Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/3138372e36332e3135342e302f32342d3234203d3e20323731343934.roa
File:                     3138372e36332e3135342e302f32342d3234203d3e20323731343934.roa (raw, json)
Hash identifier:          G38QWma60ltEkU+XiqtTnkU/i/CTW1gwpM8mh9V4nLc=
Subject key identifier:   87:1F:13:32:68:66:5E:EF:F1:2B:75:DB:A7:99:1E:A5:73:4E:46:7D
Certificate issuer:       /CN=AF2F2563E35F605B4B7EAB4282AF573236FB9ACD
Certificate serial:       2413ACE79F4EB24D3B9318F1A36433E1B34AE435
Authority key identifier: AF:2F:25:63:E3:5F:60:5B:4B:7E:AB:42:82:AF:57:32:36:FB:9A:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/3138372e36332e3135342e302f32342d3234203d3e20323731343934.roa
Signing time:             Fri 24 Jul 2026 14:06:45 +0000
ROA not before:           Fri 24 Jul 2026 14:01:45 +0000
ROA not after:            Fri 23 Jul 2027 14:06:45 +0000
asID:                     271494
IP address blocks:        187.63.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.crl
                          rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 08:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:13:ac:e7:9f:4e:b2:4d:3b:93:18:f1:a3:64:33:e1:b3:4a:e4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF2F2563E35F605B4B7EAB4282AF573236FB9ACD
        Validity
            Not Before: Jul 24 14:01:45 2026 GMT
            Not After : Jul 23 14:06:45 2027 GMT
        Subject: CN=871F133268665EEFF12B75DBA7991EA5734E467D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:ea:7a:fc:29:c1:ae:be:47:42:f8:c6:9d:
                    8a:2e:f6:98:f5:af:9f:ac:69:33:da:cf:b1:78:14:
                    54:3b:c6:05:23:ab:71:5c:e6:4b:fb:18:da:2c:c7:
                    84:15:95:56:d5:c4:01:4a:09:25:8c:76:2a:bf:6b:
                    a9:f8:05:3b:25:b5:02:5b:db:60:01:fe:43:dd:b7:
                    6b:b2:71:9c:23:b8:99:95:52:c0:10:c0:16:af:61:
                    aa:8d:2c:e6:20:d7:c9:fc:4f:c5:f1:d5:20:1c:ee:
                    2d:ad:8d:ea:8e:29:63:2c:7b:44:b9:b2:65:2f:90:
                    26:39:89:c8:c2:36:b9:06:a0:16:b8:bb:b6:5b:2e:
                    79:ec:ad:5c:99:62:2c:ae:63:c7:ae:ea:86:e3:ea:
                    8f:d4:56:2c:b6:7c:6b:52:a3:47:56:b9:4a:e7:c1:
                    60:2b:30:61:46:0c:8e:33:a7:4d:18:44:9f:e3:b3:
                    d9:3b:19:f8:11:fd:65:54:63:09:c7:70:4c:8c:14:
                    6c:a5:6b:78:d6:8b:fc:7e:47:34:29:da:9b:a3:53:
                    3e:93:64:b7:6f:a4:f0:a0:9f:4b:46:c2:85:ce:2b:
                    aa:28:72:37:d3:1c:a6:5a:2b:a1:1b:d6:14:71:e4:
                    ae:2c:19:4c:c5:13:34:e6:05:63:70:e8:c8:a5:18:
                    a2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1F:13:32:68:66:5E:EF:F1:2B:75:DB:A7:99:1E:A5:73:4E:46:7D
            X509v3 Authority Key Identifier:
                keyid:AF:2F:25:63:E3:5F:60:5B:4B:7E:AB:42:82:AF:57:32:36:FB:9A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/3138372e36332e3135342e302f32342d3234203d3e20323731343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:b6:f6:10:41:bf:9f:fe:c8:dc:4d:60:fa:9e:38:7f:e2:9c:
         21:9c:0c:3a:9b:d1:15:02:7e:98:da:1c:21:7f:ff:3f:02:72:
         6b:0a:27:e0:3a:42:18:b1:da:27:87:ad:e9:36:9b:83:57:7a:
         bc:97:e3:ae:1d:38:18:74:ff:eb:ab:55:d2:13:48:98:7f:cd:
         fa:48:88:7b:62:b3:26:51:72:05:33:95:d9:01:c5:02:b0:0a:
         8e:36:62:68:e0:23:97:47:ac:cf:fb:18:b9:36:83:46:e2:39:
         65:61:67:76:4d:57:f2:35:4d:9d:3c:59:b1:c6:16:00:d4:fa:
         d5:bf:c5:dc:b0:13:55:4f:aa:79:49:0a:2d:79:f3:3d:e0:f2:
         5f:c0:7c:72:7f:3a:c0:d2:da:f5:f7:f8:a7:b2:cc:e9:c3:fe:
         9a:69:ab:22:b0:6f:4d:0a:5a:e4:11:f0:2b:b5:c8:fe:ff:d9:
         94:0a:67:42:09:5c:d8:ed:c7:88:75:4f:f6:26:fd:7a:05:34:
         6d:ad:0c:74:50:78:49:84:a2:f7:39:7a:a3:b9:fa:db:e2:fb:
         e2:8c:ec:e4:bc:d9:0e:52:b0:13:0d:da:13:4a:d2:42:fb:25:
         b5:0c:94:3d:fa:80:00:92:13:b9:dd:e1:17:b2:7d:44:f3:40:
         66:1c:59:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:09:00 2026 by rpki-client