Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e38372e302e302f32312d3234203d3e20323632373733.roa
File:                     3138372e38372e302e302f32312d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          oNzwZi0vTJg7br8hu9jpwInHzeINM6O0U5L3PzrFJDU=
Subject key identifier:   0C:0B:49:A6:A5:B3:F8:02:63:68:D2:11:29:41:78:BE:7F:FF:FE:22
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       70E52BD1FF25537F582C9AEE6FE3D8CBFC82F250
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e38372e302e302f32312d3234203d3e20323632373733.roa
Signing time:             Fri 14 Aug 2026 19:50:09 +0000
ROA not before:           Fri 14 Aug 2026 19:45:09 +0000
ROA not after:            Fri 13 Aug 2027 19:50:09 +0000
asID:                     262773
IP address blocks:        187.87.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 15:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e5:2b:d1:ff:25:53:7f:58:2c:9a:ee:6f:e3:d8:cb:fc:82:f2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Aug 14 19:45:09 2026 GMT
            Not After : Aug 13 19:50:09 2027 GMT
        Subject: CN=0C0B49A6A5B3F8026368D211294178BE7FFFFE22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8b:e2:1c:11:77:a6:58:91:a0:59:84:5c:0e:
                    37:d0:7b:67:09:57:d7:4e:e7:17:15:65:75:ea:5a:
                    c8:14:77:3b:b7:ea:71:08:f0:26:10:55:6f:49:fa:
                    0c:17:44:ea:8a:08:bc:23:7c:0e:ae:99:8f:a4:87:
                    5e:fb:c4:fb:e4:34:7a:71:30:8a:20:bb:c2:92:a5:
                    59:06:2a:15:94:e6:94:fb:e9:e2:ad:c9:4c:ba:7d:
                    7c:d5:e4:e8:2e:89:41:95:94:60:38:f3:be:f0:dd:
                    8c:4f:e8:f4:15:26:4e:57:3f:be:06:f3:0d:65:3d:
                    d0:f2:2a:38:fb:46:1a:2b:a7:4e:65:bb:c5:1f:65:
                    c6:93:b7:a7:40:16:4d:13:29:e1:d2:15:e2:7d:c0:
                    d9:3d:b5:87:24:e8:f6:61:ab:00:72:77:33:47:6b:
                    59:11:84:78:a4:c0:ca:de:86:18:4b:f7:ec:d4:63:
                    dc:03:13:ca:08:8f:af:69:07:bc:66:02:05:54:52:
                    3c:bd:0f:d0:4e:6f:d6:89:b5:46:c2:b8:ae:b2:2e:
                    91:9e:53:15:f7:d2:27:d5:d9:7c:d3:3c:52:5e:76:
                    b5:db:29:d9:8a:83:81:0c:37:6d:8d:00:83:4f:99:
                    22:35:c2:a1:9c:85:4a:a1:9e:91:8c:fd:70:c1:a6:
                    29:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0B:49:A6:A5:B3:F8:02:63:68:D2:11:29:41:78:BE:7F:FF:FE:22
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e38372e302e302f32312d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b5:39:63:dc:cf:a7:6d:82:61:6c:78:68:ab:31:c1:f9:a2:92:
         25:16:0a:09:0d:f1:1e:ad:9b:c5:6e:89:26:63:ef:4b:c3:24:
         7a:ba:1f:03:d5:da:2b:ef:95:1f:dd:e6:de:4d:1f:57:22:1c:
         56:a4:dc:01:55:6b:dd:e5:a6:82:3d:74:46:b2:cb:97:c4:a3:
         05:8a:5b:0b:d4:d8:db:4c:7f:82:67:1b:fd:fc:a0:dd:a4:fd:
         a8:f6:35:eb:78:c4:ce:9b:eb:5a:a4:db:5d:1d:7d:d2:3f:d8:
         3a:b6:63:f5:3f:30:2b:b5:e8:86:65:7a:fd:eb:f5:42:50:2f:
         38:5b:d6:1d:be:13:85:18:5d:5d:ee:45:0d:5b:7f:ec:78:c5:
         c6:97:78:22:82:14:29:50:26:e3:c6:a9:08:c0:5f:c5:5b:bf:
         18:61:9e:e2:3e:74:47:d4:68:67:d5:e1:f8:d1:86:0b:c5:bf:
         47:00:2c:20:92:ec:6c:e5:a5:7c:22:ea:40:b7:96:31:cb:31:
         be:83:f2:89:5f:7c:e2:f7:47:7f:aa:5e:45:d8:34:a7:0c:79:
         dc:a3:ef:7b:92:42:6c:b9:6b:78:ae:50:0f:d8:02:00:98:a1:
         cf:95:ed:15:13:8e:72:dc:ce:f9:e6:7c:53:db:b7:43:28:f4:
         2f:d9:a9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:35:21 2026 by rpki-client