Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/JA7cgQChA8JX7YHNYJVdXtX6J56MCKp7V7xRbE1onWn1/0/3139302e3130322e34382e302f32322d3234203d3e203238323637.roa
File:                     3139302e3130322e34382e302f32322d3234203d3e203238323637.roa (raw, json)
Hash identifier:          lGLcmypoxDFksu1dwvuv9jTNyufpaK95nYlUA0QjZNM=
Subject key identifier:   1F:4F:30:1E:A9:31:5B:7C:3A:D9:5E:FC:FB:8F:7C:D6:2D:44:13:BB
Certificate issuer:       /CN=75A050977E2E45A61254ED5A5F2421BEF17F0BA7
Certificate serial:       7D09ACEC936D646C754D91C035F65BD3FDB46675
Authority key identifier: 75:A0:50:97:7E:2E:45:A6:12:54:ED:5A:5F:24:21:BE:F1:7F:0B:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A050977E2E45A61254ED5A5F2421BEF17F0BA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA7cgQChA8JX7YHNYJVdXtX6J56MCKp7V7xRbE1onWn1/0/3139302e3130322e34382e302f32322d3234203d3e203238323637.roa
Signing time:             Tue 18 Aug 2026 03:25:28 +0000
ROA not before:           Tue 18 Aug 2026 03:20:28 +0000
ROA not after:            Tue 17 Aug 2027 03:25:28 +0000
asID:                     28267
IP address blocks:        190.102.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA7cgQChA8JX7YHNYJVdXtX6J56MCKp7V7xRbE1onWn1/0/75A050977E2E45A61254ED5A5F2421BEF17F0BA7.crl
                          rsync://rpki-repo.registro.br/repo/JA7cgQChA8JX7YHNYJVdXtX6J56MCKp7V7xRbE1onWn1/0/75A050977E2E45A61254ED5A5F2421BEF17F0BA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A050977E2E45A61254ED5A5F2421BEF17F0BA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:09:ac:ec:93:6d:64:6c:75:4d:91:c0:35:f6:5b:d3:fd:b4:66:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75A050977E2E45A61254ED5A5F2421BEF17F0BA7
        Validity
            Not Before: Aug 18 03:20:28 2026 GMT
            Not After : Aug 17 03:25:28 2027 GMT
        Subject: CN=1F4F301EA9315B7C3AD95EFCFB8F7CD62D4413BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:1d:94:d6:75:0d:a9:f9:32:8e:d8:d4:fd:
                    31:44:64:87:84:8c:bf:a0:07:4a:e9:82:4c:97:92:
                    1a:7c:10:df:cd:a7:86:93:ec:55:e8:cd:32:10:cd:
                    3e:f6:6e:3e:27:38:76:ee:ae:9b:80:b8:c9:56:a0:
                    b1:a0:73:1d:75:ff:65:ff:c8:a3:c3:f1:03:43:ee:
                    e9:b3:61:dc:5b:98:64:00:5b:b5:7e:d8:71:b0:d4:
                    54:a0:87:5f:6c:93:90:13:00:96:77:0d:33:9e:05:
                    0c:c9:ec:44:e7:57:3f:ee:66:8f:45:43:26:08:5d:
                    0a:b6:56:ae:ad:c0:23:f7:61:43:aa:21:73:43:ca:
                    41:82:0c:b2:43:7a:0d:cd:7c:1c:28:80:7b:04:13:
                    c4:5f:75:d0:14:da:0c:56:bb:41:8a:7d:28:29:47:
                    19:8b:de:3c:f8:71:8c:40:55:7a:21:e9:52:01:31:
                    58:86:bf:c2:2e:9f:2d:b2:0e:fc:88:63:b9:b0:48:
                    f5:9c:27:9e:0c:93:1b:46:ae:67:1f:19:f2:b5:b0:
                    6f:cf:d7:81:d7:b9:9c:ad:7e:4a:c1:f1:b1:1f:62:
                    34:cc:a5:09:d9:48:20:d9:71:e9:a7:3a:b8:09:35:
                    0d:6f:cb:f3:e1:83:e5:46:2e:65:f7:74:2b:8e:65:
                    8d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4F:30:1E:A9:31:5B:7C:3A:D9:5E:FC:FB:8F:7C:D6:2D:44:13:BB
            X509v3 Authority Key Identifier:
                keyid:75:A0:50:97:7E:2E:45:A6:12:54:ED:5A:5F:24:21:BE:F1:7F:0B:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA7cgQChA8JX7YHNYJVdXtX6J56MCKp7V7xRbE1onWn1/0/75A050977E2E45A61254ED5A5F2421BEF17F0BA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A050977E2E45A61254ED5A5F2421BEF17F0BA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA7cgQChA8JX7YHNYJVdXtX6J56MCKp7V7xRbE1onWn1/0/3139302e3130322e34382e302f32322d3234203d3e203238323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:3f:c5:42:58:ec:be:dc:d5:65:9a:25:5d:22:77:24:36:3c:
         1f:b9:bd:00:77:c5:1f:b0:bc:fa:78:b2:f1:2c:25:95:17:7e:
         c1:22:ff:8e:14:f4:da:a6:26:35:3f:67:fc:f5:14:57:f7:40:
         63:53:ab:58:51:ed:78:ee:d3:35:d8:62:4f:2a:c5:8c:fb:44:
         a1:f2:10:ae:81:d3:84:98:fd:49:ba:e9:32:85:bf:64:07:00:
         2d:56:81:dc:50:d9:14:40:a5:72:63:19:1f:3b:21:a2:da:86:
         e5:5c:94:f9:e4:de:9c:d6:11:72:e6:b8:d8:fb:c4:11:07:8a:
         86:d0:a2:de:fe:96:34:6d:a8:67:37:11:a3:e4:b5:62:38:6c:
         f0:cb:e3:f3:bd:88:c5:e7:bc:7c:a8:14:fc:fa:63:07:ce:49:
         89:a7:11:19:43:8e:d5:d7:48:3f:47:35:e5:c0:a5:f2:5e:f4:
         76:b2:50:e7:96:5d:c7:23:17:ea:e0:13:16:7c:54:ed:86:80:
         ce:b8:41:b8:5f:3a:0e:3e:28:ad:0a:d1:77:9d:4e:7a:ab:1f:
         eb:65:c5:b1:e2:28:65:3e:fe:64:a0:7a:cb:07:79:24:54:1f:
         8e:30:64:ee:54:78:20:9b:d2:e0:f9:7e:46:8e:6e:52:6e:09:
         c8:6e:73:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:21:19 2026 by rpki-client