Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31322e302f32342d3234203d3e20323730353737.roa
File:                     3138372e39342e31322e302f32342d3234203d3e20323730353737.roa (raw, json)
Hash identifier:          6us2oOVEzPiUpRDcGpf0U8IwO15npQEszTfX51xUV7c=
Subject key identifier:   63:93:18:F7:FC:7C:56:EE:68:C2:E6:63:FE:A9:D4:41:A3:F0:4F:75
Certificate issuer:       /CN=24C0BF59215339684BA80028158EEDE0FD534D91
Certificate serial:       79BD30F280FE1E49E4950D1367C2AA1DEA5F22AF
Authority key identifier: 24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31322e302f32342d3234203d3e20323730353737.roa
Signing time:             Fri 02 Jan 2026 19:10:53 +0000
ROA not before:           Fri 02 Jan 2026 19:05:53 +0000
ROA not after:            Fri 01 Jan 2027 19:10:53 +0000
asID:                     270577
IP address blocks:        187.94.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl
                          rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bd:30:f2:80:fe:1e:49:e4:95:0d:13:67:c2:aa:1d:ea:5f:22:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C0BF59215339684BA80028158EEDE0FD534D91
        Validity
            Not Before: Jan  2 19:05:53 2026 GMT
            Not After : Jan  1 19:10:53 2027 GMT
        Subject: CN=639318F7FC7C56EE68C2E663FEA9D441A3F04F75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f2:5e:7d:20:5c:8a:d0:15:ab:8e:64:ce:13:
                    ac:93:d7:fd:b3:fe:03:de:79:03:86:e8:56:29:cb:
                    32:1d:74:16:dc:1a:ec:10:fa:39:4c:4f:10:60:95:
                    7d:54:f9:bb:50:0d:e6:62:9d:04:a5:89:8b:92:e0:
                    05:27:a4:2a:f2:d7:00:43:97:32:dd:08:bb:35:e3:
                    54:b2:e7:5e:09:8b:d3:8f:c4:ff:87:ef:ec:ad:ea:
                    b3:9a:8a:bc:fb:2c:c5:f9:82:c6:af:1c:98:61:5b:
                    a4:88:28:37:e0:29:e3:ca:a6:2d:ce:d3:7e:81:f6:
                    61:04:83:e0:0c:21:a2:ac:b2:cd:97:54:c0:89:ff:
                    73:f8:2f:e7:0e:58:47:61:5d:8d:ca:8e:9a:4a:92:
                    0f:50:9c:a6:1b:4e:2f:c4:ba:f7:41:35:e7:95:b0:
                    35:8c:c0:c7:6b:d8:ad:d7:86:1c:5a:1c:6d:43:f1:
                    ed:a4:28:89:a1:17:2d:56:3b:f3:35:84:36:a3:99:
                    6b:62:ab:5c:17:53:f0:e3:4c:c5:63:f1:5f:37:42:
                    5d:af:87:cb:a7:35:cb:d6:77:7a:0b:89:4e:04:d9:
                    74:bc:ce:20:1c:72:dd:e3:80:25:92:7a:7d:44:5a:
                    d5:41:59:0e:24:43:c3:8d:65:d9:00:f9:79:52:13:
                    89:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:93:18:F7:FC:7C:56:EE:68:C2:E6:63:FE:A9:D4:41:A3:F0:4F:75
            X509v3 Authority Key Identifier:
                keyid:24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31322e302f32342d3234203d3e20323730353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:dc:12:18:74:da:45:97:7a:3e:5c:5c:35:e0:e3:12:e4:5a:
         ee:fc:69:44:7c:09:f6:f4:1d:b9:6a:01:92:67:2e:7e:26:46:
         66:d4:b6:64:36:98:a7:9f:e9:e5:a2:bc:b0:58:c7:00:aa:d2:
         95:42:d7:a7:a6:2e:e4:da:eb:59:fb:46:21:2c:b0:a7:ee:22:
         77:74:dd:c7:f7:aa:58:c1:7e:ef:31:e9:49:67:04:7a:6a:90:
         f3:c2:89:c2:c7:99:3f:88:14:c7:3b:85:8b:0d:46:21:d8:9f:
         ec:92:61:18:96:8b:7f:31:ca:cb:5a:1d:2b:4d:14:e7:08:8d:
         05:68:dc:46:66:ea:26:1b:16:50:a3:c4:84:d8:ec:b7:f1:80:
         e4:35:f5:33:95:16:4f:f7:ee:75:dd:f7:32:3b:c4:28:bd:a9:
         c4:aa:93:26:13:10:30:63:47:88:85:90:bf:dc:2e:ee:6d:40:
         2f:18:9e:a4:9e:65:d0:19:81:0e:0c:94:bd:53:5f:9a:1d:be:
         b2:13:23:72:4c:62:5f:ef:bf:86:67:99:74:1a:3d:5a:44:ed:
         b7:fa:06:c3:ab:9d:e9:09:a8:91:e9:e0:9f:f1:ce:8f:8a:6c:
         5c:ea:07:73:16:6d:2a:d9:f6:7a:e9:71:d3:10:7a:26:5c:49:
         59:a7:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:52:15 2026 by rpki-client