Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e33342e302f32332d3233203d3e20323632373036.roa
File:                     3138372e3130392e33342e302f32332d3233203d3e20323632373036.roa (raw, json)
Hash identifier:          fnIIJmC3UTx5WBuwm00J0+Cig+M2LMnZRh5NXnUU/iM=
Subject key identifier:   E7:CD:1B:3B:25:03:64:1E:79:2E:EB:5B:C5:0F:B8:83:0C:20:39:D5
Certificate issuer:       /CN=D7252ED92923FF7276B97F5469069929707F562C
Certificate serial:       475DBAD471E2987C452A9B77944F204DFE8F311E
Authority key identifier: D7:25:2E:D9:29:23:FF:72:76:B9:7F:54:69:06:99:29:70:7F:56:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e33342e302f32332d3233203d3e20323632373036.roa
Signing time:             Wed 20 May 2026 19:40:51 +0000
ROA not before:           Wed 20 May 2026 19:35:51 +0000
ROA not after:            Wed 19 May 2027 19:40:51 +0000
asID:                     262706
IP address blocks:        187.109.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.crl
                          rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 22:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5d:ba:d4:71:e2:98:7c:45:2a:9b:77:94:4f:20:4d:fe:8f:31:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7252ED92923FF7276B97F5469069929707F562C
        Validity
            Not Before: May 20 19:35:51 2026 GMT
            Not After : May 19 19:40:51 2027 GMT
        Subject: CN=E7CD1B3B2503641E792EEB5BC50FB8830C2039D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:84:e4:47:27:8e:34:6a:d9:91:73:82:dc:d2:
                    0a:60:89:38:59:53:68:de:75:1a:21:4f:9b:dd:33:
                    fd:37:ce:83:1a:ea:db:7b:3d:a9:e8:9f:91:bf:cb:
                    6a:05:28:f3:fb:6a:4f:81:4d:9a:d1:13:4a:cb:e8:
                    54:99:0b:fb:a6:e6:84:1a:03:6a:22:96:0c:43:a9:
                    93:8d:e1:fb:81:26:3c:07:78:50:fd:ed:1d:9b:ae:
                    e2:e5:11:2b:4b:e0:74:95:bf:63:91:f8:e7:14:9c:
                    74:ff:55:64:31:2a:72:76:8c:51:8b:75:16:e9:08:
                    d6:9d:47:fe:64:ee:f2:e4:92:08:62:72:e7:a6:0f:
                    7d:77:65:02:83:1e:3f:33:83:1e:bc:7e:3f:de:68:
                    47:fe:69:24:e3:06:73:37:84:0e:bc:91:bb:ea:d9:
                    25:90:e3:ec:a9:b4:c6:fe:89:0d:26:02:48:8c:74:
                    02:17:c0:45:9d:cb:73:d9:b0:49:f4:49:20:0c:e7:
                    bd:ac:75:6d:50:32:25:47:f7:0c:cf:a8:dd:e6:64:
                    ce:6a:5a:86:2d:81:20:4a:37:88:c4:c6:dd:8d:c5:
                    f2:05:fe:ae:66:e8:8a:cf:3e:1c:8f:d7:81:50:55:
                    ce:53:50:9d:18:41:0c:ba:f3:eb:a8:ae:4e:36:5d:
                    70:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CD:1B:3B:25:03:64:1E:79:2E:EB:5B:C5:0F:B8:83:0C:20:39:D5
            X509v3 Authority Key Identifier:
                keyid:D7:25:2E:D9:29:23:FF:72:76:B9:7F:54:69:06:99:29:70:7F:56:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e33342e302f32332d3233203d3e20323632373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:60:28:2c:13:90:14:77:a7:d3:d4:5e:82:8d:62:52:b4:ac:
         6f:47:08:89:8c:c1:bd:e6:e9:88:dd:35:69:61:f0:03:e5:1f:
         c8:95:c7:e6:15:91:11:fd:06:16:4c:a5:d1:91:e4:48:b9:51:
         0a:f9:25:ca:75:6f:07:6a:19:28:0f:dd:fc:01:60:0e:e8:fe:
         d5:3b:cd:b4:f2:33:65:27:69:92:68:62:a5:07:d1:4e:d2:2c:
         d6:45:67:7d:40:d4:d4:2f:39:c6:f9:80:7a:28:98:45:23:f0:
         ca:4b:84:48:6a:5e:9d:17:c6:bc:e3:52:e1:de:20:c3:6f:1f:
         c9:cd:aa:ac:90:9f:e8:ff:e1:95:b5:54:d8:8f:a4:96:ab:2c:
         41:3d:44:d0:da:ba:37:60:43:a4:a3:26:09:77:65:c8:26:42:
         40:5b:25:db:55:47:34:f8:75:d3:19:64:e6:27:49:b7:c0:45:
         a5:4f:f0:6f:d2:f6:49:6b:14:b8:35:9f:8b:f7:af:f0:75:9f:
         fc:96:63:0e:7c:dc:96:3d:f1:9b:d6:77:da:93:fa:8e:e7:39:
         06:06:67:25:f0:11:dd:5c:9b:b0:2b:f2:41:a8:13:40:92:11:
         bf:99:ce:83:a6:ef:7d:b0:9a:33:93:59:8a:f8:cf:59:f7:ad:
         29:0b:9d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:41:02 2026 by rpki-client