Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31332e302f32342d3234203d3e20323730353737.roa
File:                     3138372e39342e31332e302f32342d3234203d3e20323730353737.roa (raw, json)
Hash identifier:          SAzzr9+ejHqkM4nyx7EXlfmVQnmvipgVooUb4stCQt4=
Subject key identifier:   D2:87:BA:D4:9F:8D:4B:2C:BE:19:F0:1D:4E:4E:44:F1:E8:B9:CD:35
Certificate issuer:       /CN=24C0BF59215339684BA80028158EEDE0FD534D91
Certificate serial:       5D0E1D8CE5AD359762FA13FAEF8AAB83713EABA0
Authority key identifier: 24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31332e302f32342d3234203d3e20323730353737.roa
Signing time:             Fri 02 Jan 2026 19:10:54 +0000
ROA not before:           Fri 02 Jan 2026 19:05:54 +0000
ROA not after:            Fri 01 Jan 2027 19:10:54 +0000
asID:                     270577
IP address blocks:        187.94.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl
                          rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0e:1d:8c:e5:ad:35:97:62:fa:13:fa:ef:8a:ab:83:71:3e:ab:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C0BF59215339684BA80028158EEDE0FD534D91
        Validity
            Not Before: Jan  2 19:05:54 2026 GMT
            Not After : Jan  1 19:10:54 2027 GMT
        Subject: CN=D287BAD49F8D4B2CBE19F01D4E4E44F1E8B9CD35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e9:71:92:60:4d:e6:9c:54:f4:11:3d:d2:d3:
                    86:7f:75:12:7b:2d:34:00:d8:e5:88:c7:38:b6:c7:
                    fb:11:c3:dd:ac:81:05:75:0a:40:2b:49:26:0f:07:
                    9b:7b:fd:0d:bd:da:70:fc:f5:41:ad:ee:aa:17:38:
                    55:35:88:64:5a:d5:73:95:2c:21:d1:f5:cf:d8:6f:
                    e9:f7:52:33:01:41:63:a8:58:20:16:02:73:88:5b:
                    23:2c:e8:c2:8f:e9:2d:97:b5:6e:61:e9:d3:fc:ac:
                    54:78:3e:4d:44:dc:16:3a:8e:af:78:09:12:2e:9b:
                    34:d6:f8:5b:65:57:11:7b:83:65:47:52:27:6e:d7:
                    1c:b3:92:a3:5a:e5:c9:09:c8:40:0d:3b:a0:91:32:
                    28:5f:49:7a:c9:24:f8:0a:20:a3:66:c0:ef:63:f6:
                    b1:77:38:5e:eb:97:84:79:af:35:4a:b5:37:e1:71:
                    67:f7:d4:0b:84:92:13:2b:f7:0f:9b:32:22:89:e1:
                    59:f3:4f:ae:49:2a:28:22:fa:b4:79:a3:aa:20:52:
                    6f:b1:bd:b9:e7:84:1b:a5:4e:4d:d2:79:28:d9:89:
                    59:0d:75:2e:cc:e6:af:53:e5:60:1c:c5:50:be:3e:
                    c2:07:27:92:be:a0:22:eb:b3:da:01:02:86:bb:4c:
                    b1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:87:BA:D4:9F:8D:4B:2C:BE:19:F0:1D:4E:4E:44:F1:E8:B9:CD:35
            X509v3 Authority Key Identifier:
                keyid:24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31332e302f32342d3234203d3e20323730353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:fd:62:97:ba:d9:59:89:4d:03:e6:0a:05:5e:42:c8:5e:d7:
         e7:35:86:07:c3:0a:f0:4d:a2:52:e8:7b:eb:12:80:51:8e:bd:
         52:3e:fb:2d:d1:cc:81:8c:31:0c:7d:c3:0a:c7:13:ae:6e:88:
         ef:09:24:f0:c1:3e:bb:d4:b5:e7:59:37:ac:04:79:ef:47:e4:
         6b:db:7a:90:98:f1:6f:e2:f9:4e:0e:af:85:5e:80:2b:ed:e1:
         f2:21:19:76:c0:b3:80:a1:5f:12:bf:6a:85:9a:96:37:ef:b8:
         19:af:ef:88:61:14:25:e6:b1:03:e0:2b:cf:fc:7e:e3:7f:ed:
         33:52:98:f0:16:f7:da:5c:11:f9:cf:c9:10:61:56:18:fa:62:
         24:d9:6d:bc:89:37:8e:6e:7b:14:29:c8:b4:18:d6:b4:54:56:
         68:88:cf:4b:2a:e0:47:90:0e:3b:d7:8b:42:1c:89:40:75:ff:
         bf:84:7d:f1:1e:f2:c8:18:4c:7a:74:f2:c9:6b:f3:a4:2e:43:
         a2:2f:0b:38:cc:27:a2:b7:52:f4:da:10:9a:eb:ac:e7:56:ec:
         22:09:62:78:b8:dc:37:45:4c:36:2f:5a:b6:0d:0f:8c:a0:a8:
         ae:5a:9c:21:66:47:55:03:d9:17:80:d4:d3:57:7f:df:01:03:
         ac:89:83:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:51:46 2026 by rpki-client