Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39382e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e39382e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          9FPz5t1zbk7CQZNWyVq8Ow/RZraN7Bn+xOAurUVkHAg=
Subject key identifier:   57:08:6D:B1:BB:A9:79:66:BB:6D:BC:41:64:BD:8D:5F:5C:CF:71:94
Certificate issuer:       /CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
Certificate serial:       2090E0D1C10E228E8161E0F97D2604BE43D34D70
Authority key identifier: 81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39382e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 29 Apr 2026 14:34:56 +0000
ROA not before:           Wed 29 Apr 2026 14:29:56 +0000
ROA not after:            Wed 28 Apr 2027 14:34:56 +0000
asID:                     53153
IP address blocks:        187.61.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 May 2026 14:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:90:e0:d1:c1:0e:22:8e:81:61:e0:f9:7d:26:04:be:43:d3:4d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
        Validity
            Not Before: Apr 29 14:29:56 2026 GMT
            Not After : Apr 28 14:34:56 2027 GMT
        Subject: CN=57086DB1BBA97966BB6DBC4164BD8D5F5CCF7194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:40:75:17:21:cc:49:35:ca:d0:6b:a4:28:
                    2c:5c:78:d6:72:6c:70:72:ca:5b:85:c0:9b:cb:e1:
                    02:f8:3c:d9:41:2f:04:9a:31:2c:85:66:21:1c:98:
                    60:01:39:54:cc:88:5d:13:a3:42:20:49:94:f4:2a:
                    fa:6c:01:21:e3:e7:b1:63:e4:f4:f2:61:70:65:1d:
                    b4:b5:1c:00:92:b9:5b:cc:69:c6:18:fa:1b:6e:e7:
                    f0:6b:21:a3:94:53:d8:90:6c:46:0d:1b:d8:68:dc:
                    a2:4c:0e:2e:f6:73:52:2e:3b:5d:1e:88:be:d1:09:
                    e4:e0:b5:03:4c:99:61:1e:5c:7e:dd:ee:84:a4:ec:
                    3a:af:d3:a6:4f:9a:62:d1:6f:dd:bd:74:cd:f1:9b:
                    c2:22:52:5a:4c:dd:94:db:50:07:11:87:63:1b:99:
                    d0:a3:92:c1:3e:8d:68:94:d0:69:35:c4:dc:e3:e5:
                    9c:e0:69:e9:59:68:52:58:c0:77:d2:58:ad:7b:4d:
                    b9:1f:fd:0c:14:6d:77:35:e4:f5:a1:65:00:f0:98:
                    b1:9d:6a:16:e5:e5:3f:4d:66:79:09:b5:f5:1a:69:
                    33:71:4a:7f:25:3a:97:d4:5f:59:5b:0a:92:54:6e:
                    d4:4c:33:fa:91:4c:89:1d:a4:37:91:87:d8:5b:1c:
                    28:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:08:6D:B1:BB:A9:79:66:BB:6D:BC:41:64:BD:8D:5F:5C:CF:71:94
            X509v3 Authority Key Identifier:
                keyid:81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39382e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:61:59:3b:73:30:e2:d0:f1:51:c8:d5:af:01:b8:26:fd:f1:
         bb:fa:59:89:2f:5d:01:00:58:73:7b:e1:aa:85:37:b3:e4:33:
         ff:3e:16:4b:3b:d4:d5:ef:e8:46:e7:52:d1:38:29:ce:01:32:
         a4:e6:9a:00:8d:d1:16:59:54:f3:cd:96:ef:74:65:2d:d5:dc:
         ef:5e:57:1d:7f:58:9b:a5:f5:d7:aa:16:9c:79:60:7d:c3:ce:
         f9:9f:de:18:c8:bb:f4:51:14:18:64:09:0c:31:32:52:aa:e8:
         6a:d5:36:8b:5d:cf:ca:e8:59:df:f7:a7:84:f0:6f:c6:f3:35:
         73:6e:9d:f4:ae:a4:12:4d:38:7b:c6:4b:e8:34:07:0d:ae:67:
         0b:e8:aa:ea:df:c4:00:80:10:43:09:08:18:2d:de:e2:63:61:
         05:dc:89:7f:99:7d:db:3c:ee:d7:fc:18:be:ff:1a:99:81:07:
         0c:2e:02:e2:cf:cb:2c:ea:2a:b8:69:c0:88:c2:2d:0c:6c:40:
         ae:aa:29:ec:9b:ad:bf:2e:85:f5:2f:a4:65:ae:f6:5a:ea:8e:
         54:4c:77:37:3b:2a:8f:d3:e8:0b:09:87:ab:af:1e:cc:ba:97:
         cb:43:ff:0a:d1:ed:d7:ee:31:91:65:25:e8:ec:5c:64:40:33:
         df:23:20:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 00:51:35 2026 by rpki-client