Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e34352e3131322e302f32302d3234203d3e203238313436.roa
File:                     3138372e34352e3131322e302f32302d3234203d3e203238313436.roa (raw, json)
Hash identifier:          XUMrMDXdqCmNzPEckwhNDnDYhvXyUDdFVc0/cUEtfuE=
Subject key identifier:   B2:42:A9:EC:1C:24:52:8A:76:F1:BC:CD:BC:17:AA:F6:A8:91:CA:84
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       54BF70FDCA1DB30C92B45DA3DE561F558E176962
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e34352e3131322e302f32302d3234203d3e203238313436.roa
Signing time:             Mon 13 Apr 2026 13:48:36 +0000
ROA not before:           Mon 13 Apr 2026 13:43:36 +0000
ROA not after:            Mon 12 Apr 2027 13:48:36 +0000
asID:                     28146
IP address blocks:        187.45.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 23:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:bf:70:fd:ca:1d:b3:0c:92:b4:5d:a3:de:56:1f:55:8e:17:69:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: Apr 13 13:43:36 2026 GMT
            Not After : Apr 12 13:48:36 2027 GMT
        Subject: CN=B242A9EC1C24528A76F1BCCDBC17AAF6A891CA84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1c:b5:24:eb:7a:5f:67:59:13:bb:6a:cb:5d:
                    e1:78:36:e2:37:aa:a7:b7:c6:aa:02:30:2d:e4:27:
                    5e:58:b0:e2:b7:98:a2:11:a3:05:47:1b:be:1d:32:
                    e4:33:a8:af:be:24:74:0d:c4:d1:92:af:c5:24:ae:
                    69:f2:3d:55:15:b7:a2:e8:90:a5:8b:99:f7:57:5a:
                    1a:5e:11:e7:d6:4f:f5:dd:b2:2a:39:3b:6b:51:55:
                    0f:7e:e2:50:ba:f9:49:70:d4:5a:6c:57:1e:2c:ef:
                    06:70:c9:3e:1c:fc:9f:8a:6a:81:57:95:34:3a:83:
                    df:6d:37:c3:e9:1c:5f:83:85:42:a9:db:52:a7:56:
                    87:c6:71:f6:66:a3:97:47:26:2b:86:f3:74:74:cc:
                    fc:5d:62:fe:5f:97:8f:dd:3a:a2:70:c2:36:c3:b0:
                    d1:9c:95:4a:3d:46:eb:81:b0:49:4f:f2:5f:7e:9d:
                    53:8e:a1:36:fe:58:26:3e:74:81:4c:ee:16:0d:91:
                    4d:a9:d6:e9:18:73:33:f3:8c:a0:fe:18:61:c4:92:
                    82:01:6b:9e:c2:07:af:30:56:cf:80:4c:14:41:66:
                    dd:b1:9f:52:cd:96:33:88:e1:ef:62:f9:ff:e9:32:
                    a0:35:ef:15:82:ac:48:2b:79:15:bf:77:37:10:cd:
                    d5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:42:A9:EC:1C:24:52:8A:76:F1:BC:CD:BC:17:AA:F6:A8:91:CA:84
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e34352e3131322e302f32302d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:a0:1c:be:8d:cd:c9:3d:53:30:26:ac:4e:7b:c4:5d:87:fc:
         9a:02:f3:b4:30:c7:f4:14:d0:4a:12:9d:c1:45:f9:0b:89:cc:
         f6:a0:ac:22:8b:b7:9e:8a:09:40:29:6d:6e:1c:dc:88:e2:70:
         de:95:fb:b7:05:ab:7a:14:30:7e:79:62:40:03:5c:49:3e:17:
         02:e8:47:7f:d2:dd:d0:1f:b5:da:2d:95:ee:36:a4:ae:14:be:
         07:c3:e4:22:d7:f3:a0:20:79:6b:17:e2:ed:a1:ab:98:39:7b:
         7a:86:26:df:4b:47:bb:3d:d0:7b:20:90:5e:81:1d:9f:48:c9:
         24:c6:a4:72:23:57:22:1c:78:5a:f6:f2:f7:a9:b8:20:d3:6c:
         27:48:86:2e:b8:46:0d:ea:74:bc:a3:cc:65:06:72:15:a1:40:
         2e:b6:83:00:ae:5d:33:b8:df:d0:94:80:6e:ca:8e:cb:a2:e8:
         15:3b:d9:57:e4:b9:5c:f9:e0:b8:a8:80:7f:06:7e:84:3f:37:
         21:5d:2f:88:e0:23:17:d5:5b:9b:b1:d9:ab:9d:4b:ad:b8:97:
         d3:33:50:c2:41:b8:28:34:d3:c1:ff:5c:26:d7:8d:a1:4d:13:
         ec:e9:01:c1:9c:55:6d:b0:f6:59:18:ee:f4:e8:b0:3c:45:54:
         08:48:a4:3b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVL9w/codswyStF2j3lYfVY4XaWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FCN0M5QUFFQTFEMjkyMDEwMkQwNTJFMUFDNDVFQ0Ez
NDM5QjJGMDAeFw0yNjA0MTMxMzQzMzZaFw0yNzA0MTIxMzQ4MzZaMDMxMTAvBgNV
BAMTKEIyNDJBOUVDMUMyNDUyOEE3NkYxQkNDREJDMTdBQUY2QTg5MUNBODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfHLUk63pfZ1kTu2rLXeF4NuI3
qqe3xqoCMC3kJ15YsOK3mKIRowVHG74dMuQzqK++JHQNxNGSr8UkrmnyPVUVt6Lo
kKWLmfdXWhpeEefWT/Xdsio5O2tRVQ9+4lC6+Ulw1FpsVx4s7wZwyT4c/J+KaoFX
lTQ6g99tN8PpHF+DhUKp21KnVofGcfZmo5dHJiuG83R0zPxdYv5fl4/dOqJwwjbD
sNGclUo9RuuBsElP8l9+nVOOoTb+WCY+dIFM7hYNkU2p1ukYczPzjKD+GGHEkoIB
a57CB68wVs+ATBRBZt2xn1LNljOI4e9i+f/pMqA17xWCrEgreRW/dzcQzdUDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUskKp7BwkUop28bzNvBeq9qiRyoQwHwYDVR0j
BBgwFoAUerfJquodKSAQLQUuGsReyjQ5svAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZEQ2g2WDV5cktkN0NZWXZacERMOVNxU3pNQUJqUGFhNmRzMUtSSzZx
SzYvMC83QUI3QzlBQUVBMUQyOTIwMTAyRDA1MkUxQUM0NUVDQTM0MzlCMkYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBQjdDOUFBRUExRDI5MjAx
MDJEMDUyRTFBQzQ1RUNBMzQzOUIyRjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGRENoNlg1eXJLZDdDWVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzAv
MzEzODM3MmUzNDM1MmUzMTMxMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzEzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuy1wMA0GCSqGSIb3DQEBCwUAA4IBAQBRoBy+jc3J
PVMwJqxOe8Rdh/yaAvO0MMf0FNBKEp3BRfkLicz2oKwii7eeiglAKW1uHNyI4nDe
lfu3Bat6FDB+eWJAA1xJPhcC6Ed/0t3QH7XaLZXuNqSuFL4Hw+Qi1/OgIHlrF+Lt
oauYOXt6hibfS0e7PdB7IJBegR2fSMkkxqRyI1ciHHha9vL3qbgg02wnSIYuuEYN
6nS8o8xlBnIVoUAutoMArl0zuN/QlIBuyo7LougVO9lX5Llc+eC4qIB/Bn6EPzch
XS+I4CMX1VubsdmrnUutuJfTM1DCQbgoNNPB/1wm142hTRPs6QHBnFVtsPZZGO70
6LA8RVQISKQ7
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:09:08 2026 by rpki-client