Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32332d3234203d3e203238353736.roa
File:                     3138392e33382e31362e302f32332d3234203d3e203238353736.roa (raw, json)
Hash identifier:          oziVefSuSkxUAdA/BrSwkBufWU4/Ialp0omi6KBcSd8=
Subject key identifier:   15:04:1E:23:48:7D:4B:7D:9A:37:35:B8:44:56:F9:52:DD:F0:1F:E1
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       46C4E9F03AE26E5DF58713787D2062E2E2FE0301
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32332d3234203d3e203238353736.roa
Signing time:             Wed 05 Aug 2026 18:54:25 +0000
ROA not before:           Wed 05 Aug 2026 18:49:25 +0000
ROA not after:            Wed 04 Aug 2027 18:54:25 +0000
asID:                     28576
IP address blocks:        189.38.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 06:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c4:e9:f0:3a:e2:6e:5d:f5:87:13:78:7d:20:62:e2:e2:fe:03:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Aug  5 18:49:25 2026 GMT
            Not After : Aug  4 18:54:25 2027 GMT
        Subject: CN=15041E23487D4B7D9A3735B84456F952DDF01FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a8:2d:65:61:b7:a6:8b:75:7c:ec:00:5b:fd:
                    b6:25:95:3c:bf:eb:b8:85:f6:ac:82:ed:8f:44:35:
                    fd:f3:cf:90:7e:0e:0d:d0:83:ff:31:10:69:dd:f1:
                    85:92:91:f5:47:37:80:ff:f8:30:e2:8b:dd:ee:07:
                    0b:b7:eb:6f:84:26:08:f7:c0:49:52:a7:ed:b5:f8:
                    a8:3c:fb:a6:61:22:27:58:22:a1:c8:ea:16:7f:39:
                    bd:79:d5:b9:6d:d3:98:f4:05:04:ce:c0:1e:59:2b:
                    e0:02:35:80:05:51:00:27:5c:1b:27:57:2f:89:f0:
                    6a:bd:dc:2d:5a:af:56:87:ff:5e:d3:ef:12:bb:4c:
                    2d:3c:44:21:4f:7e:0b:51:44:49:26:0f:f9:33:26:
                    d1:b4:c2:48:e2:8a:d0:91:b3:ed:3c:b2:33:79:fc:
                    cd:12:a5:ff:c2:77:cc:dc:e4:a5:72:75:cf:a2:82:
                    14:f5:9c:f9:47:7e:b8:65:0b:5b:81:5e:c7:1b:b1:
                    4b:65:a0:62:ae:29:68:57:92:5c:4b:71:a4:c5:cc:
                    fa:fc:ff:1f:37:3d:74:ff:04:a6:32:51:bd:80:73:
                    a3:85:ee:30:ab:9d:39:69:29:04:b7:f5:b2:b4:40:
                    db:bf:7f:35:c6:79:19:ed:ec:4f:ce:9f:94:0e:bc:
                    4e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:04:1E:23:48:7D:4B:7D:9A:37:35:B8:44:56:F9:52:DD:F0:1F:E1
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32332d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:12:8c:1e:1f:a6:97:f9:de:41:ff:76:df:4f:22:93:ee:64:
         10:bb:4c:0c:ea:24:98:cd:a9:40:a9:f5:ed:b3:62:48:6f:a2:
         7d:53:dd:b0:58:bc:b4:5d:a1:9c:a3:50:9f:8f:f4:8d:a7:43:
         f4:da:93:f7:71:e0:71:c5:b3:27:f4:7c:89:88:3c:54:d6:e9:
         c0:12:db:27:ae:17:61:e6:fd:84:09:fe:06:70:fc:3e:60:b1:
         c2:a6:1c:28:a5:d4:8a:e2:09:54:1a:13:8a:b5:e4:78:ce:99:
         59:cf:eb:d7:fb:62:f7:8c:84:a0:a1:fe:81:69:57:3b:dd:da:
         b1:70:cd:ad:a3:80:12:42:9d:e4:09:50:9c:1c:01:1e:78:5b:
         6b:f3:1f:e1:36:ac:d9:fc:c6:d5:00:27:cb:0e:20:50:b6:b3:
         e9:25:4d:0e:3c:22:c9:b0:f5:14:16:71:db:7d:10:ac:9a:91:
         48:f6:e3:b4:20:d9:e3:6c:8d:54:97:46:81:9b:04:56:b5:82:
         bd:09:5e:80:a7:c2:9f:04:c2:82:24:4d:f7:63:ec:60:37:45:
         0b:dc:6e:34:01:ff:6a:e3:f6:5f:0f:59:c2:22:21:4c:04:2b:
         c9:86:3c:ba:8f:f4:4c:10:4c:80:22:80:e1:5b:f6:09:54:6f:
         93:9b:c7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 00:42:14 2026 by rpki-client