    81:12:2b:70:47:35:ca:26:c4:f1:6c:2b:ca:61:48:
                    80:28:9d:1d:6c:5e:46:5f:dc:e7:bd:e5:34:ef:1b:
                    b8:99:ff:31:04:1f:0b:97:ec:da:ce:6d:19:69:c5:
                    b2:44:d9:2b:8a:9f:5a:16:47:3a:f1:d5:d1:b7:97:
                    f1:52:0c:90:e1:1f:20:cc:83:c6:94:69:59:ee:2a:
                    20:a2:c7:f5:9f:ea:d5:ca:c0:4c:89:3b:d4:b1:a0:
                    91:3d:8e:2d:8a:06:c4:bf:04:d4:e8:f9:fa:f9:16:
                    49:76:f6:f0:2c:49:a8:fd:c3:a5:05:22:e1:a4:94:
                    ca:8a:21:5e:8c:47:de:ff:4d:91:cf:c5:0e:76:37:
                    0b:4f:82:65:dc:7e:65:a7:f8:a8:9b:b0:b6:d5:ed:
                    6c:2a:1f:ca:9e:e2:83:e1:d6:82:4c:3e:84:fa:7a:
                    de:87:63:9d:ed:d2:21:89:3c:60:e4:43:56:fd:5b:
                    a3:cd:ce:e2:de:10:ea:ae:fc:93:88:3b:df:94:1b:
                    50:d1:2a:2a:5e:c2:34:f6:4c:88:6d:30:b4:96:e2:
                    a3:dd:34:e7:a2:f5:6a:d7:09:f1:f7:a9:72:58:58:
                    4c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2E:B4:DF:9B:F1:82:AB:58:15:19:40:88:B1:EC:C9:EC:0F:2D:32
            X509v3 Authority Key Identifier:
                keyid:81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32342d3234203d3e20323639363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:30:35:7a:8a:84:5b:70:c2:60:e0:cf:3c:fe:72:c2:77:77:
         99:9d:d6:c2:8e:ff:64:e7:71:31:6f:6a:b4:8d:35:5f:e0:18:
         70:ec:fc:ab:de:63:77:4c:14:8f:27:84:1f:1e:73:09:fa:89:
         ba:d6:79:a6:56:09:81:29:7f:c5:5d:f3:1e:49:1a:9c:aa:e4:
         12:f9:48:03:71:43:9f:31:90:b7:e8:10:15:2e:a5:d7:33:5a:
         64:a2:b8:0f:b1:29:a4:7c:55:9f:e5:4c:53:5d:89:cd:9a:3e:
         9a:0d:36:52:7f:da:b1:e5:dd:25:85:92:a6:22:28:ba:96:19:
         77:c2:ff:6e:ba:1c:c6:3f:34:28:4e:6d:41:2a:24:92:d4:16:
         df:b1:76:5e:5e:8a:56:de:05:fb:21:cc:52:18:25:3b:ce:06:
         a4:6f:e5:2b:df:e8:39:23:65:42:fa:22:2f:b6:49:55:cf:4b:
         c4:6b:78:47:ea:3b:43:01:76:b6:68:ed:72:68:53:78:18:8e:
         8a:e3:6b:61:41:b4:e2:0d:93:94:0f:78:e6:48:76:74:b5:6a:
         57:ed:12:43:80:b6:7a:ee:73:24:07:ef:b1:c0:a7:83:53:56:
         2c:76:39:18:e9:ac:86:7a:02:46:79:3b:2f:a6:fe:75:7c:ff:
         ce:54:72:e9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUb8Bjt+E8xNXwYHnOEW2ItUjdzgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODFGOTY5OTg5MjJFQTIxRkExMDEzMzcwRUFCODQ4MEU1
RURCOUY1QzAeFw0yNjA0MjkxNDI5NTRaFw0yNzA0MjgxNDM0NTRaMDMxMTAvBgNV
BAMTKEEzMkVCNERGOUJGMTgyQUI1ODE1MTk0MDg4QjFFQ0M5RUMwRjJEMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01OQWUjIKeLUCYemrzlUeiweX
NPgknBWFZbQ4VIESK3BHNcomxPFsK8phSIAonR1sXkZf3Oe95TTvG7iZ/zEEHwuX
7NrObRlpxbJE2SuKn1oWRzrx1dG3l/FSDJDhHyDMg8aUaVnuKiCix/Wf6tXKwEyJ
O9SxoJE9ji2KBsS/BNTo+fr5Fkl29vAsSaj9w6UFIuGklMqKIV6MR97/TZHPxQ52
NwtPgmXcfmWn+KibsLbV7WwqH8qe4oPh1oJMPoT6et6HY53t0iGJPGDkQ1b9W6PN
zuLeEOqu/JOIO9+UG1DRKipewjT2TIhtMLSW4qPdNOei9WrXCfH3qXJYWEzFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoy6035vxgqtYFRlAiLHsyewPLTIwHwYDVR0j
BBgwFoAUgflpmJIuoh+hATNw6rhIDl7bn1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC84MUY5Njk5ODkyMkVBMjFGQTEwMTMzNzBFQUI4NDgwRTVFREI5RjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxRjk2OTk4OTIyRUEyMUZB
MTAxMzM3MEVBQjg0ODBFNUVEQjlGNUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzODM3MmUzNjMxMmUzOTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzYzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuz1gMA0GCSqGSIb3DQEBCwUAA4IBAQB8MDV6ioRb
cMJg4M88/nLCd3eZndbCjv9k53Exb2q0jTVf4Bhw7Pyr3mN3TBSPJ4QfHnMJ+om6
1nmmVgmBKX/FXfMeSRqcquQS+UgDcUOfMZC36BAVLqXXM1pkorgPsSmkfFWf5UxT
XYnNmj6aDTZSf9qx5d0lhZKmIii6lhl3wv9uuhzGPzQoTm1BKiSS1BbfsXZeXopW
3gX7IcxSGCU7zgakb+Ur3+g5I2VC+iIvtklVz0vEa3hH6jtDAXa2aO1yaFN4GI6K
42thQbTiDZOUD3jmSHZ0tWpX7RJDgLZ67nMkB++xwKeDU1YsdjkY6ayGegJGeTsv
pv51fP/OVHLp
-----END CERTIFICATE-----
Generated at Thu May 7 00:51:56 2026 by rpki-client