Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32322d3332203d3e20323633343832.roa
File:                     3138392e38342e34342e302f32322d3332203d3e20323633343832.roa (raw, json)
Hash identifier:          EI4qd+UKlcWT5W1otLpzlkKFQpJ5wwBw8Avb4ZIbpEk=
Subject key identifier:   A5:D3:D0:4A:EA:60:41:B9:E9:02:D9:96:27:41:8B:B4:F5:B5:56:63
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       6BD6C61BCC211C4097EAF3803C8A3619B0AC59C5
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32322d3332203d3e20323633343832.roa
Signing time:             Wed 01 Jul 2026 18:16:02 +0000
ROA not before:           Wed 01 Jul 2026 18:11:02 +0000
ROA not after:            Wed 30 Jun 2027 18:16:02 +0000
asID:                     263482
IP address blocks:        189.84.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 17:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d6:c6:1b:cc:21:1c:40:97:ea:f3:80:3c:8a:36:19:b0:ac:59:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Jul  1 18:11:02 2026 GMT
            Not After : Jun 30 18:16:02 2027 GMT
        Subject: CN=A5D3D04AEA6041B9E902D99627418BB4F5B55663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:cc:60:78:ef:7a:3e:80:80:3a:48:b1:78:
                    56:2f:5b:af:4b:36:dd:2e:5a:e3:ad:22:da:86:e2:
                    27:ea:70:65:8a:5c:15:33:ef:8f:7c:f4:1f:2a:54:
                    b2:af:cd:38:a8:c4:7c:90:63:88:60:9e:29:a8:8c:
                    18:6d:c1:90:f9:dd:f0:7a:4e:cc:71:a5:3d:77:6a:
                    4c:4d:4e:e0:cf:ac:ec:90:4e:1a:cf:9a:08:cb:45:
                    9e:c5:83:15:d3:de:45:20:e0:bb:e0:66:d8:9a:92:
                    13:d7:2d:46:53:70:4c:e3:2b:f9:6b:34:e0:70:7f:
                    fe:3f:62:05:b4:9e:92:44:9e:63:62:f2:b5:d0:7b:
                    31:8d:27:3c:47:40:5c:92:79:67:34:2d:1e:aa:90:
                    e3:d6:a8:8c:40:18:57:02:2a:1b:7d:44:1c:bb:72:
                    e4:8c:d9:be:7d:8d:59:5f:1c:0d:af:d2:66:24:72:
                    96:8e:f5:00:e4:d2:fa:f3:f6:cf:57:a0:68:e5:37:
                    0c:2a:04:07:e1:44:ce:36:63:91:75:ce:a3:d3:6c:
                    ad:ba:06:57:25:83:28:de:f3:ec:53:c2:f2:e1:9f:
                    7b:44:eb:2d:52:96:44:04:d8:ca:2a:48:86:82:04:
                    c8:84:2a:e5:42:32:d7:89:18:03:1e:05:77:4a:83:
                    f6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D3:D0:4A:EA:60:41:B9:E9:02:D9:96:27:41:8B:B4:F5:B5:56:63
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32322d3332203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:af:cb:16:32:96:91:c1:bd:91:cc:e0:dc:75:e6:97:3f:ef:
         f7:55:bf:b9:91:64:89:47:5e:6f:8a:df:38:f4:32:98:eb:7a:
         6a:e6:99:37:b5:8c:32:51:7f:dc:a5:1b:b7:cd:8d:66:d4:e5:
         82:7e:25:7c:43:a8:18:c2:b1:ee:5d:d9:32:02:d8:8f:ff:9e:
         76:34:0c:76:34:16:6c:2b:36:00:f7:04:12:a2:6f:72:2a:95:
         a7:b0:34:b4:6f:ed:30:48:b4:9d:b4:e0:35:0c:f3:34:2f:b4:
         7d:96:50:d0:1c:e0:91:b3:9c:9f:ad:48:93:95:91:58:16:25:
         f6:79:0d:d3:4d:3c:3b:0f:eb:a3:dc:24:dc:60:93:c1:2c:49:
         6e:0a:7e:e5:38:dc:d8:10:28:6c:c1:e0:4c:83:38:96:23:d4:
         65:3b:49:c1:22:0d:77:ca:8d:33:44:0f:e9:51:e4:f7:66:27:
         4e:c5:ee:1f:46:cc:2d:19:2f:63:c5:73:d5:aa:f4:d6:cd:78:
         da:91:56:b8:81:2b:7c:bd:9f:4c:78:83:11:71:31:22:6e:89:
         63:b2:29:79:e5:82:6d:f0:31:3d:71:b2:4d:4a:ce:aa:a0:23:
         92:19:f5:e3:ba:9f:ec:63:63:2a:9f:73:b5:9a:0e:f7:c2:17:
         8e:13:64:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:17:09 2026 by rpki-client