Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/3138372e33332e3230382e302f32302d3332203d3e203533303838.roa
File:                     3138372e33332e3230382e302f32302d3332203d3e203533303838.roa (raw, json)
Hash identifier:          A23b5UkF2jEVo2OGAZ7Hi0+sfgnbV7WaHxabvCl9A8E=
Subject key identifier:   35:44:47:DC:56:4D:EE:AC:88:36:5E:D1:FD:1A:3A:95:D2:23:13:6E
Certificate issuer:       /CN=4856F1A3B30D5C7881DA87018005E5D420414FCA
Certificate serial:       34AE168DD19BE128C5260985A01993232B25929C
Authority key identifier: 48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/3138372e33332e3230382e302f32302d3332203d3e203533303838.roa
Signing time:             Wed 25 Feb 2026 17:33:09 +0000
ROA not before:           Wed 25 Feb 2026 17:28:09 +0000
ROA not after:            Wed 24 Feb 2027 17:33:09 +0000
asID:                     53088
IP address blocks:        187.33.208.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl
                          rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ae:16:8d:d1:9b:e1:28:c5:26:09:85:a0:19:93:23:2b:25:92:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4856F1A3B30D5C7881DA87018005E5D420414FCA
        Validity
            Not Before: Feb 25 17:28:09 2026 GMT
            Not After : Feb 24 17:33:09 2027 GMT
        Subject: CN=354447DC564DEEAC88365ED1FD1A3A95D223136E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:b6:ec:ef:1c:b7:a5:cb:83:73:14:08:ea:
                    51:67:0d:b0:dc:53:4a:5e:30:8e:16:0b:41:1b:bf:
                    30:cd:d3:bc:13:0e:08:b5:33:76:e0:05:54:27:78:
                    2f:97:39:53:3e:11:4a:03:0e:31:b3:78:77:21:5b:
                    7d:dd:5e:9e:7b:66:44:2d:fb:e5:d5:c1:92:44:96:
                    d6:bd:c1:8e:09:88:56:71:b3:e6:75:24:46:ce:2d:
                    15:ab:53:56:b6:fb:58:d7:01:b3:bc:7a:54:0a:d3:
                    3c:0b:08:94:a6:46:0b:35:95:58:11:c2:6d:6d:bb:
                    ca:08:5c:d8:b5:de:55:18:99:ec:98:5b:7d:b0:bb:
                    14:80:f0:6b:d2:42:97:cd:ad:c0:c7:f7:21:35:f2:
                    b2:8a:10:97:8f:61:d6:92:e1:7e:f0:67:72:f8:63:
                    92:81:07:36:a1:a8:72:3d:cd:57:1c:f7:af:51:ad:
                    84:39:52:f3:af:22:6e:ba:0b:f3:42:db:c7:78:12:
                    c9:88:19:41:7d:2b:e5:13:9a:b2:d0:40:2c:40:27:
                    55:63:f4:f5:3f:24:11:f5:79:39:7d:30:f5:0d:51:
                    ec:f5:3c:6b:bc:12:54:a3:f2:33:93:51:12:da:ba:
                    9c:3f:79:bf:a9:17:82:f2:37:27:e8:61:c3:3d:fa:
                    f8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:44:47:DC:56:4D:EE:AC:88:36:5E:D1:FD:1A:3A:95:D2:23:13:6E
            X509v3 Authority Key Identifier:
                keyid:48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/3138372e33332e3230382e302f32302d3332203d3e203533303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:38:d6:90:7f:be:2b:58:33:29:f0:1e:93:ed:b1:ab:b2:98:
         3c:c9:20:72:68:12:38:bf:9e:eb:ad:1c:f0:9e:ca:02:12:1b:
         db:92:44:69:56:6c:1b:99:5a:b6:46:b5:38:1a:bf:5f:31:6f:
         3e:91:c1:09:82:b5:95:28:49:92:5a:b3:77:21:c2:5b:f7:87:
         27:25:20:7c:a8:36:76:b3:e7:02:e5:78:fe:6c:b5:cb:23:61:
         4d:e8:0b:d1:20:3f:e7:e5:c9:4d:fe:5d:73:e4:84:1c:12:00:
         6a:35:11:0a:f9:95:cb:dd:c6:9e:5b:c6:2a:f5:1e:14:38:a7:
         ff:24:13:8a:70:3d:2c:d8:c0:21:1d:67:88:cf:ad:c0:1b:b6:
         fc:2e:b2:77:15:f7:41:ed:62:e8:3a:da:ac:6f:86:74:48:de:
         71:c6:64:c4:7a:e1:22:aa:7e:61:59:c3:c6:f4:e0:49:ba:48:
         9f:2f:e0:c4:79:40:19:72:3c:17:13:03:45:03:24:1b:9b:be:
         65:62:a1:9f:1d:39:0b:42:68:ac:9b:aa:8f:4e:33:e3:fc:95:
         b9:2b:72:d1:97:44:a6:8b:08:77:63:63:b4:15:b0:5b:4d:ab:
         fe:5c:bb:e5:d5:74:48:e5:45:47:91:5d:dd:14:a4:a8:e0:b6:
         7f:76:83:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:17:08 2026 by rpki-client