Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NyWVuepBGjGLGjNyNJxvpdM4PZSYMbhMKaDvp1ao2ys/2/3138362e3235302e3134302e302f32322d3332203d3e203532393531.roa
File:                     3138362e3235302e3134302e302f32322d3332203d3e203532393531.roa (raw, json)
Hash identifier:          1iKWjClnf8Qv13NSgmSHWOuqqIZ4r2n9ffFImlxuzJs=
Subject key identifier:   9A:A3:DB:49:84:4F:CB:BC:0E:B0:96:2B:55:51:05:12:14:D7:35:2D
Certificate issuer:       /CN=7D0EBB635BC2E582302B265311409E72C12299BB
Certificate serial:       5C28872038CF455C90D812F456DF81CE3FF3A51C
Authority key identifier: 7D:0E:BB:63:5B:C2:E5:82:30:2B:26:53:11:40:9E:72:C1:22:99:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D0EBB635BC2E582302B265311409E72C12299BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NyWVuepBGjGLGjNyNJxvpdM4PZSYMbhMKaDvp1ao2ys/2/3138362e3235302e3134302e302f32322d3332203d3e203532393531.roa
Signing time:             Thu 25 Jun 2026 20:19:41 +0000
ROA not before:           Thu 25 Jun 2026 20:14:41 +0000
ROA not after:            Thu 24 Jun 2027 20:19:41 +0000
asID:                     52951
IP address blocks:        186.250.140.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NyWVuepBGjGLGjNyNJxvpdM4PZSYMbhMKaDvp1ao2ys/2/7D0EBB635BC2E582302B265311409E72C12299BB.crl
                          rsync://rpki-repo.registro.br/repo/9NyWVuepBGjGLGjNyNJxvpdM4PZSYMbhMKaDvp1ao2ys/2/7D0EBB635BC2E582302B265311409E72C12299BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D0EBB635BC2E582302B265311409E72C12299BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 18:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:28:87:20:38:cf:45:5c:90:d8:12:f4:56:df:81:ce:3f:f3:a5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D0EBB635BC2E582302B265311409E72C12299BB
        Validity
            Not Before: Jun 25 20:14:41 2026 GMT
            Not After : Jun 24 20:19:41 2027 GMT
        Subject: CN=9AA3DB49844FCBBC0EB0962B5551051214D7352D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:99:ae:c9:a3:fa:b2:90:c3:85:58:fd:be:7a:
                    d2:3d:d8:b7:65:d0:1f:cd:38:2e:c2:81:a7:29:39:
                    5d:4f:8e:b2:62:17:ce:e8:63:48:af:bd:9e:2f:e7:
                    51:88:cb:41:32:d7:0a:d9:c7:c2:28:d8:11:ef:b9:
                    18:88:64:3c:38:52:13:cc:56:bf:da:46:c9:7f:92:
                    0e:ce:d3:6e:3f:2c:36:79:29:52:fd:08:d4:b9:03:
                    f2:31:bb:64:08:ee:99:4f:13:0b:8a:39:54:6a:c5:
                    00:03:0e:67:d3:60:db:20:67:57:62:6b:28:99:1f:
                    48:32:54:90:85:36:46:4e:91:b9:57:31:cb:b0:85:
                    20:1f:02:0e:35:c7:0b:d6:ba:8b:d6:47:78:1d:8b:
                    5a:02:72:26:cf:73:f7:16:d1:d3:7d:70:af:0b:8b:
                    d1:5d:de:31:c8:cf:ab:a0:6d:cc:ac:47:c9:c3:11:
                    71:cf:85:2b:48:45:b3:78:f4:44:cb:88:e2:69:85:
                    88:83:69:47:1b:de:6f:a6:d8:55:fe:f9:ff:c7:37:
                    43:49:f9:62:ce:a9:e6:d9:53:3b:66:9a:bd:91:22:
                    2d:c1:b9:1c:f5:70:18:51:af:7c:d0:48:7e:0b:d2:
                    ea:c5:00:e5:74:69:7b:81:1e:04:48:a8:48:f6:ef:
                    bb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A3:DB:49:84:4F:CB:BC:0E:B0:96:2B:55:51:05:12:14:D7:35:2D
            X509v3 Authority Key Identifier:
                keyid:7D:0E:BB:63:5B:C2:E5:82:30:2B:26:53:11:40:9E:72:C1:22:99:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NyWVuepBGjGLGjNyNJxvpdM4PZSYMbhMKaDvp1ao2ys/2/7D0EBB635BC2E582302B265311409E72C12299BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D0EBB635BC2E582302B265311409E72C12299BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NyWVuepBGjGLGjNyNJxvpdM4PZSYMbhMKaDvp1ao2ys/2/3138362e3235302e3134302e302f32322d3332203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:fc:d3:48:4e:3f:ff:94:cf:be:20:61:1e:32:df:5a:89:e7:
         ef:76:89:2e:45:8b:a7:f5:5b:5d:71:0c:48:4f:45:4c:d4:f7:
         49:87:96:d1:6c:13:fe:e3:b6:3f:b2:8d:c5:21:86:83:24:96:
         5e:36:1a:4d:83:f6:47:ac:b9:b9:ff:33:bd:bb:a3:4f:3b:ae:
         2f:2c:e9:81:99:e4:34:1e:74:19:34:a7:ac:fa:92:b9:10:4b:
         e7:4e:a3:c7:eb:8b:1f:87:be:88:1f:86:15:00:f2:76:d6:d9:
         a3:ad:58:b6:63:20:3c:5c:7d:dc:c8:e0:3c:4a:b5:8e:2e:0d:
         6c:ae:f8:5b:1e:bc:61:44:4c:f1:77:7a:ca:e6:37:ab:03:5c:
         48:3f:d2:5f:25:62:22:23:b5:18:ad:3f:5a:e2:1b:2c:cc:83:
         e2:1c:4d:e5:2b:b9:45:84:31:15:69:db:16:51:c6:37:40:70:
         5e:43:ee:84:8f:33:d6:e1:70:a3:99:34:f1:10:2a:23:72:58:
         c6:1d:d4:e6:d5:cf:a6:c6:b8:5b:df:87:4b:28:4d:35:f5:77:
         ba:77:c4:c1:44:2a:24:d2:6d:d1:12:68:6c:d1:21:74:eb:cc:
         6a:f7:7e:94:9c:ac:97:79:01:25:44:4d:67:1a:2d:49:15:2f:
         5f:6f:c9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:56:55 2026 by rpki-client