Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136382e302f32312d3231203d3e203238323532.roa
File:                     3138372e312e3136382e302f32312d3231203d3e203238323532.roa (raw, json)
Hash identifier:          1vA5/LSHTLyqPTZP7wY33fhu5+TrRNBod0m1AHnNd4M=
Subject key identifier:   4F:43:45:CF:F8:D1:FE:A6:B5:94:0E:91:B6:E9:EA:DE:26:C2:D5:04
Certificate issuer:       /CN=7BD1822386ABA0E476B538AE1CE5CC51409C0B9F
Certificate serial:       3989BD5E0FF5A502B736CEAFC318097DE9D16CBD
Authority key identifier: 7B:D1:82:23:86:AB:A0:E4:76:B5:38:AE:1C:E5:CC:51:40:9C:0B:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136382e302f32312d3231203d3e203238323532.roa
Signing time:             Tue 01 Sep 2026 12:16:40 +0000
ROA not before:           Tue 01 Sep 2026 12:11:40 +0000
ROA not after:            Tue 31 Aug 2027 12:16:40 +0000
asID:                     28252
IP address blocks:        187.1.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 20:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:89:bd:5e:0f:f5:a5:02:b7:36:ce:af:c3:18:09:7d:e9:d1:6c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD1822386ABA0E476B538AE1CE5CC51409C0B9F
        Validity
            Not Before: Sep  1 12:11:40 2026 GMT
            Not After : Aug 31 12:16:40 2027 GMT
        Subject: CN=4F4345CFF8D1FEA6B5940E91B6E9EADE26C2D504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:3a:b5:e1:4e:13:3b:2c:ac:0e:ca:a6:80:
                    0e:63:ad:22:02:70:c9:12:b3:2e:a8:d0:61:78:c2:
                    d6:a1:22:f0:c1:5a:5a:82:5d:f9:36:7f:df:9b:52:
                    ab:88:a0:8d:83:02:df:ba:83:9f:f7:88:bd:1a:42:
                    f6:dd:1b:76:fe:29:97:60:e4:64:6e:a6:3a:81:77:
                    60:25:c0:59:b2:00:8e:12:72:e8:a4:0f:69:69:fc:
                    ab:79:a4:c1:e7:99:8b:c8:8b:13:0f:78:f3:5e:c7:
                    9a:af:3d:87:82:b4:ff:eb:f2:50:df:64:9c:7f:a6:
                    f5:dc:7b:11:41:49:ee:9c:a4:6a:af:90:9e:09:c7:
                    a1:87:49:1a:80:c9:b6:0a:a6:5b:59:0b:18:13:fa:
                    cb:1d:fd:f0:4b:ab:4a:db:55:d9:75:35:ee:31:af:
                    bc:a1:eb:63:43:40:1f:30:c6:06:cc:0f:b4:eb:f5:
                    9f:65:d5:c7:97:2b:33:2a:de:b9:10:88:81:70:11:
                    b9:57:fd:b5:8a:8d:41:8d:ea:48:3c:f5:2b:b6:b8:
                    2c:07:2e:f5:ec:46:26:6c:50:da:45:39:69:1a:49:
                    a8:99:3f:0e:27:da:36:4e:d9:57:dc:4a:db:be:02:
                    71:a5:2a:85:5e:5c:7f:2e:03:dc:39:f2:ec:d0:39:
                    4c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:43:45:CF:F8:D1:FE:A6:B5:94:0E:91:B6:E9:EA:DE:26:C2:D5:04
            X509v3 Authority Key Identifier:
                keyid:7B:D1:82:23:86:AB:A0:E4:76:B5:38:AE:1C:E5:CC:51:40:9C:0B:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136382e302f32312d3231203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:ca:53:d5:d7:3d:79:f2:ed:eb:94:1a:28:2a:09:f8:42:0d:
         b4:0d:d8:da:17:2a:a9:2e:bf:3d:1d:a6:25:93:ce:5b:9b:3c:
         ee:1e:42:56:12:fc:5b:19:e4:81:0b:1d:0d:7e:bc:7a:ff:bf:
         90:80:39:b5:bc:94:56:09:4a:50:99:9a:c7:f7:ae:66:56:46:
         fd:b2:d7:06:ba:50:6f:4b:32:1b:91:a0:42:bb:95:79:6e:97:
         e7:b2:1c:79:fd:7b:b1:8b:ab:30:70:73:e5:8c:9f:1a:09:67:
         98:0e:ea:c9:ce:b6:4f:10:e8:70:cd:b0:09:e6:12:5b:33:7f:
         f5:e6:9b:88:b0:1c:d0:b6:ad:7e:fa:26:fe:76:9f:89:ff:6d:
         50:10:d8:c6:49:d6:17:5e:b1:34:20:47:f7:e7:2a:8e:18:f1:
         f0:cf:f2:80:96:8d:37:5e:2a:a1:82:6c:02:1d:4e:b1:08:fa:
         d0:36:2c:f3:52:c7:73:8c:d6:3d:36:5e:79:a8:1a:c6:27:30:
         46:92:9f:22:b1:55:7e:a0:d7:55:ac:bd:03:5e:d7:2e:75:00:
         88:2d:ae:ce:04:2d:1a:2d:99:ee:9c:21:a2:73:86:9e:ff:4b:
         71:7c:4e:92:18:5e:e5:92:3d:c2:cf:24:c4:55:9a:f4:d7:ff:
         08:22:25:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:01:19 2026 by rpki-client