Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3133382e3138362e3233352e302f32342d3234203d3e20323632393739.roa
File:                     3133382e3138362e3233352e302f32342d3234203d3e20323632393739.roa (raw, json)
Hash identifier:          5twdI5Yr3Z33x/TZ94hxprPI6ZykW1KEugKJEEVdelM=
Subject key identifier:   2C:55:3F:C1:DB:B4:E5:72:40:71:60:15:02:08:96:9C:19:48:D4:C6
Certificate issuer:       /CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Certificate serial:       1CC19ADB296E95904F375AA006AD7F59B55E8EE2
Authority key identifier: C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3133382e3138362e3233352e302f32342d3234203d3e20323632393739.roa
Signing time:             Wed 29 Jul 2026 17:35:39 +0000
ROA not before:           Wed 29 Jul 2026 17:30:39 +0000
ROA not after:            Wed 28 Jul 2027 17:35:39 +0000
asID:                     262979
IP address blocks:        138.186.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 06:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c1:9a:db:29:6e:95:90:4f:37:5a:a0:06:ad:7f:59:b5:5e:8e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
        Validity
            Not Before: Jul 29 17:30:39 2026 GMT
            Not After : Jul 28 17:35:39 2027 GMT
        Subject: CN=2C553FC1DBB4E572407160150208969C1948D4C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3e:a0:fc:27:d6:2f:01:52:8b:66:b8:e8:7c:
                    85:b3:be:ad:65:37:0d:d7:cb:c4:50:e0:9d:bd:46:
                    2f:d1:da:9a:c3:9a:d0:e5:f1:ae:96:43:e9:73:2c:
                    bf:d7:84:bd:d3:d4:d6:0b:9f:f6:80:85:57:78:63:
                    72:c4:ab:a0:56:4f:f3:fb:29:39:c4:1f:19:29:05:
                    8e:ce:d8:76:33:af:7c:99:05:26:31:cc:41:d8:72:
                    e6:f2:27:52:80:12:6f:33:ad:49:e3:fc:d5:67:68:
                    b5:9f:cf:f4:1c:56:e6:ef:a9:ac:37:1c:8e:67:21:
                    bd:cd:9d:b3:8d:05:7e:1f:4e:6a:96:dc:ee:ff:6a:
                    75:e4:a5:07:fd:e6:06:52:dc:a0:46:0a:b0:5f:e9:
                    b2:99:59:9a:9b:fd:52:53:a1:51:57:a7:3f:64:6c:
                    10:01:58:20:03:63:5a:af:80:b6:97:58:e5:e8:2c:
                    e4:cf:f2:f9:b0:5a:f4:06:54:a6:e9:1e:72:e1:f7:
                    a5:46:36:71:25:11:22:70:c1:f4:b6:60:b6:a2:17:
                    b3:a6:04:ec:ce:a5:a8:02:aa:16:d0:c9:cd:a3:41:
                    34:b3:63:4a:e0:66:c8:26:56:e5:94:c7:da:27:60:
                    73:8d:53:48:f1:30:6d:ee:68:44:6a:f2:fc:85:30:
                    d3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:55:3F:C1:DB:B4:E5:72:40:71:60:15:02:08:96:9C:19:48:D4:C6
            X509v3 Authority Key Identifier:
                keyid:C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3133382e3138362e3233352e302f32342d3234203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:70:e6:62:0a:3a:28:59:6a:38:b7:2f:23:e1:d4:0e:aa:06:
         9b:43:e5:de:75:a1:2d:73:3e:89:29:36:2b:0c:1c:fc:df:a3:
         0c:da:e0:8b:84:07:75:86:d4:0a:96:69:d6:f3:d7:6c:3d:50:
         7a:fd:bb:d8:0e:86:b6:cf:57:dd:90:60:78:56:fd:d4:58:86:
         fb:3b:b8:25:df:e5:ca:f6:17:b1:47:0d:12:8b:f6:77:f4:fe:
         25:76:c5:b5:42:28:38:b4:dd:84:3b:17:c5:18:df:1a:d4:ba:
         ba:46:f5:63:f5:48:3c:fb:8f:69:d8:06:8e:ed:6f:aa:fc:b9:
         42:80:ce:e8:71:1d:fa:85:15:83:e1:d7:10:d9:cf:fb:69:8b:
         50:06:85:a9:d9:60:17:03:bc:0e:38:d0:51:9c:d7:d3:26:62:
         e6:10:60:86:aa:6d:ff:3c:ff:b7:f8:bf:44:3d:71:51:12:e5:
         2e:32:2d:df:ae:50:73:44:0c:52:54:53:bf:bb:25:bf:54:2a:
         fd:e7:f8:73:bc:3a:94:12:9b:f1:1f:72:7b:a4:2c:ca:0c:de:
         cb:e1:36:cf:c6:db:86:ff:8d:fb:81:57:c7:32:e1:b0:6f:a3:
         6b:f5:3c:20:03:fb:16:87:0a:98:fd:e9:c5:de:45:6b:b8:96:
         7b:84:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:59:58 2026 by rpki-client