Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/3138312e3138392e31322e302f32322d3232203d3e20323731353139.roa
File:                     3138312e3138392e31322e302f32322d3232203d3e20323731353139.roa (raw, json)
Hash identifier:          xmvL3xcMcYFRWWgI1PndZV5CApceko1qFlsYiQNeJzY=
Subject key identifier:   DD:47:C0:74:34:F5:F5:52:BC:E4:B1:B7:18:59:B1:3E:69:63:D9:AD
Certificate issuer:       /CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
Certificate serial:       1726164A5D15A21BF89D4077D67FA396E4DFDD22
Authority key identifier: 2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/3138312e3138392e31322e302f32322d3232203d3e20323731353139.roa
Signing time:             Thu 18 Jun 2026 15:41:25 +0000
ROA not before:           Thu 18 Jun 2026 15:36:25 +0000
ROA not after:            Thu 17 Jun 2027 15:41:25 +0000
asID:                     271519
IP address blocks:        181.189.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl
                          rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 03:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:26:16:4a:5d:15:a2:1b:f8:9d:40:77:d6:7f:a3:96:e4:df:dd:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
        Validity
            Not Before: Jun 18 15:36:25 2026 GMT
            Not After : Jun 17 15:41:25 2027 GMT
        Subject: CN=DD47C07434F5F552BCE4B1B71859B13E6963D9AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7d:fd:6a:3b:6f:19:ae:65:4f:d6:55:85:f8:
                    86:aa:f5:26:e5:3d:26:db:57:1d:13:24:0c:ff:47:
                    00:1e:56:8c:69:5a:f1:5b:29:fa:1d:06:84:f0:e6:
                    5e:1b:44:f0:2d:66:45:7f:a1:bd:fb:b3:40:ca:0f:
                    26:3d:48:b4:24:0d:42:9e:24:a2:0c:47:05:2e:c2:
                    bb:f1:fc:dc:1e:d1:90:05:38:a1:c3:4d:5c:d3:36:
                    a9:69:5c:3e:bf:59:7a:45:55:c9:da:4f:01:c6:43:
                    76:d6:2f:f2:15:55:bf:f5:43:7c:05:62:4f:9d:e1:
                    72:8d:ab:f5:af:be:e9:f0:07:6c:37:bd:fd:ef:00:
                    c8:9f:d0:82:c2:9f:8f:ea:fa:ea:68:47:93:25:04:
                    ee:ff:bb:1d:8b:40:e4:10:e9:1a:fb:8b:ee:ab:e2:
                    0b:18:09:d7:8e:ae:87:54:38:7a:87:52:a1:8e:9e:
                    cf:6c:c4:cb:67:fc:c7:60:d6:34:ec:c4:42:a4:e7:
                    94:fc:71:cb:8b:08:72:4c:32:14:96:e1:98:03:fd:
                    fc:c2:e2:0b:1c:66:55:40:42:53:29:fa:f3:81:27:
                    b0:ca:25:c5:78:60:4f:da:7a:e9:9d:14:aa:59:4f:
                    74:e9:c1:89:d8:35:41:81:12:87:23:1c:8a:17:a2:
                    22:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:47:C0:74:34:F5:F5:52:BC:E4:B1:B7:18:59:B1:3E:69:63:D9:AD
            X509v3 Authority Key Identifier:
                keyid:2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/3138312e3138392e31322e302f32322d3232203d3e20323731353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:84:b9:33:af:3b:fa:27:c9:a9:38:ef:40:d2:45:1a:79:c3:
         aa:cd:59:8f:d8:ca:80:5a:b5:0a:97:69:9f:2b:d9:d1:50:91:
         3e:b5:de:c3:fb:49:d3:f7:76:28:a9:c7:cf:df:01:71:13:77:
         6a:8c:03:1b:23:32:8d:80:63:38:a1:d5:09:05:de:59:36:22:
         0f:ad:62:56:f0:9f:51:e0:c4:6a:06:ca:e8:bd:cf:ce:0f:51:
         26:03:75:dc:9b:38:51:18:e6:cb:8f:a2:36:cc:1a:2e:48:75:
         e3:5f:b1:b3:fe:29:f7:39:fe:52:e7:32:3f:a0:20:e9:20:b3:
         af:43:08:60:a9:ba:7b:37:a6:7e:7a:3d:d8:b7:ad:1b:79:c5:
         5b:a8:09:98:96:a0:47:4f:77:01:02:1b:b8:79:1a:a7:b6:22:
         6d:65:62:91:2a:28:16:dc:89:80:10:aa:01:96:c3:77:e1:cf:
         8c:f4:62:65:4c:fe:0e:55:d6:ec:5c:ce:a0:72:bd:0c:96:d2:
         87:4d:a8:10:37:23:f0:b6:fe:ca:06:c7:17:96:58:e3:60:1d:
         b9:39:5b:0c:93:e7:55:8f:c7:ec:1c:31:b9:c1:95:07:f0:a0:
         8c:56:0e:f4:c7:a7:92:4c:af:aa:86:5b:39:22:0f:d2:ea:36:
         78:f9:e2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:09:31 2026 by rpki-client