Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138392e39302e3233352e302f32342d3234203d3e20323636333132.roa
File:                     3138392e39302e3233352e302f32342d3234203d3e20323636333132.roa (raw, json)
Hash identifier:          IXcqmtZNbBCd5GVrG221/xV0U+YjWr+DkRIFU3NME3g=
Subject key identifier:   75:AE:AA:76:F8:B3:16:C1:ED:DE:E7:A9:95:44:60:CD:AF:50:5B:1A
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       0E495D0205048EEC805F63D2462132CFCF0DEC41
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138392e39302e3233352e302f32342d3234203d3e20323636333132.roa
Signing time:             Wed 19 Aug 2026 04:18:22 +0000
ROA not before:           Wed 19 Aug 2026 04:13:22 +0000
ROA not after:            Wed 18 Aug 2027 04:18:22 +0000
asID:                     266312
IP address blocks:        189.90.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 14:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:49:5d:02:05:04:8e:ec:80:5f:63:d2:46:21:32:cf:cf:0d:ec:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Aug 19 04:13:22 2026 GMT
            Not After : Aug 18 04:18:22 2027 GMT
        Subject: CN=75AEAA76F8B316C1EDDEE7A9954460CDAF505B1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:36:d1:58:3b:48:c6:ea:30:c6:7a:f0:86:00:
                    5f:41:3d:48:22:c1:f7:db:7c:ed:f8:5d:b4:0c:3a:
                    02:aa:38:0e:9a:9a:b1:73:fb:e1:4d:af:7f:f8:8d:
                    e7:34:8c:12:7b:64:78:df:cd:96:db:6c:2e:90:e2:
                    ea:9a:0a:cb:14:3d:a3:2b:fa:b3:90:c6:71:c6:8c:
                    e2:21:92:17:fa:13:a6:d6:80:21:e9:4f:ac:e0:f5:
                    cb:23:da:b2:b7:f3:0e:09:72:38:d2:22:5c:96:b5:
                    6f:4a:e3:1b:a4:7a:f1:1d:2f:73:15:9b:dd:33:1a:
                    ca:6b:38:22:80:da:c9:1a:39:d0:54:b2:f2:fa:04:
                    b9:c6:ae:9f:c6:9a:3b:56:b5:b8:00:02:f6:43:ef:
                    d1:cf:db:d8:e1:e4:26:27:fd:16:2b:be:d1:df:ea:
                    54:15:0d:42:50:c4:85:bd:25:9b:6e:97:be:36:b3:
                    bd:b6:48:44:27:13:ec:99:ac:12:ac:09:a7:e8:63:
                    11:3b:d0:c6:ae:c1:00:d5:d1:2c:00:98:97:00:ef:
                    f9:b6:c6:77:77:a8:e3:88:7d:41:03:c0:81:47:72:
                    dd:67:8a:41:03:9b:ff:fd:21:59:d7:67:d3:94:5d:
                    66:2a:45:43:7d:4c:bd:b8:29:7e:ec:70:60:af:8e:
                    d9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AE:AA:76:F8:B3:16:C1:ED:DE:E7:A9:95:44:60:CD:AF:50:5B:1A
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138392e39302e3233352e302f32342d3234203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:86:4e:8a:17:54:60:09:17:2c:b8:c5:2e:bd:b8:85:d5:0b:
         e2:f1:18:96:aa:d6:6f:1c:ab:fd:d5:ea:7b:d3:b9:84:48:bc:
         3d:31:66:a6:fc:58:f8:07:92:99:fe:94:22:ad:f8:a8:f4:49:
         47:44:1a:74:3e:3c:b7:f2:13:e0:92:e3:2b:71:2d:18:52:4a:
         ae:65:f6:6e:c7:9f:84:8f:b0:1f:c6:ae:d4:c9:22:ca:ab:4c:
         d8:04:6c:cb:90:da:e5:61:86:78:e0:97:30:b0:2b:ac:72:45:
         2c:71:d9:95:4f:39:f4:33:23:01:93:b9:72:07:6b:6a:89:ea:
         86:df:e5:09:26:50:ac:64:35:6c:4c:d5:c7:c5:29:25:ff:01:
         23:8e:d3:bf:8b:8a:f8:a8:4d:9d:70:45:82:42:1b:5c:b8:9b:
         76:9f:38:62:88:d5:cb:c4:2e:c6:c9:40:97:59:d1:f1:98:d4:
         8e:ce:92:20:ad:e8:62:65:46:63:56:61:1f:bc:28:9b:89:d1:
         53:fb:37:98:04:a8:fb:39:e8:f0:e7:86:2f:09:1b:a2:7b:e2:
         48:5a:b6:55:80:97:84:1f:1d:e0:84:80:22:81:db:ab:19:fc:
         c7:69:38:7d:bc:f4:9c:98:bd:77:49:bc:90:a2:ce:f5:9b:c4:
         9d:2e:f4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:00:37 2026 by rpki-client