Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e31332e302f32342d3234203d3e203238323637.roa
File:                     3138372e3130382e31332e302f32342d3234203d3e203238323637.roa (raw, json)
Hash identifier:          E4hFF5Cy8iWOPSZVPh1lRGbR2Hl1YOH8nA2oghLcgAc=
Subject key identifier:   EA:F3:B4:FA:F0:6F:43:35:12:57:E3:E8:52:80:5B:9D:44:0C:C6:B0
Certificate issuer:       /CN=FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0
Certificate serial:       7FEA62A99D9FB4B32D8DA7BD41A0D9BA05B89226
Authority key identifier: FA:97:6E:B7:9B:C9:FD:D1:D7:28:3B:D5:CE:10:AC:B2:2C:1B:98:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e31332e302f32342d3234203d3e203238323637.roa
Signing time:             Fri 27 Feb 2026 20:50:05 +0000
ROA not before:           Fri 27 Feb 2026 20:45:05 +0000
ROA not after:            Fri 26 Feb 2027 20:50:05 +0000
asID:                     28267
IP address blocks:        187.108.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.crl
                          rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 04:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ea:62:a9:9d:9f:b4:b3:2d:8d:a7:bd:41:a0:d9:ba:05:b8:92:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0
        Validity
            Not Before: Feb 27 20:45:05 2026 GMT
            Not After : Feb 26 20:50:05 2027 GMT
        Subject: CN=EAF3B4FAF06F43351257E3E852805B9D440CC6B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:c0:70:07:e5:b6:4c:aa:29:f8:99:a5:80:
                    eb:ea:56:2f:b1:4a:34:a8:50:c4:3d:d5:45:24:e0:
                    83:01:cd:26:ca:c9:32:85:6d:9e:90:e9:20:d6:90:
                    8e:2b:42:5d:01:49:15:5e:14:c3:d7:11:1c:6c:e4:
                    39:32:2b:4d:85:65:a6:0c:3d:a5:f3:f6:93:2d:e0:
                    3d:cc:3e:8d:c1:1b:0a:23:f2:4a:13:ed:33:c1:2f:
                    9d:65:9e:e5:04:7d:ed:e1:3c:f8:fa:18:2d:37:17:
                    4b:5a:3f:fc:f9:f5:cf:0f:de:8e:e5:3a:ce:04:14:
                    38:b1:db:db:32:d7:f8:a4:6d:34:db:a8:db:7d:9b:
                    ea:af:a7:25:51:23:b5:31:6f:a3:45:b1:b2:c9:38:
                    73:4e:97:08:34:93:63:fb:02:a8:5e:69:2c:93:08:
                    d4:48:74:cc:ff:1b:08:04:92:4d:91:b3:4c:ea:7c:
                    1a:45:77:4e:28:c5:15:bd:6d:b5:10:3e:04:9f:d1:
                    d1:4d:79:74:e5:8f:1a:3b:cc:2c:d9:2a:d6:c1:10:
                    18:a0:3d:19:07:6e:06:1f:96:88:9b:a0:aa:9c:f3:
                    87:77:59:13:86:80:f6:c8:26:65:4a:67:c8:ed:47:
                    0d:64:e3:22:f5:7c:dd:f0:7e:52:8a:5b:d2:8e:48:
                    e9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F3:B4:FA:F0:6F:43:35:12:57:E3:E8:52:80:5B:9D:44:0C:C6:B0
            X509v3 Authority Key Identifier:
                keyid:FA:97:6E:B7:9B:C9:FD:D1:D7:28:3B:D5:CE:10:AC:B2:2C:1B:98:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e31332e302f32342d3234203d3e203238323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:7c:51:c7:20:c8:71:41:52:a1:cc:30:c4:ff:4a:9f:13:49:
         e4:57:60:58:90:7d:22:13:83:5e:54:ab:b5:88:92:17:65:6a:
         c7:5e:aa:20:8d:ab:7d:65:83:f4:3b:2c:66:7a:45:81:c9:de:
         2f:aa:64:cc:7a:f8:09:c6:64:fd:52:6f:fe:bc:67:fa:bc:85:
         92:c2:0c:5a:c2:d9:e5:ac:3e:be:3d:64:48:4c:6d:64:fa:d3:
         c8:5b:03:cf:57:e7:c5:41:d6:a4:de:8f:67:cb:54:24:29:f6:
         c2:d1:10:3e:9f:e1:7c:07:a8:a7:58:b2:9f:7e:a0:d9:bc:00:
         0c:42:7a:03:fa:46:ef:24:3d:33:cc:1c:db:e2:bb:ed:2e:51:
         e6:1d:85:3b:4c:90:04:bb:b6:47:65:be:15:c7:b8:c4:ec:b2:
         a3:8b:77:68:ec:e8:98:b7:27:d8:41:39:63:85:5e:14:ad:0c:
         ae:d9:8c:2e:b7:fb:e3:63:9d:91:37:94:70:11:a6:16:0e:6d:
         b5:06:42:ea:6b:d6:ec:d4:5d:43:9d:1d:e9:80:14:ea:f5:db:
         a3:58:a3:d7:35:4b:dd:b9:3e:e3:42:b3:b7:9a:cb:93:b6:b2:
         3b:90:7f:83:81:95:b6:b9:5d:5a:be:c8:4d:1a:81:43:96:02:
         c9:15:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:18 2026 by rpki-client