Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/3133382e35392e3131322e302f32322d3234203d3e203238363036.roa
File:                     3133382e35392e3131322e302f32322d3234203d3e203238363036.roa (raw, json)
Hash identifier:          CAkPGOxgs2hTuOx/hJe/657ibtkMyuqx4tCoNTmyRQA=
Subject key identifier:   B0:78:72:F3:48:8D:97:60:76:A4:A8:5E:4E:8A:1E:B7:D7:8C:75:CF
Certificate issuer:       /CN=E7BD7FB5338C0533B7C507F4CA3932E8D54C7040
Certificate serial:       76A8D5A435738065D71034143DAF6869C6B8995F
Authority key identifier: E7:BD:7F:B5:33:8C:05:33:B7:C5:07:F4:CA:39:32:E8:D5:4C:70:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/3133382e35392e3131322e302f32322d3234203d3e203238363036.roa
Signing time:             Thu 30 Jul 2026 22:26:54 +0000
ROA not before:           Thu 30 Jul 2026 22:21:54 +0000
ROA not after:            Thu 29 Jul 2027 22:26:54 +0000
asID:                     28606
IP address blocks:        138.59.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.crl
                          rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 06:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a8:d5:a4:35:73:80:65:d7:10:34:14:3d:af:68:69:c6:b8:99:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7BD7FB5338C0533B7C507F4CA3932E8D54C7040
        Validity
            Not Before: Jul 30 22:21:54 2026 GMT
            Not After : Jul 29 22:26:54 2027 GMT
        Subject: CN=B07872F3488D976076A4A85E4E8A1EB7D78C75CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:57:87:0d:f1:b9:80:fb:25:4b:aa:aa:61:99:
                    71:5e:c8:3f:f8:05:17:18:e6:93:ee:2b:bc:89:5c:
                    4c:c4:ea:ae:c7:52:f8:c0:c8:d6:c4:36:08:d3:82:
                    1b:93:e6:70:21:3d:58:be:6c:d6:e2:58:41:51:47:
                    39:9d:6c:71:b4:ee:94:b6:8a:54:e5:de:6f:76:80:
                    29:1c:22:bb:f4:e4:fb:3c:7b:dc:84:c5:fb:6a:89:
                    46:c5:d2:6f:ee:e2:c1:8d:d4:c1:b7:03:55:01:5f:
                    59:85:b3:c1:28:5b:75:62:a1:c3:f0:3f:c0:d4:7d:
                    16:09:77:c4:be:62:24:22:c7:e6:78:f2:ad:28:aa:
                    9b:b7:f2:89:62:87:26:dd:31:d2:84:91:98:41:05:
                    b5:4b:ea:ca:a9:a5:88:f2:48:3c:95:43:4a:2c:62:
                    72:cb:cd:8f:6c:a2:2e:ec:f9:dc:65:22:d6:c6:23:
                    e0:bf:b6:be:0b:50:77:bb:9e:5d:36:26:21:84:10:
                    16:e9:b5:f9:8d:5b:38:e7:38:f5:a8:87:5f:b8:14:
                    82:b9:00:01:42:cf:f2:c2:67:8c:e0:a7:db:5a:7e:
                    49:e5:e4:59:80:89:4c:81:4c:3a:6a:ac:6e:23:13:
                    79:ab:44:38:dc:c1:a6:be:75:cd:29:c1:39:89:0b:
                    8f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:78:72:F3:48:8D:97:60:76:A4:A8:5E:4E:8A:1E:B7:D7:8C:75:CF
            X509v3 Authority Key Identifier:
                keyid:E7:BD:7F:B5:33:8C:05:33:B7:C5:07:F4:CA:39:32:E8:D5:4C:70:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/3133382e35392e3131322e302f32322d3234203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:22:87:ab:0e:f6:0b:8b:5c:31:c1:96:64:c9:87:aa:01:76:
         33:3e:9a:c5:6a:cf:cc:c0:23:2b:4c:2a:a4:a1:aa:7e:b9:d3:
         7b:11:87:d2:5f:34:56:e6:e3:3c:a0:2d:93:75:11:f6:10:a8:
         54:f2:94:a9:e6:d7:f7:bb:22:43:6f:a8:8e:8a:37:74:b8:4a:
         00:74:a6:1a:bb:76:c4:c8:31:86:40:26:da:c6:20:c8:0f:d5:
         28:b1:1d:75:6b:ad:da:73:13:0b:0d:db:f4:b9:3a:69:cf:1d:
         79:63:68:b2:b9:d4:d5:58:bb:7d:46:c0:65:42:30:a9:8c:46:
         70:96:48:e8:ad:ca:a8:9b:c7:d3:d5:f6:05:72:58:64:f8:e8:
         10:3d:26:29:10:5f:32:f4:71:01:10:fb:93:d4:79:c3:5d:14:
         7f:b8:49:78:a6:ea:5d:1f:ce:e1:4f:65:2e:dc:b8:4c:2a:4c:
         eb:94:cf:62:60:58:98:59:70:8c:24:dc:c5:70:32:d7:33:dd:
         81:51:d8:12:25:0f:0e:d5:df:63:a4:75:2a:99:7c:82:2e:ae:
         1a:4b:5f:dd:45:1a:82:c9:24:6d:42:4d:ff:be:d5:01:22:f1:
         60:28:0d:7f:92:47:48:6c:35:74:60:2b:61:99:15:f1:4c:d3:
         cb:68:fa:cd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdqjVpDVzgGXXEDQUPa9oaca4mV8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdCRDdGQjUzMzhDMDUzM0I3QzUwN0Y0Q0EzOTMyRThE
NTRDNzA0MDAeFw0yNjA3MzAyMjIxNTRaFw0yNzA3MjkyMjI2NTRaMDMxMTAvBgNV
BAMTKEIwNzg3MkYzNDg4RDk3NjA3NkE0QTg1RTRFOEExRUI3RDc4Qzc1Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnV4cN8bmA+yVLqqphmXFeyD/4
BRcY5pPuK7yJXEzE6q7HUvjAyNbENgjTghuT5nAhPVi+bNbiWEFRRzmdbHG07pS2
ilTl3m92gCkcIrv05Ps8e9yExftqiUbF0m/u4sGN1MG3A1UBX1mFs8EoW3ViocPw
P8DUfRYJd8S+YiQix+Z48q0oqpu38olihybdMdKEkZhBBbVL6sqppYjySDyVQ0os
YnLLzY9soi7s+dxlItbGI+C/tr4LUHe7nl02JiGEEBbptfmNWzjnOPWoh1+4FIK5
AAFCz/LCZ4zgp9tafknl5FmAiUyBTDpqrG4jE3mrRDjcwaa+dc0pwTmJC4/DAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsHhy80iNl2B2pKheTooet9eMdc8wHwYDVR0j
BBgwFoAU571/tTOMBTO3xQf0yjky6NVMcEAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0hveGpkZ3pvOW1pRmFrVzh3UDh1dmNaMUZucEc4NXBVTmh5Tm9RR0hu
MlUvMi9FN0JEN0ZCNTMzOEMwNTMzQjdDNTA3RjRDQTM5MzJFOEQ1NEM3MDQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3QkQ3RkI1MzM4QzA1MzNC
N0M1MDdGNENBMzkzMkU4RDU0QzcwNDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NIb3hqZGd6bzltaUZha1c4d1A4dXZjWjFGbnBHODVwVU5oeU5vUUdIbjJVLzIv
MzEzMzM4MmUzNTM5MmUzMTMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzYzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCijtwMA0GCSqGSIb3DQEBCwUAA4IBAQA7IoerDvYL
i1wxwZZkyYeqAXYzPprFas/MwCMrTCqkoap+udN7EYfSXzRW5uM8oC2TdRH2EKhU
8pSp5tf3uyJDb6iOijd0uEoAdKYau3bEyDGGQCbaxiDID9UosR11a63acxMLDdv0
uTppzx15Y2iyudTVWLt9RsBlQjCpjEZwlkjorcqom8fT1fYFclhk+OgQPSYpEF8y
9HEBEPuT1HnDXRR/uEl4pupdH87hT2Uu3LhMKkzrlM9iYFiYWXCMJNzFcDLXM92B
UdgSJQ8O1d9jpHUqmXyCLq4aS1/dRRqCySRtQk3/vtUBIvFgKA1/kkdIbDV0YCth
mRXxTNPLaPrN
-----END CERTIFICATE-----
Generated at Wed Aug 26 21:54:49 2026 by rpki-client