Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa
File:                     3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa (raw, json)
Hash identifier:          YEwFj5gmFSXawyklXE1rcGSlmJYDE+oABACY8USeZsY=
Subject key identifier:   BF:FA:38:EF:1A:B0:85:FA:54:E7:E0:42:83:6B:22:4D:72:FB:A6:8B
Certificate issuer:       /CN=964E4683BB2B2596300F81FEBD9EA9DB505AF025
Certificate serial:       6385165BCAFE509731D15DC548C5D352E041BE74
Authority key identifier: 96:4E:46:83:BB:2B:25:96:30:0F:81:FE:BD:9E:A9:DB:50:5A:F0:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa
Signing time:             Tue 19 May 2026 19:16:18 +0000
ROA not before:           Tue 19 May 2026 19:11:18 +0000
ROA not after:            Tue 18 May 2027 19:16:18 +0000
asID:                     265998
IP address blocks:        181.191.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl
                          rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 09:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:85:16:5b:ca:fe:50:97:31:d1:5d:c5:48:c5:d3:52:e0:41:be:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=964E4683BB2B2596300F81FEBD9EA9DB505AF025
        Validity
            Not Before: May 19 19:11:18 2026 GMT
            Not After : May 18 19:16:18 2027 GMT
        Subject: CN=BFFA38EF1AB085FA54E7E042836B224D72FBA68B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:52:01:d5:50:b4:d9:aa:3e:d4:7f:1c:b4:
                    0b:18:0d:af:24:5d:48:0a:d1:92:19:2c:87:62:c3:
                    7a:b2:15:d0:42:9e:d6:af:d1:ce:0f:05:62:ab:77:
                    6d:4a:1a:4c:fb:2e:e8:87:37:39:72:79:21:6e:4d:
                    78:a6:19:47:28:88:83:d5:05:07:7f:24:30:2f:21:
                    0d:3a:a6:ff:33:b6:13:c0:02:c0:fa:c3:83:6b:3d:
                    48:d2:20:0f:53:5e:6a:ac:37:9e:f9:db:b0:ed:9b:
                    25:3d:17:23:d8:79:ff:fb:bc:30:92:42:6a:9a:c0:
                    26:f9:6a:0e:e3:af:f1:bc:fe:cc:17:cf:39:8c:29:
                    6c:04:f7:49:6e:e2:ea:1a:e6:c9:c4:18:ac:f1:3c:
                    d1:ba:ce:8d:ac:0f:f0:70:90:48:b0:da:76:c4:a3:
                    3d:07:47:bd:c6:5d:d0:1f:29:a9:ae:63:df:aa:1a:
                    6c:49:76:c4:22:17:bc:30:aa:35:eb:5f:62:42:a8:
                    0c:1f:55:a5:60:f2:88:45:af:59:d6:e5:3e:a1:ff:
                    ca:fd:cd:73:d6:91:d6:56:de:b5:9f:e5:dc:23:47:
                    c9:5d:05:e4:85:a3:96:4b:46:6b:64:8b:ff:94:16:
                    b6:8c:57:5b:b7:b0:a4:79:a6:90:84:ea:5e:67:47:
                    19:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FA:38:EF:1A:B0:85:FA:54:E7:E0:42:83:6B:22:4D:72:FB:A6:8B
            X509v3 Authority Key Identifier:
                keyid:96:4E:46:83:BB:2B:25:96:30:0F:81:FE:BD:9E:A9:DB:50:5A:F0:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:1a:34:46:cf:e2:3c:6c:f8:6a:7c:0d:ea:4c:a3:47:3e:47:
         14:09:71:53:44:81:25:a4:e0:0b:7f:1e:52:83:30:5e:78:67:
         4f:28:e9:ba:6f:da:62:c3:0f:d2:d6:a0:b6:59:d4:bd:86:7c:
         e7:19:74:b8:c6:ef:6e:fa:21:67:49:fa:47:9f:0e:7f:00:cd:
         7e:85:db:7e:d2:82:ea:55:36:aa:37:e3:3e:97:f3:61:6a:50:
         3b:03:86:ed:ed:5f:e6:0a:bc:e1:17:f8:57:c8:21:d6:df:91:
         e8:0c:ed:47:d5:ea:8d:73:a1:90:73:18:9f:24:02:14:2f:0f:
         09:74:fe:44:1e:cd:91:65:e2:c0:bb:f2:dc:fc:69:49:a5:d4:
         95:7a:69:26:fe:e4:ea:74:7e:0d:19:db:4b:be:03:90:42:80:
         94:10:7b:a0:a4:22:77:ae:82:80:a1:2d:49:ca:93:a6:8f:e4:
         3c:21:f2:bd:25:e5:ea:0c:a6:78:b9:ba:3b:2a:1b:52:79:6d:
         7e:70:b5:03:e7:d2:8b:a2:ee:ff:46:03:80:c1:58:ed:c0:78:
         ee:89:97:49:e1:32:ae:11:28:c5:bb:fd:e6:bd:fd:63:e3:84:
         1e:04:34:8b:ec:62:3a:62:3b:ba:ca:12:0d:fe:b5:70:7a:a3:
         52:46:20:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:42:40 2026 by rpki-client