Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e38372e31352e302f32342d3234203d3e20323734353638.roa
File:                     3138372e38372e31352e302f32342d3234203d3e20323734353638.roa (raw, json)
Hash identifier:          tWBI9e816WvsRfPdgvd8qsfHKsGTAFiNB4fwEUwTHXw=
Subject key identifier:   E1:0D:D7:BE:70:86:87:27:8A:AE:55:25:82:BB:90:86:69:8E:8F:28
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       483D1FCB7055D23535C7F3A574D3D2C7CFFC378B
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e38372e31352e302f32342d3234203d3e20323734353638.roa
Signing time:             Fri 14 Aug 2026 19:35:59 +0000
ROA not before:           Fri 14 Aug 2026 19:30:59 +0000
ROA not after:            Fri 13 Aug 2027 19:35:59 +0000
asID:                     274568
IP address blocks:        187.87.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 15:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3d:1f:cb:70:55:d2:35:35:c7:f3:a5:74:d3:d2:c7:cf:fc:37:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Aug 14 19:30:59 2026 GMT
            Not After : Aug 13 19:35:59 2027 GMT
        Subject: CN=E10DD7BE708687278AAE552582BB9086698E8F28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:39:83:e7:1f:85:1a:77:0d:55:9a:84:21:7c:
                    92:ee:c3:5c:1b:83:e8:ff:bd:70:05:4f:53:71:f4:
                    fb:36:70:2a:d0:72:84:78:d7:a7:20:fb:11:12:e8:
                    a0:99:6f:b4:4c:18:e5:fc:6b:a7:5c:a2:7f:2e:60:
                    91:b0:57:16:65:b1:27:5b:af:0a:d0:56:8e:07:ef:
                    74:d0:5a:46:f9:d8:dd:7b:aa:f4:4d:17:51:b6:a0:
                    46:de:11:0e:75:a4:e0:fa:44:05:4b:a9:f5:9d:b7:
                    15:44:d6:c6:e8:cb:8c:98:fc:59:cf:87:d5:6f:80:
                    7e:e8:d8:a2:23:53:8d:1d:7e:28:53:09:ae:c1:1f:
                    c1:73:c7:8b:46:3c:92:c0:aa:34:dd:0e:16:89:4c:
                    e3:04:52:aa:f7:07:e3:c5:27:b3:c4:f7:ae:68:d6:
                    be:75:f9:ec:50:41:ce:43:3b:49:69:21:cd:a8:6c:
                    3e:f1:bb:0d:aa:e4:40:98:84:00:fd:5f:d5:c2:c8:
                    50:d3:95:a2:7b:59:ee:79:72:4a:55:70:b8:bb:91:
                    a8:8d:c8:a9:de:17:a8:5c:c5:b6:06:33:db:0d:34:
                    7e:df:f8:dc:f4:bf:35:25:7d:69:18:e9:24:be:d4:
                    af:d1:10:e6:50:d8:30:d5:08:8a:82:6b:bb:33:56:
                    13:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0D:D7:BE:70:86:87:27:8A:AE:55:25:82:BB:90:86:69:8E:8F:28
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e38372e31352e302f32342d3234203d3e20323734353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:0c:a1:f5:b8:c2:cc:42:a7:39:1a:56:39:80:67:95:18:b4:
         37:3b:15:4e:fb:6a:bf:b1:e0:ec:b9:86:ca:84:81:10:62:59:
         5f:15:5d:d3:aa:00:6e:3a:6d:c4:00:dc:51:94:0d:d8:cc:54:
         12:a5:98:3b:f9:29:02:cf:ef:c6:a6:18:04:9b:a3:26:ca:98:
         af:78:c4:c1:cb:bb:e1:17:1a:bf:d5:5a:0f:c1:80:30:87:59:
         4e:9a:67:f0:7b:b9:fe:3b:5a:3f:54:ac:c1:6f:bb:7a:ad:be:
         bf:13:9f:2c:81:f2:16:07:5a:b7:1b:5b:c0:c3:2f:ee:bd:c5:
         82:6e:0d:f2:a0:3c:8e:d2:29:b9:14:71:65:f0:c7:dd:d2:3f:
         cf:4b:a6:61:1f:ff:ca:ea:82:6b:11:6b:af:36:4e:2d:0b:5c:
         be:8e:ec:8c:54:73:86:05:91:06:c7:11:82:da:d0:aa:09:c9:
         1f:14:55:3f:62:e1:84:57:c3:bc:e7:cb:30:c7:fa:64:c2:96:
         9b:6a:0e:cb:a9:87:d3:c9:4c:b8:4f:c6:d4:dc:17:a3:bc:78:
         50:3c:44:71:22:34:12:52:c7:dd:00:31:bf:6c:b2:f8:07:82:
         25:32:61:3e:50:59:8a:e6:1e:c9:41:3b:67:68:c8:48:0a:b3:
         69:0e:cf:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:36:02 2026 by rpki-client