Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3139362e3130322e302f32342d3234203d3e20323733343433.roa
File:                     3138362e3139362e3130322e302f32342d3234203d3e20323733343433.roa (raw, json)
Hash identifier:          Z4JnVW/KpjlvDmI6OKHt3JJ17YWoz/nkB/j9+CKwI8k=
Subject key identifier:   32:11:BC:66:C9:5E:96:DB:0C:72:28:9B:E1:C0:D4:5A:17:79:31:DB
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       339DD1D55975489AFF29D0BDDEEE7A8C25D835E3
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3139362e3130322e302f32342d3234203d3e20323733343433.roa
Signing time:             Wed 16 Sep 2026 19:57:18 +0000
ROA not before:           Wed 16 Sep 2026 19:52:18 +0000
ROA not after:            Wed 15 Sep 2027 19:57:18 +0000
asID:                     273443
IP address blocks:        186.196.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 02:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:9d:d1:d5:59:75:48:9a:ff:29:d0:bd:de:ee:7a:8c:25:d8:35:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: Sep 16 19:52:18 2026 GMT
            Not After : Sep 15 19:57:18 2027 GMT
        Subject: CN=3211BC66C95E96DB0C72289BE1C0D45A177931DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:e7:6c:53:d2:37:5a:68:8c:d9:94:ec:4c:
                    c6:d1:be:2f:9f:86:fd:90:11:85:e8:56:71:de:bd:
                    dc:fb:b6:cc:b8:87:bd:61:5f:0f:b8:12:73:51:11:
                    10:50:6e:fa:b7:09:ff:36:4e:f1:11:93:bc:84:ce:
                    d5:94:0b:25:43:af:d9:02:94:72:96:86:34:06:36:
                    68:0b:92:11:ea:8a:25:36:38:55:c5:b9:9a:d2:19:
                    53:1e:b1:20:1c:58:2b:e4:a4:e9:07:f2:c0:9c:94:
                    42:a7:3b:fa:f3:96:cf:fe:65:8d:e4:8c:8d:27:6f:
                    d6:14:ac:d6:85:a6:81:00:c3:1f:9a:e9:05:ca:6e:
                    5a:60:0f:6d:a5:2a:e1:bd:f3:7a:4f:1d:a1:20:a0:
                    12:5b:4c:9d:e0:e6:dc:47:bf:10:8d:7b:1e:56:d4:
                    c7:27:48:9f:92:7c:ab:00:75:31:c1:bc:76:95:20:
                    d6:9a:60:60:60:12:be:40:22:1f:fc:38:2b:b5:a0:
                    54:3e:7e:df:59:eb:a7:79:4c:15:c9:fc:8b:8a:f8:
                    55:73:9a:81:94:1d:df:12:90:71:6c:90:8f:66:0d:
                    f8:a2:62:d7:6e:dc:1f:90:36:11:66:22:7c:f9:23:
                    57:db:e4:5f:e0:4f:0c:cf:43:4d:b8:f6:ee:82:c9:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:11:BC:66:C9:5E:96:DB:0C:72:28:9B:E1:C0:D4:5A:17:79:31:DB
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3139362e3130322e302f32342d3234203d3e20323733343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:65:b6:81:a9:87:bd:1c:97:36:46:58:43:09:62:e1:6d:fc:
         a7:f5:01:c0:8a:aa:d4:b5:9b:ce:75:77:12:67:5b:70:ed:9b:
         74:88:e6:86:6c:c2:7c:da:fa:bb:3a:96:19:12:7c:ac:96:c3:
         2d:a7:3b:53:d2:4c:03:14:a3:c4:42:60:2b:73:78:a1:e8:00:
         4e:39:f8:d5:9c:8f:a7:2c:e4:93:a1:f8:bc:4d:b7:a0:81:61:
         93:1d:2c:9a:af:e7:22:64:e9:4b:90:7f:4d:ab:9d:f7:bb:da:
         52:ad:f1:c1:9e:2f:06:0d:b6:6f:c4:fc:6e:2d:d9:20:ba:f2:
         4d:f1:61:7c:62:5a:09:b9:eb:41:16:ca:01:90:69:9b:1e:c4:
         92:ac:c1:05:cc:21:52:da:51:cc:9b:f8:4b:9a:a5:2e:95:4b:
         a4:e8:79:62:e8:45:94:15:80:7c:73:4e:e3:11:95:ca:f6:13:
         99:34:34:53:41:b1:14:43:89:a0:8e:4c:77:03:0b:4c:8a:9e:
         a4:c6:2f:84:49:c4:a8:b6:76:88:85:df:9b:cd:0b:ae:6e:33:
         c2:88:4d:7a:48:b0:91:2b:2b:9f:3b:f9:93:f0:a2:2d:4e:72:
         91:0b:f7:f0:70:54:4e:a2:b9:71:54:f7:ad:e7:1e:11:5a:a1:
         d9:5a:26:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:47:13 2026 by rpki-client