Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32302d3332203d3e203238333532.roa
File:                     3138392e35312e3139322e302f32302d3332203d3e203238333532.roa (raw, json)
Hash identifier:          zrGztuHmovxaU8VhAinKLuXFADqrydao4BOnXRVlxI0=
Subject key identifier:   7F:1E:31:92:62:05:4E:23:BD:BE:7A:FF:B1:89:AF:46:83:08:F3:E5
Certificate issuer:       /CN=7BE19C39D6D48B24433BF97733548A3658E2BAC0
Certificate serial:       52F2FBACA579DA9C631D26F03F8D23CCE1F78953
Authority key identifier: 7B:E1:9C:39:D6:D4:8B:24:43:3B:F9:77:33:54:8A:36:58:E2:BA:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE19C39D6D48B24433BF97733548A3658E2BAC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32302d3332203d3e203238333532.roa
Signing time:             Wed 08 Jul 2026 12:05:59 +0000
ROA not before:           Wed 08 Jul 2026 12:00:59 +0000
ROA not after:            Wed 07 Jul 2027 12:05:59 +0000
asID:                     28352
IP address blocks:        189.51.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/7BE19C39D6D48B24433BF97733548A3658E2BAC0.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/7BE19C39D6D48B24433BF97733548A3658E2BAC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE19C39D6D48B24433BF97733548A3658E2BAC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 12:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f2:fb:ac:a5:79:da:9c:63:1d:26:f0:3f:8d:23:cc:e1:f7:89:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BE19C39D6D48B24433BF97733548A3658E2BAC0
        Validity
            Not Before: Jul  8 12:00:59 2026 GMT
            Not After : Jul  7 12:05:59 2027 GMT
        Subject: CN=7F1E319262054E23BDBE7AFFB189AF468308F3E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ca:3b:f0:3b:3c:6f:50:0e:a4:01:db:a3:1e:
                    f0:d5:3f:16:d9:a3:dc:2c:c0:5d:3b:1b:05:01:06:
                    15:b5:15:5c:ca:4e:98:bc:00:0e:de:c4:79:e4:51:
                    45:4b:45:b4:75:e9:79:70:e4:c8:37:70:ae:11:c7:
                    65:5b:1d:4a:e6:bf:d6:40:74:16:fb:49:3d:b3:a9:
                    06:f5:24:1c:99:34:76:a1:0e:5e:e7:59:39:ec:d9:
                    2e:18:1e:cc:7e:0f:93:cc:6b:a6:f7:e5:84:e9:e7:
                    19:50:fc:14:1e:99:9b:ef:54:29:94:d9:a7:68:1a:
                    88:bc:f1:ee:b1:7d:a3:3e:4d:bb:7b:4b:dd:4e:2d:
                    cf:07:19:69:37:be:68:ee:ab:f5:14:54:23:13:1f:
                    b5:a4:45:b7:9f:f1:e2:f1:8b:46:99:6a:85:11:e7:
                    46:49:8b:1a:14:52:3e:82:cb:94:fe:e1:14:37:35:
                    39:43:e9:c5:19:a1:fc:d4:a6:79:2a:4c:1d:53:60:
                    fa:3f:3e:1d:b7:59:00:90:b6:02:c9:33:ef:a2:0f:
                    ef:90:6e:83:18:d3:c7:53:ab:8e:4b:21:62:8a:87:
                    07:b7:21:e2:91:e6:75:0f:55:f8:5d:43:e0:e9:43:
                    f1:52:97:53:9d:ba:fb:74:aa:98:ab:37:78:89:18:
                    29:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1E:31:92:62:05:4E:23:BD:BE:7A:FF:B1:89:AF:46:83:08:F3:E5
            X509v3 Authority Key Identifier:
                keyid:7B:E1:9C:39:D6:D4:8B:24:43:3B:F9:77:33:54:8A:36:58:E2:BA:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/7BE19C39D6D48B24433BF97733548A3658E2BAC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE19C39D6D48B24433BF97733548A3658E2BAC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32302d3332203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:7e:fd:e7:28:bb:d0:32:2d:bf:c3:19:e9:e2:9c:a0:a1:44:
         d2:39:72:0e:3c:d4:9f:55:d6:31:79:fb:b6:f1:71:ed:8c:cf:
         dd:ba:b5:c9:bf:97:aa:73:10:71:a5:1d:dd:cb:e6:2d:fb:1c:
         0c:1f:c1:13:65:c6:88:df:08:24:0e:32:8d:70:48:11:a5:f6:
         b8:da:64:6a:aa:9d:82:1b:6f:48:d6:9e:65:b1:52:98:56:50:
         67:37:c1:af:3a:4e:9e:43:18:9f:fc:76:41:ca:0e:f9:3f:b0:
         0d:03:6f:2d:57:3e:ed:73:21:88:56:f4:2b:02:60:f9:39:7f:
         c5:8e:86:35:df:dd:98:04:e4:cd:3d:18:72:3c:18:ed:a4:7f:
         d3:26:50:9f:bf:5a:4d:64:41:7b:17:7f:9a:13:02:19:29:50:
         21:cd:61:76:bf:83:87:e9:80:05:e3:87:ed:d2:ca:2b:6a:e2:
         3a:26:3c:82:19:34:f8:d9:4f:45:bc:7e:41:5d:55:04:14:f4:
         7f:7e:6d:a2:ec:d8:fd:e5:d7:57:f3:6e:a9:74:60:14:3f:e6:
         2c:b3:32:f9:e6:4c:91:d4:6c:52:b3:b6:5c:8b:b6:b7:d6:fc:
         69:1a:0a:e0:88:d0:26:2a:31:7d:b8:fb:4d:e5:b8:a3:90:fe:
         b2:72:3b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:58:13 2026 by rpki-client