Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e33362e302f32322d3232203d3e20323632373036.roa
File:                     3138372e3130392e33362e302f32322d3232203d3e20323632373036.roa (raw, json)
Hash identifier:          K25F8uz61nHkw0y5/ENvhe5v3+MhBPY4ljaMOUYlOXg=
Subject key identifier:   96:A0:0F:87:AC:CD:18:D4:D0:C5:28:85:C9:5B:59:EF:29:A7:33:FD
Certificate issuer:       /CN=D7252ED92923FF7276B97F5469069929707F562C
Certificate serial:       74C9984E28622CD68D2E5C43D4CB1243EB09DB10
Authority key identifier: D7:25:2E:D9:29:23:FF:72:76:B9:7F:54:69:06:99:29:70:7F:56:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e33362e302f32322d3232203d3e20323632373036.roa
Signing time:             Wed 20 May 2026 19:40:45 +0000
ROA not before:           Wed 20 May 2026 19:35:45 +0000
ROA not after:            Wed 19 May 2027 19:40:45 +0000
asID:                     262706
IP address blocks:        187.109.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.crl
                          rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 22:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c9:98:4e:28:62:2c:d6:8d:2e:5c:43:d4:cb:12:43:eb:09:db:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7252ED92923FF7276B97F5469069929707F562C
        Validity
            Not Before: May 20 19:35:45 2026 GMT
            Not After : May 19 19:40:45 2027 GMT
        Subject: CN=96A00F87ACCD18D4D0C52885C95B59EF29A733FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:48:e0:d9:96:74:ab:03:8b:35:de:41:99:48:
                    c6:99:64:44:2a:6d:f9:f0:37:cb:b2:a2:99:0a:3b:
                    77:40:68:e9:7e:a8:02:45:5f:d5:04:15:7a:27:a9:
                    10:cc:12:66:dc:7c:c5:53:2e:27:4c:06:aa:44:1f:
                    de:01:89:9b:e7:1b:f6:4e:1a:66:34:92:70:23:5c:
                    bd:35:43:91:ea:69:20:00:f2:42:bf:e4:70:81:d3:
                    68:2c:77:e6:10:c9:a8:bd:19:a3:94:79:05:69:e8:
                    96:5f:7f:0a:c4:69:a2:89:28:b0:23:f9:bc:75:74:
                    e8:18:ab:1c:38:0f:70:35:6a:b2:1c:fc:31:ff:17:
                    69:a3:9c:be:52:9d:ea:1b:6e:30:56:2c:24:7f:27:
                    c6:2e:78:fe:d8:1f:1d:5f:1c:7c:45:db:58:3d:27:
                    34:18:90:c9:c5:d3:e6:a7:bc:27:f2:25:f0:fe:b7:
                    4f:2f:83:2b:4c:83:d7:b9:78:50:ce:31:4e:a4:d9:
                    35:a9:77:5f:8e:5c:91:7e:a9:91:82:17:4e:3b:cd:
                    ee:39:0a:53:32:f1:0a:37:8d:0e:f0:50:72:7d:08:
                    8b:d6:5a:3a:ee:87:af:3b:78:40:81:ab:a2:e1:e8:
                    a6:fc:db:95:f9:97:43:13:39:82:9f:1f:c7:f2:0e:
                    cb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A0:0F:87:AC:CD:18:D4:D0:C5:28:85:C9:5B:59:EF:29:A7:33:FD
            X509v3 Authority Key Identifier:
                keyid:D7:25:2E:D9:29:23:FF:72:76:B9:7F:54:69:06:99:29:70:7F:56:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e33362e302f32322d3232203d3e20323632373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:f1:65:32:1e:a6:a3:d2:8c:99:c4:89:46:03:ea:54:95:af:
         a0:17:25:69:5d:02:d5:5c:ea:ae:e9:a7:3e:87:99:87:da:23:
         87:79:b7:92:20:8c:d7:b5:32:9a:01:60:96:bc:ad:74:05:51:
         fb:f6:cc:7b:b9:97:2e:8c:81:17:ca:b9:25:a4:8e:72:39:e3:
         b9:2a:06:86:56:97:7e:a0:99:6e:ea:8a:cd:81:52:48:ee:04:
         13:29:a0:de:67:c7:2c:78:62:cf:e3:9f:63:89:b0:18:d2:7f:
         d2:1d:fc:de:fa:77:90:b9:e5:e0:25:de:ba:a1:34:62:df:6e:
         ef:b0:5a:65:57:d9:f3:57:32:b9:f6:75:a0:43:e2:15:95:3c:
         ee:87:3f:77:16:c0:84:3a:f2:ad:26:2b:2b:d4:4d:d0:41:14:
         43:87:67:55:30:00:93:c0:05:97:f8:a5:ed:4c:b2:52:af:1e:
         16:31:63:19:ac:71:6a:3b:b4:30:46:a3:ad:6a:df:d7:e0:38:
         4d:54:c6:fc:a1:d4:da:42:61:57:9a:01:3b:d4:80:5d:87:91:
         12:f1:d9:d1:06:42:55:23:ef:d3:99:47:12:2b:2f:07:e2:39:
         ce:19:9e:1c:c8:ea:5c:f3:33:e5:9d:d1:6a:3e:f5:7e:75:df:
         60:d3:ce:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:42:21 2026 by rpki-client