Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa
File:                     3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier:          grVrDRYNnPRfa/CidT8sRJ+vJ5CW4UbE9+nJZf1ZDBE=
Subject key identifier:   03:D3:78:62:15:AD:01:F6:1F:E2:C3:A4:48:CB:34:68:5E:DF:5C:47
Certificate issuer:       /CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
Certificate serial:       56CC2FF3924E416F7798A8CC929C7B67E252C0E4
Authority key identifier: 0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa
Signing time:             Mon 26 Oct 2026 02:38:25 +0000
ROA not before:           Mon 26 Oct 2026 02:33:25 +0000
ROA not after:            Mon 25 Oct 2027 02:38:25 +0000
asID:                     28349
IP address blocks:        189.126.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 12:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:cc:2f:f3:92:4e:41:6f:77:98:a8:cc:92:9c:7b:67:e2:52:c0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
        Validity
            Not Before: Oct 26 02:33:25 2026 GMT
            Not After : Oct 25 02:38:25 2027 GMT
        Subject: CN=03D3786215AD01F61FE2C3A448CB34685EDF5C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1e:2d:f0:37:4b:5f:3d:70:9d:9d:be:57:6d:
                    28:f8:a5:ad:ad:ee:ab:4c:d6:bb:cd:2e:b9:9e:99:
                    d6:e2:84:ee:a9:4d:e8:03:3a:88:07:ae:be:8c:b0:
                    fb:4a:f5:44:63:80:6b:b2:fd:61:c6:5f:62:8d:52:
                    2c:f7:0b:8a:64:0f:13:21:68:1a:46:f4:a5:5b:85:
                    a7:3d:f2:d7:f7:2a:f3:e1:c4:a6:c5:d3:64:b4:bb:
                    59:78:a2:0f:a1:9e:9f:b1:b1:22:30:8c:e0:37:64:
                    fc:2b:65:aa:ba:c2:ba:2c:ca:aa:25:ca:bb:23:c8:
                    fa:de:73:45:c2:d5:81:6c:7e:03:68:ff:c7:49:72:
                    48:cc:0c:a2:ba:cb:39:38:0d:1b:f4:65:d3:fa:f5:
                    cf:9d:c8:84:12:e9:2e:bb:e3:c6:70:93:18:4c:33:
                    0a:5c:3c:e3:03:70:d3:2b:7c:e6:ca:d8:93:6a:73:
                    c5:1a:b7:bf:b6:c7:84:f1:b9:f2:9a:2a:2e:8c:5f:
                    54:b4:ef:80:8f:fd:9b:c2:40:a9:d1:8e:75:2b:6e:
                    0a:78:b8:c8:9c:f5:49:c7:44:26:ee:88:25:49:bc:
                    ee:42:8c:32:e0:45:52:77:b6:28:77:2f:b0:17:db:
                    6f:16:08:b6:73:68:10:65:90:af:5d:59:66:40:cb:
                    91:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D3:78:62:15:AD:01:F6:1F:E2:C3:A4:48:CB:34:68:5E:DF:5C:47
            X509v3 Authority Key Identifier:
                keyid:0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:b0:fb:31:0f:f4:27:e8:e3:23:9f:3e:ef:0f:80:1d:2b:90:
         39:6b:2c:59:ef:a8:0e:1d:68:c3:b1:a1:d9:f5:93:1e:b1:ab:
         a7:f9:3a:d6:f8:19:03:6e:72:89:12:1c:c7:fe:4a:d5:3c:f8:
         87:c3:f0:63:fd:f3:b2:63:a7:46:e2:09:aa:b2:f8:ce:ad:53:
         89:8a:dc:d5:c6:f8:bd:1e:60:ed:26:12:43:f6:d3:56:a6:ab:
         f2:ae:a6:17:62:ef:c5:1a:76:3e:94:b5:f1:c8:d6:48:36:b0:
         7e:df:00:f5:b6:0d:01:13:58:a3:aa:92:75:fd:b1:83:1c:60:
         98:06:8f:ce:00:c0:72:a4:a9:6d:66:b6:e6:1a:89:3d:7f:66:
         99:78:3f:85:fb:68:ca:14:e5:fd:de:61:b7:60:b0:99:54:ce:
         ac:30:8d:e0:19:c5:3e:4d:d0:48:37:7e:11:9c:f7:12:89:ca:
         df:e5:4f:06:fc:a6:1a:a3:3f:20:71:4c:e7:f8:74:dd:85:68:
         d8:d6:ff:6f:37:3c:f3:b1:85:d7:a2:7a:c9:9b:de:2c:51:0c:
         d0:05:b5:4b:c6:f5:bc:72:d7:4a:4c:44:21:1e:98:10:13:a5:
         89:b9:87:9e:7f:9e:86:24:6d:ae:cf:d5:fe:45:ea:a7:3b:e7:
         5d:78:39:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 16:12:56 2026 by rpki-client