Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/2/3138372e3130332e39362e302f31392d3332203d3e203134383430.roa
File:                     3138372e3130332e39362e302f31392d3332203d3e203134383430.roa (raw, json)
Hash identifier:          boU5D0EuptXhzaqdXvCoWCeELCmgPTzc25DAoiGeqlw=
Subject key identifier:   23:45:8E:56:B3:A5:87:3E:EB:B9:C9:EA:81:25:6B:E8:8C:1D:40:56
Certificate issuer:       /CN=98E0B0E6B64869AA12126FA739434E8D48C37493
Certificate serial:       7210B128C187C53284E0C1CC81F4AEE0517214E5
Authority key identifier: 98:E0:B0:E6:B6:48:69:AA:12:12:6F:A7:39:43:4E:8D:48:C3:74:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E0B0E6B64869AA12126FA739434E8D48C37493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/2/3138372e3130332e39362e302f31392d3332203d3e203134383430.roa
Signing time:             Mon 06 Jul 2026 18:50:43 +0000
ROA not before:           Mon 06 Jul 2026 18:45:43 +0000
ROA not after:            Mon 05 Jul 2027 18:50:43 +0000
asID:                     14840
IP address blocks:        187.103.96.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/2/98E0B0E6B64869AA12126FA739434E8D48C37493.crl
                          rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/2/98E0B0E6B64869AA12126FA739434E8D48C37493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E0B0E6B64869AA12126FA739434E8D48C37493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:10:b1:28:c1:87:c5:32:84:e0:c1:cc:81:f4:ae:e0:51:72:14:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98E0B0E6B64869AA12126FA739434E8D48C37493
        Validity
            Not Before: Jul  6 18:45:43 2026 GMT
            Not After : Jul  5 18:50:43 2027 GMT
        Subject: CN=23458E56B3A5873EEBB9C9EA81256BE88C1D4056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ec:e5:6c:54:6b:fd:7d:6f:ca:58:40:be:31:
                    b4:82:8f:a7:79:1c:ba:91:85:f3:69:79:07:32:2f:
                    ea:6f:da:a7:e8:73:ed:85:4b:d2:e3:12:a6:5a:bd:
                    28:3f:34:c7:92:14:69:df:2a:04:b6:64:61:55:2c:
                    a9:8a:a9:5e:2d:be:4b:be:c6:1e:4c:8b:80:05:0f:
                    0b:9f:26:80:c7:3b:23:2a:a2:ff:1d:16:9f:41:f4:
                    a3:e1:b5:04:a6:e6:e3:b1:75:de:4f:aa:8e:29:3b:
                    5c:f8:cf:fa:d2:23:0b:57:49:00:1a:05:de:02:e2:
                    b6:2e:d9:5b:74:6a:66:68:5b:f1:b5:be:e7:e2:8c:
                    c7:02:de:96:ae:39:fc:72:bc:82:4b:72:b9:0e:3d:
                    74:6f:d0:cf:a1:f4:00:ed:d0:47:b5:5f:ed:71:51:
                    8a:6a:1d:1b:17:aa:bb:e8:16:e6:4c:da:bb:43:08:
                    fa:87:f1:7c:1d:6d:83:5e:08:91:97:4b:51:bc:a4:
                    90:38:be:2d:d2:b3:d1:62:12:b5:a5:9f:b7:71:09:
                    ae:a2:ad:8e:65:d8:2f:4b:68:a6:f7:aa:f2:6b:82:
                    a8:22:db:c9:76:4f:22:2a:5f:e2:1d:d4:39:db:6e:
                    cd:0a:21:70:a8:d7:3a:6e:7f:98:a5:21:cd:35:61:
                    0a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:45:8E:56:B3:A5:87:3E:EB:B9:C9:EA:81:25:6B:E8:8C:1D:40:56
            X509v3 Authority Key Identifier:
                keyid:98:E0:B0:E6:B6:48:69:AA:12:12:6F:A7:39:43:4E:8D:48:C3:74:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/2/98E0B0E6B64869AA12126FA739434E8D48C37493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E0B0E6B64869AA12126FA739434E8D48C37493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/2/3138372e3130332e39362e302f31392d3332203d3e203134383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:19:8d:e2:85:fe:44:ff:e4:6b:52:5a:1c:1c:3a:64:ee:71:
         b4:8b:3a:26:cb:16:2e:17:70:ec:89:d3:c6:45:82:1d:b4:60:
         03:74:d1:7d:84:e1:de:bd:aa:f0:a8:d7:fe:bc:01:6e:05:96:
         f2:23:c5:d1:88:c1:71:bd:05:67:a7:b2:29:2d:7f:55:41:8f:
         8a:ae:a5:b2:f4:9c:5c:2c:dd:df:62:a5:d2:3b:ca:03:3d:ab:
         00:e2:17:fe:fc:e0:af:6d:0b:14:03:f5:da:27:94:c8:b1:aa:
         c4:79:ea:d9:6c:62:19:36:d2:9a:8a:b1:d7:61:ff:6c:6a:b5:
         15:4d:07:dd:da:df:9e:3c:3c:1b:84:bc:be:00:26:ad:9c:72:
         f2:fc:ba:ef:6d:49:ee:7a:fd:3f:4a:d2:1e:77:f7:78:44:2d:
         29:97:b4:ea:11:ef:64:2f:bc:cf:5e:27:d7:2a:00:aa:11:30:
         e1:4a:27:0c:03:e1:d3:50:94:03:63:e0:45:0d:69:ff:1e:4a:
         0d:c7:d0:e0:41:9b:0a:1c:2b:1a:a8:b5:0d:98:ca:95:de:ac:
         fc:fa:ff:df:be:35:2c:1d:e9:3f:79:c7:f5:ab:ee:79:57:61:
         cb:50:91:f0:57:5e:f5:e6:29:e7:e8:d2:44:6e:fe:bf:60:07:
         d0:08:eb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:01:02 2026 by rpki-client