Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3138392e37362e3234302e302f32302d3332203d3e20323632343037.roa
File:                     3138392e37362e3234302e302f32302d3332203d3e20323632343037.roa (raw, json)
Hash identifier:          9L2nMGNVonLBhpoFJplxVFrkamiwdN9ppJKn0D9rUVA=
Subject key identifier:   E8:51:71:73:D2:FA:91:1D:FC:1E:3C:2B:A2:41:F0:F9:E4:11:41:13
Certificate issuer:       /CN=53BEC138BA48B09E02E2418EF43492F43DCC039D
Certificate serial:       099EEAFE4C81A9C9699D2A9DB7B063C68289FF98
Authority key identifier: 53:BE:C1:38:BA:48:B0:9E:02:E2:41:8E:F4:34:92:F4:3D:CC:03:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53BEC138BA48B09E02E2418EF43492F43DCC039D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3138392e37362e3234302e302f32302d3332203d3e20323632343037.roa
Signing time:             Wed 21 Jan 2026 16:29:03 +0000
ROA not before:           Wed 21 Jan 2026 16:24:03 +0000
ROA not after:            Wed 20 Jan 2027 16:29:03 +0000
asID:                     262407
IP address blocks:        189.76.240.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/53BEC138BA48B09E02E2418EF43492F43DCC039D.crl
                          rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/53BEC138BA48B09E02E2418EF43492F43DCC039D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53BEC138BA48B09E02E2418EF43492F43DCC039D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9e:ea:fe:4c:81:a9:c9:69:9d:2a:9d:b7:b0:63:c6:82:89:ff:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53BEC138BA48B09E02E2418EF43492F43DCC039D
        Validity
            Not Before: Jan 21 16:24:03 2026 GMT
            Not After : Jan 20 16:29:03 2027 GMT
        Subject: CN=E8517173D2FA911DFC1E3C2BA241F0F9E4114113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d8:36:96:86:41:09:dc:84:d8:92:01:a3:ff:
                    a0:bc:dc:be:ec:48:3e:1c:f8:38:a2:2a:57:6c:f4:
                    c9:8e:ce:bc:5c:e6:b4:cb:8b:c8:c4:8b:77:15:5c:
                    7f:5a:5e:61:10:c4:c4:5e:14:99:c7:0c:2d:36:b0:
                    34:de:20:d9:9d:55:74:88:97:4b:1c:a7:db:3b:8c:
                    56:a4:d1:38:fc:04:00:7a:1b:f5:e0:ae:5e:58:16:
                    af:05:41:24:a1:8f:fb:51:55:a1:ba:23:47:39:31:
                    63:b6:8a:76:2d:8d:e6:2e:12:18:e2:19:f2:75:7f:
                    ce:c9:42:4a:97:6b:df:af:7d:d4:33:99:19:be:d3:
                    90:98:56:07:ee:02:d3:c8:7a:e2:d8:0a:f6:f5:5d:
                    c5:6b:fd:f5:1d:23:5c:01:cf:93:79:1e:a6:20:2f:
                    1a:a9:da:1a:42:39:84:e5:67:fa:6e:ab:b0:df:98:
                    51:8d:8a:91:22:95:c0:7d:f3:83:c1:fc:00:05:2d:
                    9a:bd:59:29:77:c5:66:6f:e8:e9:13:93:d3:8b:a0:
                    77:72:ab:2a:9b:9b:83:21:48:0a:72:0a:9b:be:3c:
                    f7:79:d6:dd:7b:da:75:61:e2:da:8c:2b:5d:01:1f:
                    81:ae:30:05:3d:7c:e2:9b:7e:82:74:af:b9:b7:2c:
                    58:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:51:71:73:D2:FA:91:1D:FC:1E:3C:2B:A2:41:F0:F9:E4:11:41:13
            X509v3 Authority Key Identifier:
                keyid:53:BE:C1:38:BA:48:B0:9E:02:E2:41:8E:F4:34:92:F4:3D:CC:03:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/53BEC138BA48B09E02E2418EF43492F43DCC039D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53BEC138BA48B09E02E2418EF43492F43DCC039D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3138392e37362e3234302e302f32302d3332203d3e20323632343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:f7:1f:2a:dd:cb:0c:10:da:3a:28:3b:bb:a6:5b:9f:a6:ec:
         a5:72:ff:83:ab:2e:82:e6:70:a6:15:6f:26:b6:7f:45:9c:f8:
         5a:62:49:fa:59:c9:2c:21:9e:42:ef:9e:a3:55:59:0d:a4:62:
         ab:14:9f:5a:46:6f:e9:c1:70:44:3e:20:24:51:13:db:3d:dd:
         bb:b3:1f:53:1f:ff:8b:e9:90:0e:1e:a4:bb:c5:81:61:8c:71:
         b4:70:a0:e1:3c:68:6a:0f:53:ed:7c:d6:e3:34:b9:e1:a1:fa:
         23:38:0d:08:bb:31:1a:93:8a:71:82:55:f8:3e:e7:8a:01:af:
         3d:12:31:3e:72:73:00:c1:c6:ea:b3:82:85:46:a4:bc:60:95:
         e3:be:0b:85:44:6e:8e:0b:3d:3c:72:85:ee:62:5b:f7:db:25:
         bd:9a:e7:4d:ad:05:43:84:87:04:28:08:8d:60:80:28:7d:aa:
         94:f6:fc:65:2a:c2:0e:a9:8f:c5:ec:76:66:5c:b7:db:99:14:
         c2:e0:1a:96:21:0e:e6:23:19:e7:1c:c5:90:bf:37:2e:cf:56:
         b8:85:9d:f5:76:ce:1f:5c:5e:32:96:a4:1a:93:59:62:45:7b:
         ba:9c:82:3b:d8:1b:14:68:b3:cc:4a:4c:e9:25:3f:96:2d:ca:
         ac:8d:cc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:53:10 2026 by rpki-client