Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38372e36342e302f32312d3234203d3e203533313433.roa
File:                     3138372e38372e36342e302f32312d3234203d3e203533313433.roa (raw, json)
Hash identifier:          HWslse4GKQ7KrWeGwi3q6cUuHFWjqSPTeFs7RCBA+So=
Subject key identifier:   80:5D:2D:B3:7F:B1:16:61:F2:60:5B:74:CF:90:00:DE:49:36:AA:45
Certificate issuer:       /CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
Certificate serial:       5B3B4027E9833EA2B14E1CDE3479A13F195E067D
Authority key identifier: 0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38372e36342e302f32312d3234203d3e203533313433.roa
Signing time:             Mon 26 Oct 2026 02:38:24 +0000
ROA not before:           Mon 26 Oct 2026 02:33:24 +0000
ROA not after:            Mon 25 Oct 2027 02:38:24 +0000
asID:                     53143
IP address blocks:        187.87.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 08:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3b:40:27:e9:83:3e:a2:b1:4e:1c:de:34:79:a1:3f:19:5e:06:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
        Validity
            Not Before: Oct 26 02:33:24 2026 GMT
            Not After : Oct 25 02:38:24 2027 GMT
        Subject: CN=805D2DB37FB11661F2605B74CF9000DE4936AA45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:af:8a:c6:62:fd:9b:80:5e:24:91:b2:7b:04:
                    d7:5c:7b:ee:a2:76:be:e1:b3:42:62:aa:57:75:be:
                    f4:cd:0b:49:08:73:ab:a3:53:8e:5f:2f:33:84:12:
                    08:04:57:f4:bf:1b:d8:48:e6:71:d1:b4:1d:b7:8c:
                    e5:c3:ad:f1:05:d4:bf:1f:34:16:a9:2b:5e:27:bb:
                    1c:2e:aa:1d:0e:f7:4d:5e:86:cb:fd:c3:cc:52:7b:
                    a0:31:b8:0a:18:ae:7b:b8:af:0b:11:2a:36:7d:d8:
                    67:0f:9f:d3:17:26:9b:62:ba:a5:8d:44:cd:e0:e6:
                    85:79:49:c3:49:50:3c:86:9f:d5:95:08:9f:4c:8b:
                    a0:57:60:23:49:a3:72:dc:eb:5a:43:40:f4:d1:21:
                    55:fb:50:65:69:e1:32:b3:95:ac:a9:e7:70:c5:8a:
                    c1:03:27:a2:85:ed:0d:64:bd:84:c0:bc:76:5a:75:
                    9f:a2:ca:8c:72:e0:f8:45:ae:1e:b4:fc:ec:04:86:
                    b6:c6:8d:cb:43:bf:be:07:03:80:04:a9:cd:37:5b:
                    f2:c1:69:2e:32:f3:4f:2a:70:4c:67:ee:35:d4:2b:
                    02:a5:88:c9:8d:51:24:90:2e:0c:75:93:00:49:0d:
                    7c:b9:50:98:00:fe:c6:7a:d3:a2:c3:70:4d:56:b2:
                    05:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5D:2D:B3:7F:B1:16:61:F2:60:5B:74:CF:90:00:DE:49:36:AA:45
            X509v3 Authority Key Identifier:
                keyid:0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38372e36342e302f32312d3234203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:a1:24:16:d6:5f:5c:13:e2:79:2a:94:49:c3:84:32:c4:24:
         bc:00:a3:0d:43:36:91:11:43:85:15:45:be:43:dc:15:62:2b:
         19:e8:b2:47:8e:94:d9:95:d2:e7:44:d3:d5:59:c5:a4:d5:1a:
         73:e3:d6:24:0a:06:9c:94:6f:5a:0d:bd:e7:d7:0e:17:66:30:
         93:5b:c5:67:d7:d3:8f:12:78:26:5e:28:ac:3a:53:c3:07:81:
         06:c6:aa:40:51:bc:4c:e0:3a:6c:68:5a:c8:5b:42:5d:e4:b9:
         d3:19:a2:72:06:70:44:96:17:14:e4:c6:93:8d:47:09:da:b3:
         98:0a:2a:4e:8b:8a:dc:bb:1b:77:44:8f:c9:62:c2:07:c0:40:
         5f:64:c7:e1:ea:8b:6f:04:5d:e8:81:11:58:e5:59:13:fd:d9:
         82:e5:d8:cc:9b:3b:10:29:2a:14:1b:96:92:9e:7a:e4:67:9e:
         52:af:db:fc:42:4f:22:fa:be:11:65:ca:5f:3f:2e:08:57:c4:
         70:e0:75:2c:3f:6f:ba:d6:72:72:7e:ee:d5:bc:6c:6f:e5:e3:
         2d:08:89:30:62:5e:49:91:ef:29:58:15:61:c4:90:bd:c5:ff:
         6c:ae:b1:68:10:2e:40:4d:df:db:0a:7b:36:05:bb:47:00:11:
         a9:88:f8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 02:33:27 2026 by rpki-client