Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3138392e312e3132382e302f32302d3234203d3e203238363635.roa
File:                     3138392e312e3132382e302f32302d3234203d3e203238363635.roa (raw, json)
Hash identifier:          PL+Cyb9dceCbFfuTBZl6c8FkEUu635jSbiJzYCYkF20=
Subject key identifier:   35:1B:5D:A3:69:A2:CE:F4:5C:B2:E3:46:45:40:50:8F:4D:5E:09:85
Certificate issuer:       /CN=5ED394D0E587E9DDF89033FC8022DAB74DF90EFE
Certificate serial:       0DD57ABF23A8BFB2658CFB2FC78B5E343D61AE03
Authority key identifier: 5E:D3:94:D0:E5:87:E9:DD:F8:90:33:FC:80:22:DA:B7:4D:F9:0E:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3138392e312e3132382e302f32302d3234203d3e203238363635.roa
Signing time:             Thu 29 Oct 2026 01:33:39 +0000
ROA not before:           Thu 29 Oct 2026 01:28:39 +0000
ROA not after:            Thu 28 Oct 2027 01:33:39 +0000
asID:                     28665
IP address blocks:        189.1.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.crl
                          rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 02:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d5:7a:bf:23:a8:bf:b2:65:8c:fb:2f:c7:8b:5e:34:3d:61:ae:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ED394D0E587E9DDF89033FC8022DAB74DF90EFE
        Validity
            Not Before: Oct 29 01:28:39 2026 GMT
            Not After : Oct 28 01:33:39 2027 GMT
        Subject: CN=351B5DA369A2CEF45CB2E3464540508F4D5E0985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:15:ac:86:b4:43:1a:17:a8:b0:cc:b3:16:
                    6e:75:bc:a5:36:57:20:4b:77:57:14:53:da:95:14:
                    74:96:55:a6:e6:93:30:97:9b:ea:88:45:e8:b5:26:
                    61:1c:f5:81:5b:1b:dd:40:dc:b9:c1:69:f3:35:66:
                    71:00:88:53:b9:83:d5:ff:a8:a5:6a:c3:27:ab:a2:
                    19:2f:03:05:69:52:bd:db:d0:93:16:55:f9:e3:e5:
                    bc:53:6f:f1:31:39:c9:17:0b:a2:09:9e:1e:90:04:
                    ae:13:1b:8f:53:58:97:52:93:f7:e6:25:b7:32:56:
                    2c:a0:80:65:e7:32:cf:5d:e9:41:9e:96:64:48:54:
                    4f:27:fc:76:bb:15:9f:f4:d1:20:5e:24:30:0a:43:
                    a4:42:64:d9:5b:8d:93:aa:9e:4f:95:2a:b8:b9:f0:
                    bd:d9:67:0c:24:13:6a:74:99:ad:f4:15:2f:6c:a3:
                    16:2a:1c:7c:00:71:b3:4a:7a:d6:d6:72:7b:70:bb:
                    98:2a:a9:ca:5a:10:0b:76:f3:86:ae:8e:e1:88:53:
                    47:37:be:20:15:d1:9c:3d:26:e2:15:6d:10:a3:21:
                    54:18:8a:94:a4:e8:25:2f:53:83:74:59:ff:1e:9e:
                    10:2d:e2:cb:31:cc:25:36:cb:72:f9:03:a3:76:5c:
                    e2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1B:5D:A3:69:A2:CE:F4:5C:B2:E3:46:45:40:50:8F:4D:5E:09:85
            X509v3 Authority Key Identifier:
                keyid:5E:D3:94:D0:E5:87:E9:DD:F8:90:33:FC:80:22:DA:B7:4D:F9:0E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3138392e312e3132382e302f32302d3234203d3e203238363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.1.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:c3:e3:70:83:98:ab:e2:2c:b3:85:ee:76:fb:d4:50:65:f1:
         db:2c:97:1e:74:f6:4b:d3:3d:a5:0f:41:9a:38:78:15:05:d5:
         cd:62:f1:09:11:d0:e5:89:41:76:03:e4:f3:41:d3:64:4a:76:
         bb:f0:6c:d0:74:ce:43:bf:8e:46:6f:06:23:b1:ea:6e:52:9a:
         a1:60:53:4b:ac:0d:08:4a:e1:84:59:45:96:c2:11:0b:3d:a4:
         31:12:e7:8f:bb:a3:d1:ea:52:db:aa:9c:50:b9:fc:24:f1:63:
         ce:73:af:0e:11:b8:95:75:69:ad:7d:a7:76:55:64:1d:78:57:
         f1:7e:e9:ee:37:ef:70:1a:c8:8f:ec:05:6b:97:e8:ed:25:d2:
         07:08:7d:2f:30:86:d6:96:4f:3d:8e:c8:38:67:09:a9:ce:10:
         ef:33:46:69:ad:0f:d5:04:2a:23:0d:6c:02:f9:d2:43:88:73:
         1a:01:56:69:e9:35:7b:12:a0:68:ef:0b:f4:c5:0e:44:84:aa:
         f9:10:89:0d:87:d2:ca:d0:51:72:23:77:6d:ec:7f:3f:5e:88:
         fb:3b:92:33:fb:5e:7f:92:31:de:c0:93:8f:c4:2f:e3:24:dd:
         79:aa:0e:04:12:95:e9:25:87:b1:30:f9:61:72:ce:96:98:d3:
         e9:b8:48:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:18:52 2026 by rpki-client