Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EBSuCmQesbVxaxjn7Arm3fx4aowZu5jpoL5wSWTxf7Nq/0/3138392e3132362e38382e302f32322d3234203d3e20323730353736.roa
File:                     3138392e3132362e38382e302f32322d3234203d3e20323730353736.roa (raw, json)
Hash identifier:          u4yaevQZTmGrCyZm8mQk7vING3Wieby5Pyt5AO4mAMo=
Subject key identifier:   9E:26:1E:15:DF:ED:93:34:C5:51:F3:2F:8F:B8:7D:96:08:CC:D7:FF
Certificate issuer:       /CN=2FF15ED0CC5979A010C01B40E662E7F6005E4168
Certificate serial:       2FF43F849798D6B1B19FF331ADB04ED1305C359F
Authority key identifier: 2F:F1:5E:D0:CC:59:79:A0:10:C0:1B:40:E6:62:E7:F6:00:5E:41:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF15ED0CC5979A010C01B40E662E7F6005E4168.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBSuCmQesbVxaxjn7Arm3fx4aowZu5jpoL5wSWTxf7Nq/0/3138392e3132362e38382e302f32322d3234203d3e20323730353736.roa
Signing time:             Tue 22 Sep 2026 13:16:59 +0000
ROA not before:           Tue 22 Sep 2026 13:11:59 +0000
ROA not after:            Tue 21 Sep 2027 13:16:59 +0000
asID:                     270576
IP address blocks:        189.126.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EBSuCmQesbVxaxjn7Arm3fx4aowZu5jpoL5wSWTxf7Nq/0/2FF15ED0CC5979A010C01B40E662E7F6005E4168.crl
                          rsync://rpki-repo.registro.br/repo/EBSuCmQesbVxaxjn7Arm3fx4aowZu5jpoL5wSWTxf7Nq/0/2FF15ED0CC5979A010C01B40E662E7F6005E4168.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF15ED0CC5979A010C01B40E662E7F6005E4168.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 18:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f4:3f:84:97:98:d6:b1:b1:9f:f3:31:ad:b0:4e:d1:30:5c:35:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF15ED0CC5979A010C01B40E662E7F6005E4168
        Validity
            Not Before: Sep 22 13:11:59 2026 GMT
            Not After : Sep 21 13:16:59 2027 GMT
        Subject: CN=9E261E15DFED9334C551F32F8FB87D9608CCD7FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f4:51:87:00:11:77:a2:88:d1:cd:35:9f:09:
                    fd:28:e1:a6:42:ab:4b:c4:9f:5c:69:f3:bc:fd:fa:
                    3e:e8:02:34:9d:12:71:55:a7:af:4c:a3:80:45:50:
                    e8:6f:c4:a4:16:35:ae:3e:f7:dd:1a:e0:b4:43:a6:
                    05:f1:8a:dd:97:a3:34:4f:98:0d:f1:a9:36:bd:e8:
                    5f:58:db:32:55:96:db:ad:a2:41:2b:d2:ff:a6:75:
                    89:64:83:0c:e6:d7:38:76:7d:be:81:9a:13:0b:a1:
                    93:65:e6:2d:16:59:66:15:70:66:2d:3c:0e:69:0f:
                    d5:59:64:02:fc:72:2a:de:58:68:90:75:fa:83:fe:
                    a8:0f:8e:ff:ab:1b:05:4b:fd:1a:f1:97:97:f4:6e:
                    c0:d7:32:75:47:1c:13:67:7e:e6:b0:79:b4:21:ad:
                    6d:7a:4a:e1:aa:93:19:a0:29:63:13:bd:1e:64:8e:
                    4b:dd:61:92:eb:b2:37:b4:72:5f:e4:32:af:1f:55:
                    9c:28:4b:f3:dc:b3:6f:2e:6c:69:7c:0d:b6:c4:6b:
                    b7:ba:e5:40:8e:99:71:4c:37:b4:e6:01:95:6f:fa:
                    4b:a7:dc:c9:38:46:f0:f2:48:b8:72:db:48:d3:40:
                    71:b3:66:c7:e4:18:e7:ed:16:cf:9a:38:f2:5d:12:
                    eb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:26:1E:15:DF:ED:93:34:C5:51:F3:2F:8F:B8:7D:96:08:CC:D7:FF
            X509v3 Authority Key Identifier:
                keyid:2F:F1:5E:D0:CC:59:79:A0:10:C0:1B:40:E6:62:E7:F6:00:5E:41:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBSuCmQesbVxaxjn7Arm3fx4aowZu5jpoL5wSWTxf7Nq/0/2FF15ED0CC5979A010C01B40E662E7F6005E4168.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF15ED0CC5979A010C01B40E662E7F6005E4168.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBSuCmQesbVxaxjn7Arm3fx4aowZu5jpoL5wSWTxf7Nq/0/3138392e3132362e38382e302f32322d3234203d3e20323730353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:38:12:9c:c7:75:3e:b0:dc:67:04:46:56:dc:ba:25:dc:60:
         43:59:01:36:ff:94:09:3c:55:56:0e:1d:47:62:86:f2:b6:a0:
         e7:26:3a:4a:dc:a0:4a:0f:9d:b7:8f:e1:bb:b6:0d:e4:fc:f3:
         bc:0e:14:c2:b4:dd:11:f0:fc:50:db:f2:70:b7:84:5a:34:52:
         ea:f1:45:05:75:67:5f:ab:70:5b:db:13:ea:87:83:67:14:d2:
         76:57:7b:46:92:11:b2:de:c7:67:65:0d:51:2e:47:5a:99:af:
         35:fa:e6:38:39:70:3a:7f:b1:70:a5:7e:b8:4b:bb:ce:be:c4:
         96:22:b8:6f:e8:89:bf:c7:46:70:18:ee:31:66:29:16:c2:42:
         24:ef:1f:ab:1f:ce:57:7f:88:66:27:4c:f5:16:3c:63:e1:2b:
         cd:d0:23:7e:4b:65:9a:d3:b9:15:bf:33:3b:90:8c:17:10:2b:
         70:53:75:f7:60:37:49:9e:55:df:da:e8:4b:96:e4:66:65:47:
         9a:4d:c2:6a:3c:99:b0:a9:fc:01:78:56:8b:fb:7e:76:a1:59:
         ae:88:13:02:8c:55:f3:bb:e7:69:d6:7d:1f:81:7a:f7:53:86:
         b9:2f:37:7a:89:ce:56:72:17:8e:ba:44:4e:9d:83:cc:c1:39:
         d4:a3:5c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:56:32 2026 by rpki-client