Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e342e302f32342d3234203d3e203238323637.roa
File:                     3138372e3130382e342e302f32342d3234203d3e203238323637.roa (raw, json)
Hash identifier:          FmsIodomD/OEqjBpuGTc7ZmAQ+TF9byYhLZtfiUSVJY=
Subject key identifier:   10:84:DB:0A:A5:E3:DC:BA:26:12:89:8C:6E:A8:FE:65:32:F2:00:95
Certificate issuer:       /CN=FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0
Certificate serial:       4BBFB6DED5CC1338A4802BC080995EC40658F71A
Authority key identifier: FA:97:6E:B7:9B:C9:FD:D1:D7:28:3B:D5:CE:10:AC:B2:2C:1B:98:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e342e302f32342d3234203d3e203238323637.roa
Signing time:             Fri 27 Feb 2026 20:38:14 +0000
ROA not before:           Fri 27 Feb 2026 20:33:14 +0000
ROA not after:            Fri 26 Feb 2027 20:38:14 +0000
asID:                     28267
IP address blocks:        187.108.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.crl
                          rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 04:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:bf:b6:de:d5:cc:13:38:a4:80:2b:c0:80:99:5e:c4:06:58:f7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0
        Validity
            Not Before: Feb 27 20:33:14 2026 GMT
            Not After : Feb 26 20:38:14 2027 GMT
        Subject: CN=1084DB0AA5E3DCBA2612898C6EA8FE6532F20095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:d3:80:e2:7f:e4:4a:11:e8:d1:f7:da:94:
                    d7:09:2b:1b:5b:13:28:2d:10:79:2b:f3:a4:7a:f5:
                    8b:af:6d:4e:42:2e:bc:11:01:e9:94:89:8c:3d:1d:
                    d4:8e:f1:61:37:ab:0c:ec:01:cd:dc:e8:a0:1f:77:
                    5d:44:0b:3f:88:9b:11:5b:9c:74:9e:a2:e7:42:70:
                    ee:09:c7:a6:b2:29:c5:35:56:1f:ad:a3:6b:03:32:
                    f2:2f:5b:c5:0a:1d:92:8a:02:b6:c2:cd:f5:d5:4d:
                    25:fc:f6:d3:f7:44:80:33:bb:46:f4:1b:a7:d5:65:
                    8c:c7:5d:f2:ad:20:8b:55:ee:75:f7:d4:dc:26:82:
                    15:32:4f:bb:e5:75:3c:f2:eb:26:e6:c2:15:af:50:
                    b4:1a:4a:b8:2d:15:a4:e6:7b:65:93:7d:42:63:e9:
                    55:ba:03:63:f6:a4:19:1f:06:c1:38:03:bb:94:14:
                    b1:2a:5f:ec:d2:32:1f:7c:68:e4:c6:ba:da:48:10:
                    cb:46:6e:4f:d3:0a:b4:27:75:60:7c:1d:cb:ab:cd:
                    80:41:1d:f1:35:10:00:57:65:99:ab:86:05:2a:a6:
                    e7:b7:5a:70:ea:82:48:cd:1f:da:ac:77:df:73:f2:
                    9b:97:f8:98:dc:62:48:be:59:81:29:9a:c6:9b:30:
                    42:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:84:DB:0A:A5:E3:DC:BA:26:12:89:8C:6E:A8:FE:65:32:F2:00:95
            X509v3 Authority Key Identifier:
                keyid:FA:97:6E:B7:9B:C9:FD:D1:D7:28:3B:D5:CE:10:AC:B2:2C:1B:98:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e342e302f32342d3234203d3e203238323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:51:4d:38:15:3b:30:87:4d:36:c4:6b:6c:1b:04:51:9c:5f:
         57:6a:76:75:e1:7d:51:2c:07:43:59:63:7d:57:7c:49:3d:8b:
         e3:3c:64:f5:65:fd:dd:67:09:64:db:d0:55:62:19:77:36:46:
         d6:9b:53:cc:85:70:b1:76:72:75:af:21:a1:45:07:1f:2b:87:
         ee:9a:f6:78:53:83:15:bf:a8:53:4a:c7:50:ab:e3:bd:1b:f0:
         41:cf:b3:c9:47:5b:80:bc:71:97:60:5c:41:ba:e5:05:74:ab:
         30:80:dd:dd:e3:12:fb:ab:bd:de:c7:27:49:08:6d:cb:ac:99:
         89:53:59:c9:65:30:d7:f8:da:a1:c9:3e:dc:b2:19:fc:d5:8b:
         e2:66:ed:b7:58:35:d3:18:5d:dd:f4:2a:a6:e5:29:04:b6:1e:
         44:3b:eb:05:a7:a2:85:8f:65:d1:67:6d:c0:3d:b7:2e:6f:85:
         16:cd:23:7c:be:44:e1:d6:6f:4e:16:c5:52:28:e1:6b:5c:9f:
         29:8e:0d:05:c0:4d:13:85:2c:03:fa:55:04:05:4d:a6:bb:e6:
         59:d4:eb:8a:8e:53:3c:9c:64:34:40:13:63:e8:e3:52:ae:e7:
         9e:4c:76:c1:dd:e4:e0:5a:f4:ce:b4:26:a8:7c:64:05:64:0f:
         da:1f:28:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:55:03 2026 by rpki-client