Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e31342e302f32342d3234203d3e203533303535.roa
File:                     3138362e3139362e31342e302f32342d3234203d3e203533303535.roa (raw, json)
Hash identifier:          bdturtfYUNCxZrgjSKjNqHKliT9z5lunA5Tl6j3c8Go=
Subject key identifier:   BE:54:A2:36:E3:E9:AD:90:6E:DF:39:A1:25:11:5F:76:6A:D4:FF:D9
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       19DB38E52365062E0E5754FC0B24B97D3C4381EC
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e31342e302f32342d3234203d3e203533303535.roa
Signing time:             Thu 13 Aug 2026 18:56:33 +0000
ROA not before:           Thu 13 Aug 2026 18:51:33 +0000
ROA not after:            Thu 12 Aug 2027 18:56:33 +0000
asID:                     53055
IP address blocks:        186.196.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl
                          rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 23:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:db:38:e5:23:65:06:2e:0e:57:54:fc:0b:24:b9:7d:3c:43:81:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: Aug 13 18:51:33 2026 GMT
            Not After : Aug 12 18:56:33 2027 GMT
        Subject: CN=BE54A236E3E9AD906EDF39A125115F766AD4FFD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1a:ff:fd:fc:a5:a6:e7:91:a9:5e:84:98:44:
                    b5:1d:0d:cb:28:69:44:1c:c5:ba:65:0c:32:66:9d:
                    2f:0d:79:6b:c9:e3:b5:21:7a:9a:03:65:ae:df:ba:
                    8e:bb:d2:3c:8e:44:6f:5d:7d:5c:00:2d:cc:94:0b:
                    53:df:30:f7:cb:d4:54:ad:fb:2b:4d:f3:c1:a6:1c:
                    ae:d5:28:22:9f:ac:58:93:0e:2b:c5:68:ed:8a:84:
                    1e:35:3e:1f:59:ae:42:7b:92:d8:a7:1b:48:64:62:
                    5a:1d:09:4f:3d:4b:ed:58:54:8e:be:4e:a5:2d:6b:
                    6b:9d:1d:fa:d7:d9:83:9f:7c:45:0a:e4:32:d2:2e:
                    6e:a2:a1:16:62:f6:75:86:bb:14:b9:4f:a8:1c:70:
                    3a:9a:6e:b8:00:b4:25:17:36:1f:19:82:80:40:99:
                    88:0e:c1:78:6d:40:20:b8:0d:da:5b:10:83:27:90:
                    cf:5a:f4:b5:d2:92:32:f2:d7:45:3d:ef:ee:93:8e:
                    ca:9b:d8:7e:9f:c3:c6:cd:08:24:0f:86:f9:7f:50:
                    dc:85:d8:ab:6b:87:dd:4a:57:71:16:5c:50:06:8e:
                    fa:44:2c:e9:d6:38:9c:01:0d:41:8b:23:e3:3e:ea:
                    9b:62:d7:91:e8:33:46:70:3b:6a:16:53:a9:c0:8a:
                    35:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:54:A2:36:E3:E9:AD:90:6E:DF:39:A1:25:11:5F:76:6A:D4:FF:D9
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e31342e302f32342d3234203d3e203533303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:9b:f3:4e:e1:81:3f:7f:a5:3c:e8:58:dc:b0:f7:ae:7b:b9:
         1e:c8:38:3c:6c:a3:66:0a:ea:bf:45:c1:75:17:00:40:e8:6b:
         06:b7:cb:78:1c:b8:11:2a:a8:91:b7:38:1f:e0:19:a1:83:3d:
         82:9b:b4:94:5d:46:e1:55:84:4f:49:6f:c3:9b:2f:43:61:2e:
         41:66:57:e4:65:ec:fa:0e:53:76:b2:79:7c:2a:16:2e:c7:74:
         35:91:3c:1e:28:37:ab:c0:d7:16:2e:cd:22:95:09:b2:35:57:
         0b:cf:17:2e:b1:e9:56:17:e4:ca:96:71:b5:76:c5:bc:19:0d:
         2a:39:80:7b:3c:61:ec:b5:f6:c4:5e:5b:07:89:84:35:21:4b:
         ad:8f:f4:77:89:ec:a5:2d:bb:38:48:32:f0:a1:e0:53:74:85:
         c4:da:79:09:00:b3:2e:e6:19:ef:cf:c8:a3:0b:ba:0a:da:7a:
         6b:24:32:36:77:41:2c:61:62:a0:8f:45:08:45:56:1a:6c:07:
         87:85:3c:40:c2:e9:92:8d:d2:88:fb:29:f1:a5:cc:e5:96:77:
         1f:f7:29:99:48:43:33:74:62:14:aa:a5:35:69:81:57:46:f9:
         29:06:8d:1f:5d:1b:9e:aa:d8:f0:26:69:5f:b5:6b:d4:42:2e:
         f6:5c:41:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:27:26 2026 by rpki-client