Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSBSxzkPff9DYvmR2C6T83CLVKsM4JM6yFFgyp8KHFYy/0/3136302e3233382e3134322e302f32332d3233203d3e20323731363636.roa
File:                     3136302e3233382e3134322e302f32332d3233203d3e20323731363636.roa (raw, json)
Hash identifier:          eB4ZOrSLVgy3HGg15+h8i8/s2Mc1R5jGKdq2JviwVFQ=
Subject key identifier:   1E:2C:93:9F:D0:44:24:AF:4F:C5:E0:01:AF:A0:22:B7:11:D8:20:12
Certificate issuer:       /CN=50C8623F093C1AA2BCA40917A25C1F33B6FF33D7
Certificate serial:       5A2EC033FD9E2C9654762F907B3754ABC1FC9C4A
Authority key identifier: 50:C8:62:3F:09:3C:1A:A2:BC:A4:09:17:A2:5C:1F:33:B6:FF:33:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C8623F093C1AA2BCA40917A25C1F33B6FF33D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSBSxzkPff9DYvmR2C6T83CLVKsM4JM6yFFgyp8KHFYy/0/3136302e3233382e3134322e302f32332d3233203d3e20323731363636.roa
Signing time:             Fri 27 Mar 2026 11:53:02 +0000
ROA not before:           Fri 27 Mar 2026 11:48:02 +0000
ROA not after:            Fri 26 Mar 2027 11:53:02 +0000
asID:                     271666
IP address blocks:        160.238.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSBSxzkPff9DYvmR2C6T83CLVKsM4JM6yFFgyp8KHFYy/0/50C8623F093C1AA2BCA40917A25C1F33B6FF33D7.crl
                          rsync://rpki-repo.registro.br/repo/BSBSxzkPff9DYvmR2C6T83CLVKsM4JM6yFFgyp8KHFYy/0/50C8623F093C1AA2BCA40917A25C1F33B6FF33D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C8623F093C1AA2BCA40917A25C1F33B6FF33D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 07:13:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2e:c0:33:fd:9e:2c:96:54:76:2f:90:7b:37:54:ab:c1:fc:9c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50C8623F093C1AA2BCA40917A25C1F33B6FF33D7
        Validity
            Not Before: Mar 27 11:48:02 2026 GMT
            Not After : Mar 26 11:53:02 2027 GMT
        Subject: CN=1E2C939FD04424AF4FC5E001AFA022B711D82012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:1c:d4:d9:ba:85:8b:8c:48:76:7b:db:ed:
                    c1:2d:8e:4b:02:ca:e6:1e:46:bb:08:06:6b:a8:6e:
                    35:dd:1e:7c:dc:b7:8b:ac:7c:87:f9:6e:ae:33:fc:
                    fa:18:98:af:fd:ee:13:9c:d9:db:44:f3:bd:85:25:
                    b6:77:c5:d5:e1:28:2e:37:a3:2c:0c:24:92:45:c3:
                    5c:3d:d3:ad:b3:86:ca:27:6a:bd:4d:08:17:70:38:
                    15:c0:35:5e:33:f4:25:7c:ff:76:ea:a1:e9:e7:0d:
                    f9:98:d7:75:a3:97:bc:9e:d7:4d:aa:ac:dd:5d:36:
                    86:42:6c:91:d6:ba:74:bc:74:f2:b9:b0:04:bb:9e:
                    8c:85:67:a0:a1:58:40:1c:a6:a1:96:de:4f:60:29:
                    cd:85:f6:30:73:09:b5:03:61:1a:96:35:7a:e4:f9:
                    22:b7:a9:c6:cb:86:5b:24:f7:21:78:7f:1c:3e:af:
                    40:3c:8d:bf:32:47:55:69:3d:c2:bd:ab:0e:ed:c6:
                    e3:0d:b5:89:1e:5e:02:13:2e:b2:b4:93:45:cd:dd:
                    e1:2b:4a:91:31:8f:ad:78:43:1c:8f:1e:97:c0:ed:
                    55:73:90:2c:8d:9b:a1:c1:f7:36:c8:d0:fd:b7:0f:
                    f0:b3:1b:64:fc:0a:a4:80:86:4b:88:0f:db:92:3c:
                    dc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2C:93:9F:D0:44:24:AF:4F:C5:E0:01:AF:A0:22:B7:11:D8:20:12
            X509v3 Authority Key Identifier:
                keyid:50:C8:62:3F:09:3C:1A:A2:BC:A4:09:17:A2:5C:1F:33:B6:FF:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSBSxzkPff9DYvmR2C6T83CLVKsM4JM6yFFgyp8KHFYy/0/50C8623F093C1AA2BCA40917A25C1F33B6FF33D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C8623F093C1AA2BCA40917A25C1F33B6FF33D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSBSxzkPff9DYvmR2C6T83CLVKsM4JM6yFFgyp8KHFYy/0/3136302e3233382e3134322e302f32332d3233203d3e20323731363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:ab:1f:7e:2f:6c:7d:c9:f1:c0:be:a3:e1:09:d5:82:36:e9:
         2d:c7:c3:66:0e:13:f5:71:e6:19:c2:99:7d:f0:52:5f:f1:6a:
         54:39:e0:af:e9:fc:05:c6:5e:51:74:92:92:ef:67:3b:aa:8f:
         fa:23:22:e7:5f:7b:9b:f6:18:94:ad:15:6e:39:7f:b2:8b:5e:
         e8:59:06:76:4a:cc:8c:85:4d:8e:6b:01:56:01:87:4f:8e:9c:
         1c:2d:af:35:c7:b9:fa:76:da:ed:ad:2a:88:08:62:03:81:7c:
         c3:c3:ed:81:d7:d0:63:35:cd:a4:26:94:31:c0:96:c7:e5:f6:
         ba:e5:80:17:47:e7:2a:16:8b:48:26:6f:a8:08:88:ac:04:7d:
         d6:2d:1c:dc:2d:f2:a4:9d:cc:de:f0:bf:84:75:f9:d0:16:04:
         d7:f2:f8:b9:5a:18:6b:b8:63:a5:11:21:a3:6d:fc:1f:ac:7c:
         62:c9:09:82:87:fd:e3:8a:63:fe:bc:f2:84:06:43:86:fb:7a:
         19:e1:90:f0:ce:3a:be:b5:63:96:dc:1b:7b:06:c3:82:ad:ed:
         25:d0:db:62:64:d5:3d:4c:39:b2:e7:cc:6c:00:a9:a3:da:48:
         25:2a:4b:cd:e7:86:0a:5c:1a:9a:38:71:db:ff:24:0d:4a:e8:
         17:25:f5:91
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUWi7AM/2eLJZUdi+QezdUq8H8nEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBDODYyM0YwOTNDMUFBMkJDQTQwOTE3QTI1QzFGMzNC
NkZGMzNENzAeFw0yNjAzMjcxMTQ4MDJaFw0yNzAzMjYxMTUzMDJaMDMxMTAvBgNV
BAMTKDFFMkM5MzlGRDA0NDI0QUY0RkM1RTAwMUFGQTAyMkI3MTFEODIwMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYCRzU2bqFi4xIdnvb7cEtjksC
yuYeRrsIBmuobjXdHnzct4usfIf5bq4z/PoYmK/97hOc2dtE872FJbZ3xdXhKC43
oywMJJJFw1w9062zhsonar1NCBdwOBXANV4z9CV8/3bqoennDfmY13Wjl7ye102q
rN1dNoZCbJHWunS8dPK5sAS7noyFZ6ChWEAcpqGW3k9gKc2F9jBzCbUDYRqWNXrk
+SK3qcbLhlsk9yF4fxw+r0A8jb8yR1VpPcK9qw7txuMNtYkeXgITLrK0k0XN3eEr
SpExj614QxyPHpfA7VVzkCyNm6HB9zbI0P23D/CzG2T8CqSAhkuID9uSPNwZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUHiyTn9BEJK9PxeABr6AitxHYIBIwHwYDVR0j
BBgwFoAUUMhiPwk8GqK8pAkXolwfM7b/M9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlNCU3h6a1BmZjlEWXZtUjJDNlQ4M0NMVktzTTRKTTZ5RkZneXA4S0hG
WXkvMC81MEM4NjIzRjA5M0MxQUEyQkNBNDA5MTdBMjVDMUYzM0I2RkYzM0Q3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwQzg2MjNGMDkzQzFBQTJC
Q0E0MDkxN0EyNUMxRjMzQjZGRjMzRDcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JTQlN4emtQZmY5RFl2bVIyQzZUODNDTFZLc000Sk02eUZGZ3lwOEtIRll5LzAv
MzEzNjMwMmUzMjMzMzgyZTMxMzQzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMTM2MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaDujjANBgkqhkiG9w0BAQsFAAOCAQEAAqsf
fi9sfcnxwL6j4QnVgjbpLcfDZg4T9XHmGcKZffBSX/FqVDngr+n8BcZeUXSSku9n
O6qP+iMi5197m/YYlK0Vbjl/sote6FkGdkrMjIVNjmsBVgGHT46cHC2vNce5+nba
7a0qiAhiA4F8w8PtgdfQYzXNpCaUMcCWx+X2uuWAF0fnKhaLSCZvqAiIrAR91i0c
3C3ypJ3M3vC/hHX50BYE1/L4uVoYa7hjpREho238H6x8YskJgof944pj/rzyhAZD
hvt6GeGQ8M46vrVjltwbewbDgq3tJdDbYmTVPUw5sufMbACpo9pIJSpLzeeGClwa
mjhx2/8kDUroFyX1kQ==
-----END CERTIFICATE-----
Generated at Thu Apr 9 12:47:03 2026 by rpki-client