Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31352e302f32342d3234203d3e20323730353737.roa
File:                     3138372e39342e31352e302f32342d3234203d3e20323730353737.roa (raw, json)
Hash identifier:          t51EM43vjI9AH++j7Rs/ygfSZoRT5WJ3Iv34Kh+KzsI=
Subject key identifier:   03:9C:C4:78:30:43:BD:81:7E:D5:A7:0E:1F:59:91:25:FD:5F:B0:92
Certificate issuer:       /CN=24C0BF59215339684BA80028158EEDE0FD534D91
Certificate serial:       289C3A79633E79B73D82E42143E115FE6C43C3EE
Authority key identifier: 24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31352e302f32342d3234203d3e20323730353737.roa
Signing time:             Fri 02 Jan 2026 19:10:54 +0000
ROA not before:           Fri 02 Jan 2026 19:05:54 +0000
ROA not after:            Fri 01 Jan 2027 19:10:54 +0000
asID:                     270577
IP address blocks:        187.94.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl
                          rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9c:3a:79:63:3e:79:b7:3d:82:e4:21:43:e1:15:fe:6c:43:c3:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C0BF59215339684BA80028158EEDE0FD534D91
        Validity
            Not Before: Jan  2 19:05:54 2026 GMT
            Not After : Jan  1 19:10:54 2027 GMT
        Subject: CN=039CC4783043BD817ED5A70E1F599125FD5FB092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5a:fb:37:c6:e1:43:57:ca:51:63:d4:e4:83:
                    db:fd:15:a6:dc:17:de:73:e7:31:56:06:0e:7e:d2:
                    4d:38:0d:60:5f:7a:e5:ab:c5:c8:75:9c:4e:82:6b:
                    49:d0:94:50:f5:53:12:14:26:64:60:1d:e3:59:bd:
                    ae:63:14:ae:6e:70:3b:54:29:31:6a:d8:31:91:db:
                    fd:98:a3:08:b3:90:37:55:62:c4:ec:bf:98:75:7e:
                    17:3b:52:18:4e:e2:cc:ea:31:f8:2f:5e:82:e3:da:
                    13:59:ae:3d:f8:65:56:1f:b5:21:e3:15:ad:ea:75:
                    55:57:b9:f4:6a:80:9b:1f:d1:4b:83:9c:69:0c:25:
                    db:bc:dc:08:cd:58:7e:07:67:a8:e5:07:18:ab:5a:
                    e6:12:61:56:e2:c5:c7:fd:6a:ee:71:98:5d:da:e8:
                    58:d9:d1:5a:17:d7:bc:d4:0e:88:a4:8d:b9:d1:13:
                    ae:41:6e:5e:a1:2e:21:3b:2a:f4:69:0d:bb:74:b7:
                    a8:32:e8:c8:e6:6b:36:53:f3:84:70:95:07:a0:1c:
                    c6:18:40:4d:39:95:2c:60:e6:fa:dc:6f:84:67:b5:
                    72:2f:5e:d6:44:ce:d1:45:71:7a:32:ea:31:08:a0:
                    73:83:f5:b5:f4:71:19:23:7c:42:fa:f1:c7:64:ea:
                    d2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9C:C4:78:30:43:BD:81:7E:D5:A7:0E:1F:59:91:25:FD:5F:B0:92
            X509v3 Authority Key Identifier:
                keyid:24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31352e302f32342d3234203d3e20323730353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:7c:bf:f0:4d:83:b2:43:53:cd:bd:5a:4e:5c:5e:70:74:a2:
         91:7f:11:51:77:c9:0e:12:b9:b3:64:b7:93:3f:95:22:d6:a8:
         e4:79:f2:18:af:69:a3:2a:82:e1:30:5d:aa:35:91:40:3a:cb:
         91:6f:88:e5:b0:09:dd:29:a7:49:61:cf:37:f5:af:90:83:6a:
         8c:5a:18:77:ec:77:6d:4e:9e:17:b0:94:1b:90:ad:21:ea:e0:
         dd:b5:4d:b1:31:60:3f:4d:ef:34:c6:87:e7:81:aa:d6:34:2b:
         de:ac:30:ac:8d:5f:92:1e:2c:3d:e8:b7:e0:b3:96:d9:59:66:
         85:eb:d7:7a:44:4b:d6:f7:7f:d5:f8:70:3f:fa:dd:74:4c:8f:
         5e:25:6b:ee:ab:86:17:ef:51:d3:e7:dd:d0:c2:7d:b4:3c:d8:
         e7:37:02:92:f6:30:a8:2d:06:ff:b6:65:c3:97:d0:65:40:17:
         2d:fa:a0:86:a8:6b:5b:3e:a2:d5:78:f6:1e:d1:a9:63:3e:4c:
         f3:9d:aa:7d:45:5e:0f:2a:2a:f8:b3:8c:3f:41:94:f2:39:47:
         1e:82:6f:35:64:53:18:f3:4d:e1:f5:6a:58:6a:52:30:d8:52:
         17:bb:18:24:44:76:1a:d4:8d:3e:21:96:6b:43:f4:10:ea:ff:
         b9:a2:ee:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:52:18 2026 by rpki-client