Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3Rua5U3jexviPhqHmB2uhEJaaXnXKqspHJCW39YHnu5f/0/3138312e3138392e37322e302f32322d3332203d3e20323731343030.roa
File:                     3138312e3138392e37322e302f32322d3332203d3e20323731343030.roa (raw, json)
Hash identifier:          GHw/MExm/lIsV90LE9aAfcJ1R2zuBtOihMCHF2e3GLk=
Subject key identifier:   FE:69:B2:AE:EB:34:1F:6D:0F:DD:64:77:54:99:6C:FC:E0:BE:CA:C2
Certificate issuer:       /CN=48D306B31CCB0325E1CD633FFD5833050A218F76
Certificate serial:       4BBDDE36426BE5024E5A1E7722C3B52CD42C6ADE
Authority key identifier: 48:D3:06:B3:1C:CB:03:25:E1:CD:63:3F:FD:58:33:05:0A:21:8F:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D306B31CCB0325E1CD633FFD5833050A218F76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rua5U3jexviPhqHmB2uhEJaaXnXKqspHJCW39YHnu5f/0/3138312e3138392e37322e302f32322d3332203d3e20323731343030.roa
Signing time:             Thu 27 Aug 2026 22:17:06 +0000
ROA not before:           Thu 27 Aug 2026 22:12:06 +0000
ROA not after:            Thu 26 Aug 2027 22:17:06 +0000
asID:                     271400
IP address blocks:        181.189.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rua5U3jexviPhqHmB2uhEJaaXnXKqspHJCW39YHnu5f/0/48D306B31CCB0325E1CD633FFD5833050A218F76.crl
                          rsync://rpki-repo.registro.br/repo/3Rua5U3jexviPhqHmB2uhEJaaXnXKqspHJCW39YHnu5f/0/48D306B31CCB0325E1CD633FFD5833050A218F76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D306B31CCB0325E1CD633FFD5833050A218F76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 11:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:bd:de:36:42:6b:e5:02:4e:5a:1e:77:22:c3:b5:2c:d4:2c:6a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48D306B31CCB0325E1CD633FFD5833050A218F76
        Validity
            Not Before: Aug 27 22:12:06 2026 GMT
            Not After : Aug 26 22:17:06 2027 GMT
        Subject: CN=FE69B2AEEB341F6D0FDD647754996CFCE0BECAC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9d:8c:2c:1a:d2:b1:63:cb:b7:a6:44:fa:73:
                    5c:fa:cb:e8:19:5f:78:2a:5a:e5:28:53:ba:8f:66:
                    72:52:08:7c:88:18:81:80:ab:6b:26:c7:47:40:4e:
                    f3:9e:88:62:8c:e3:c5:1e:f1:bc:87:f7:ae:1d:6b:
                    a0:b4:6f:e8:84:86:0a:59:28:f6:79:74:66:ab:d6:
                    94:2a:ef:52:81:3a:03:dd:a7:1d:99:e0:18:31:a0:
                    44:cb:2c:4f:eb:83:6e:4a:b4:53:24:fd:45:b0:3f:
                    b5:2f:3c:56:f3:e8:6d:e9:5e:77:5d:d8:e0:97:dc:
                    a4:0e:d9:f1:af:da:8d:a0:62:87:fc:09:60:a5:86:
                    ab:64:47:2b:5d:f9:96:3b:1f:95:3c:5e:23:c8:ea:
                    ff:82:f8:d5:18:b4:f6:d4:57:37:a5:c4:04:92:1a:
                    6f:df:95:da:b6:5e:62:fa:2a:d9:bd:5f:c6:33:d6:
                    08:fe:b7:93:8f:1c:05:1f:78:48:44:02:4b:53:2f:
                    66:1c:7a:fe:27:08:87:0e:1c:01:70:07:4e:48:b3:
                    a7:da:a7:59:b3:1b:b9:c7:9d:2e:f0:a5:cc:b3:f2:
                    f4:6c:e8:15:09:5d:8f:51:52:57:34:88:5d:52:30:
                    ab:86:19:24:86:66:c3:7d:8b:2e:92:c6:c8:b7:f7:
                    d7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:69:B2:AE:EB:34:1F:6D:0F:DD:64:77:54:99:6C:FC:E0:BE:CA:C2
            X509v3 Authority Key Identifier:
                keyid:48:D3:06:B3:1C:CB:03:25:E1:CD:63:3F:FD:58:33:05:0A:21:8F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rua5U3jexviPhqHmB2uhEJaaXnXKqspHJCW39YHnu5f/0/48D306B31CCB0325E1CD633FFD5833050A218F76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D306B31CCB0325E1CD633FFD5833050A218F76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rua5U3jexviPhqHmB2uhEJaaXnXKqspHJCW39YHnu5f/0/3138312e3138392e37322e302f32322d3332203d3e20323731343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:ed:27:60:c0:8b:0f:e5:d7:03:4c:64:50:cc:b8:02:d3:53:
         7b:68:c1:29:47:ab:1a:dd:43:25:30:3f:b3:01:eb:78:49:d6:
         30:c7:31:a2:ec:11:1b:47:24:40:68:64:65:a9:47:13:c4:64:
         64:53:cd:07:ab:c2:c4:f1:1d:47:b5:61:4b:f1:69:6d:d4:4c:
         3f:b8:a2:6e:46:96:cb:5d:8c:c4:d8:cf:9d:03:c8:b4:66:42:
         62:99:ff:88:53:f3:2e:45:f9:b5:cb:b4:44:25:a0:2b:87:da:
         e5:f8:ff:74:07:6f:d5:4c:e9:6f:56:5d:a0:e1:b1:da:ec:50:
         b1:16:34:ce:e2:16:9f:e1:b9:b4:61:0d:b9:3a:9e:c9:ef:99:
         59:79:60:1f:d7:61:3e:a5:87:01:32:61:0a:63:23:57:ba:dd:
         ed:5b:ec:ea:05:b2:06:4b:9e:29:97:b8:ba:1f:b8:9a:db:19:
         78:41:e2:c2:84:3f:66:43:68:dd:f9:85:12:c3:f3:4b:4a:75:
         83:49:01:15:6e:29:f5:73:88:04:8b:f2:e0:5a:85:64:99:54:
         05:3f:c7:76:43:18:a7:b1:90:24:1e:61:24:3e:14:30:19:19:
         02:7f:dd:f4:1e:1c:0f:26:a7:61:ee:ae:80:63:25:29:9c:58:
         d6:90:12:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:01:06 2026 by rpki-client