Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9PvSdj9j8VpiUjZJWu8Dhof6HRF9VxTvn4Muo6feHjnt/0/3138372e33332e3132382e302f32302d3332203d3e20323632363933.roa
File:                     3138372e33332e3132382e302f32302d3332203d3e20323632363933.roa (raw, json)
Hash identifier:          7yg4xunl7YugGcVr5SHsGbHWn/TuFULRoeY7pDReX3I=
Subject key identifier:   DE:E3:B2:65:14:C0:54:1F:32:57:8E:6C:43:B0:00:1D:B3:86:24:2B
Certificate issuer:       /CN=57D3C7DB7794F97E37C748ABD828EA550002843F
Certificate serial:       2FA396867589F426F5DFCCAA412FF3AD612CC14F
Authority key identifier: 57:D3:C7:DB:77:94:F9:7E:37:C7:48:AB:D8:28:EA:55:00:02:84:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D3C7DB7794F97E37C748ABD828EA550002843F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9PvSdj9j8VpiUjZJWu8Dhof6HRF9VxTvn4Muo6feHjnt/0/3138372e33332e3132382e302f32302d3332203d3e20323632363933.roa
Signing time:             Wed 05 Aug 2026 19:32:44 +0000
ROA not before:           Wed 05 Aug 2026 19:27:44 +0000
ROA not after:            Wed 04 Aug 2027 19:32:44 +0000
asID:                     262693
IP address blocks:        187.33.128.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9PvSdj9j8VpiUjZJWu8Dhof6HRF9VxTvn4Muo6feHjnt/0/57D3C7DB7794F97E37C748ABD828EA550002843F.crl
                          rsync://rpki-repo.registro.br/repo/9PvSdj9j8VpiUjZJWu8Dhof6HRF9VxTvn4Muo6feHjnt/0/57D3C7DB7794F97E37C748ABD828EA550002843F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D3C7DB7794F97E37C748ABD828EA550002843F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 10:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a3:96:86:75:89:f4:26:f5:df:cc:aa:41:2f:f3:ad:61:2c:c1:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57D3C7DB7794F97E37C748ABD828EA550002843F
        Validity
            Not Before: Aug  5 19:27:44 2026 GMT
            Not After : Aug  4 19:32:44 2027 GMT
        Subject: CN=DEE3B26514C0541F32578E6C43B0001DB386242B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5e:9c:63:3b:db:11:c2:79:09:b8:46:2c:fd:
                    25:af:28:f8:c0:ff:7e:ba:11:cd:40:06:62:4f:49:
                    0a:a6:23:b2:13:1c:71:fe:af:3f:c5:90:e1:47:21:
                    c5:20:6e:20:5f:5d:27:5a:c8:01:8c:71:ba:65:08:
                    a0:9f:96:77:a6:4f:ac:e0:8a:7a:5a:95:07:35:2c:
                    70:c7:7f:3d:64:da:9e:fd:a8:9b:8c:f7:ef:2e:e6:
                    2b:cb:e1:1e:3d:61:72:82:00:94:3c:ca:17:65:3c:
                    a4:d0:cd:62:7e:46:18:36:1f:4f:b0:dd:d4:9b:a9:
                    ac:6a:fc:d2:84:6e:62:16:17:79:52:6a:b9:0a:5c:
                    8a:11:00:3f:b8:52:67:0b:8b:08:20:28:5d:1a:a9:
                    58:22:f8:59:99:8f:48:ab:7b:0b:63:3c:77:36:41:
                    3d:93:f7:00:ef:7e:a0:58:17:b1:82:9a:bd:16:59:
                    9b:36:67:ec:cb:4d:7e:b4:90:64:47:8d:5a:94:d0:
                    bd:12:d7:b7:47:26:4a:7a:7e:f7:e5:3b:61:d8:94:
                    65:94:45:3a:d2:89:bd:72:bb:ad:28:e6:d1:b0:da:
                    4b:6a:4a:80:eb:a7:18:cb:03:56:4c:d0:6f:9e:27:
                    a2:f4:81:6c:0e:7c:6b:9b:eb:68:d0:0a:2a:7b:23:
                    e0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E3:B2:65:14:C0:54:1F:32:57:8E:6C:43:B0:00:1D:B3:86:24:2B
            X509v3 Authority Key Identifier:
                keyid:57:D3:C7:DB:77:94:F9:7E:37:C7:48:AB:D8:28:EA:55:00:02:84:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9PvSdj9j8VpiUjZJWu8Dhof6HRF9VxTvn4Muo6feHjnt/0/57D3C7DB7794F97E37C748ABD828EA550002843F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D3C7DB7794F97E37C748ABD828EA550002843F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PvSdj9j8VpiUjZJWu8Dhof6HRF9VxTvn4Muo6feHjnt/0/3138372e33332e3132382e302f32302d3332203d3e20323632363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         63:dd:ad:ec:68:c9:d0:5b:4c:2f:13:77:29:26:82:8a:2f:cc:
         b9:84:ea:ac:6a:35:18:a0:3e:3c:eb:cd:bc:86:64:74:a3:fb:
         09:1b:44:8a:c0:f8:1b:10:2d:3e:08:04:a8:39:56:1f:d1:6b:
         16:e4:de:40:4e:06:80:30:04:43:a6:a7:59:aa:44:cc:cf:f0:
         ef:cb:bc:54:51:5f:de:1d:a7:2e:cc:ee:80:6b:61:d1:c9:d1:
         b9:fb:07:93:f4:ee:d2:2a:d6:01:0a:b9:4d:2b:18:4d:99:c3:
         4c:a2:5e:a1:36:8c:65:a1:9f:31:f7:9f:c5:d9:59:d0:9e:b5:
         d7:05:44:de:5c:1c:b5:ea:58:87:bb:5a:92:f1:0e:7a:11:51:
         e2:f1:38:af:30:dc:48:5a:f3:50:83:cb:9f:8e:f6:33:72:a3:
         ad:fe:c6:01:53:a0:b9:00:c0:70:e1:e7:d2:a8:e8:ac:94:b4:
         18:53:4e:cb:49:ff:69:5e:56:02:d9:2e:11:ac:b2:22:15:2c:
         96:66:8c:bd:59:dc:d0:99:9f:03:2f:51:94:eb:5c:6a:9e:c3:
         0d:bd:07:c1:f1:0b:66:96:10:21:74:ed:47:fa:e3:c4:27:b8:
         18:1c:20:9e:9f:ba:5e:6c:44:e5:b8:dc:49:e0:63:c8:b0:9f:
         16:95:da:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 14:52:58 2026 by rpki-client