Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39342e302f32332d3233203d3e20323632343434.roa
File:                     3138372e36332e39342e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          ut1FwY4jKzZb//RP08hOO3y9e1ghiknHJf1MoBsyMiM=
Subject key identifier:   19:56:ED:C5:E8:9E:F4:C3:AC:2C:29:52:F1:35:64:C8:3F:6C:B5:1A
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       22EB13B09129E3BE8E6DFD3CF022A75646DDBA77
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39342e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 10 Jun 2026 14:27:18 +0000
ROA not before:           Wed 10 Jun 2026 14:22:18 +0000
ROA not after:            Wed 09 Jun 2027 14:27:18 +0000
asID:                     262444
IP address blocks:        187.63.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:eb:13:b0:91:29:e3:be:8e:6d:fd:3c:f0:22:a7:56:46:dd:ba:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jun 10 14:22:18 2026 GMT
            Not After : Jun  9 14:27:18 2027 GMT
        Subject: CN=1956EDC5E89EF4C3AC2C2952F13564C83F6CB51A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:77:60:0b:e1:4d:94:2e:0d:f2:1c:01:0d:
                    d4:57:7a:e5:d8:f5:23:7d:26:c8:5c:61:7b:d6:93:
                    00:db:ab:2b:64:ae:99:5d:d8:6e:2a:9c:d3:25:04:
                    85:c7:c0:88:b3:2d:61:53:4e:2a:3e:0a:08:e8:be:
                    b6:22:8c:af:76:8c:c2:04:f1:55:ad:84:6c:55:d3:
                    35:50:5f:c9:02:09:67:9e:6e:2c:0f:da:f2:73:46:
                    d0:35:70:b9:fe:ee:d7:3b:ee:ac:3c:24:13:01:dc:
                    be:d4:45:ff:9d:02:5f:95:40:d6:0b:33:30:4f:89:
                    c3:21:b2:19:2d:f6:44:6e:c5:4f:61:63:da:63:f4:
                    41:e4:33:58:e2:f1:6d:83:c0:c6:ec:8c:f4:0b:6e:
                    80:6c:c7:00:74:e1:5d:33:dc:d9:c4:2e:e8:36:a2:
                    ef:1d:db:a7:20:5e:0a:f2:ea:79:88:b2:1b:1f:6e:
                    90:76:21:b1:0e:59:80:fe:81:4e:13:51:b3:eb:8d:
                    6c:fb:63:0a:e7:33:ae:88:7e:66:dd:3d:f9:cc:1b:
                    7c:22:87:8d:fe:67:22:a1:a0:41:9a:f3:08:65:ae:
                    fa:df:8c:23:36:77:c9:57:f2:d6:6c:ff:2b:5e:b8:
                    c1:fc:b7:b0:39:76:95:4f:57:a3:d0:de:a0:73:c6:
                    bd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:56:ED:C5:E8:9E:F4:C3:AC:2C:29:52:F1:35:64:C8:3F:6C:B5:1A
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39342e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:2c:76:f2:65:44:bb:c1:a6:10:7e:48:40:4a:2a:e8:8d:b2:
         f4:2a:5a:f0:6b:4d:b3:57:8e:56:ba:28:24:73:1f:23:9e:8d:
         9c:8a:df:11:71:1d:00:d4:42:7b:a7:6e:0f:65:3d:ac:1f:f8:
         74:05:0f:40:ea:c1:8d:01:9c:18:e1:f6:7e:ec:b8:ad:50:18:
         34:47:a4:bd:44:3a:5e:4b:11:bd:ed:07:fc:4b:ce:8a:19:15:
         68:37:d8:d9:ae:ac:75:b7:ac:0d:de:ca:94:41:95:82:a5:f5:
         fc:08:a6:a3:cd:45:c6:1d:77:82:0a:05:7a:69:0f:24:74:ec:
         35:a1:31:19:84:31:cf:3e:4a:8b:75:75:9d:7c:45:32:15:e6:
         5a:c5:20:cd:79:38:55:9f:20:06:d2:a4:ef:7a:5d:ed:7d:74:
         d3:2a:4a:07:3f:ce:79:cd:0d:fb:71:ac:45:17:a6:cf:dd:1e:
         bf:b5:6c:2f:97:6d:bc:35:81:3f:db:69:a8:d7:c7:39:0d:81:
         5a:2b:2d:2e:53:75:63:1a:8c:f9:95:88:0f:81:5e:b3:62:ea:
         fb:6f:ee:c5:6d:08:ee:8d:d7:7e:ef:1c:e1:80:6f:ae:9d:3d:
         53:c2:48:c7:e6:58:8f:b7:89:a4:78:da:76:1f:69:0a:9d:81:
         12:ec:b9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:42:13 2026 by rpki-client