Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3139312e33362e3133322e302f32322d3234203d3e203238313436.roa
File:                     3139312e33362e3133322e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          jiJwsRQ81ui26DJEdfiLcJIurR2K5voMXYJWcpR2vU0=
Subject key identifier:   65:1C:95:57:F8:6E:3A:91:1A:90:A9:72:93:6F:26:1F:A3:BE:86:C8
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       1F4884CB8BE3452D0997BD2AC3C9F0EF62D0913E
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3139312e33362e3133322e302f32322d3234203d3e203238313436.roa
Signing time:             Mon 13 Apr 2026 13:48:37 +0000
ROA not before:           Mon 13 Apr 2026 13:43:37 +0000
ROA not after:            Mon 12 Apr 2027 13:48:37 +0000
asID:                     28146
IP address blocks:        191.36.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 23:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:48:84:cb:8b:e3:45:2d:09:97:bd:2a:c3:c9:f0:ef:62:d0:91:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: Apr 13 13:43:37 2026 GMT
            Not After : Apr 12 13:48:37 2027 GMT
        Subject: CN=651C9557F86E3A911A90A972936F261FA3BE86C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:14:34:3f:fb:b9:8c:d1:58:cd:db:f1:54:
                    90:7f:1a:f3:24:73:5c:6b:30:f3:fb:7d:d5:14:97:
                    a5:ca:ca:2e:83:73:8b:87:31:28:47:c6:2f:d5:f3:
                    6b:00:01:78:76:ca:2d:c5:6a:ce:64:b1:5b:ad:d1:
                    5e:72:a1:42:96:86:a5:2d:7a:5f:ab:2e:52:49:69:
                    3b:80:31:93:1b:d2:20:16:3b:5d:04:86:3b:94:70:
                    22:be:70:82:8d:ab:02:93:50:71:80:3b:90:a8:6a:
                    87:37:26:55:8c:73:92:96:09:9e:0f:f5:14:64:71:
                    23:e6:60:b8:c3:eb:a9:01:a9:ec:50:cd:2f:eb:74:
                    10:a2:69:80:97:9d:5d:f9:a1:cb:7b:a1:b5:27:4b:
                    bc:97:84:4f:4f:3e:05:6e:6f:b3:47:b1:63:2b:5f:
                    a8:54:95:89:79:88:9e:22:02:76:9d:1b:db:c8:af:
                    27:10:5f:43:b6:82:03:29:41:9b:a9:59:1a:b8:9b:
                    c2:31:63:3d:1d:0e:c6:18:f5:23:62:4a:25:18:95:
                    6f:24:42:55:68:16:85:89:ab:19:5e:19:6a:15:02:
                    22:37:b2:3f:a4:34:aa:2d:8f:bd:39:aa:44:ff:5a:
                    2d:21:dd:d4:e9:8c:eb:40:3e:8e:44:93:b6:fd:26:
                    cf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1C:95:57:F8:6E:3A:91:1A:90:A9:72:93:6F:26:1F:A3:BE:86:C8
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3139312e33362e3133322e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:9a:09:19:c3:a5:4f:6d:34:dd:f5:b7:00:e3:4e:32:1f:16:
         d9:5a:71:f6:b5:28:f7:fd:0b:d2:7e:ec:b8:e5:36:4d:2d:9e:
         f9:9d:4f:9d:b8:04:1e:95:6c:62:41:b6:ae:c5:29:b7:ce:54:
         3a:d2:90:55:30:96:ee:64:98:64:0e:93:db:03:bd:ab:17:e8:
         17:fa:89:a6:ab:00:db:a4:3f:34:15:b0:56:0a:e2:1b:6f:49:
         c9:40:91:7f:3f:b1:1e:00:e9:b5:4d:79:d5:6a:14:bc:a1:97:
         e6:a5:21:4e:eb:37:fe:9e:a7:dc:d6:11:e8:2b:2f:4d:cb:1c:
         7e:af:6d:00:59:cb:23:9b:60:ab:ed:36:73:6d:84:c9:05:e9:
         8f:e4:11:2a:63:20:b1:8c:f9:de:88:f4:fc:d3:59:64:b1:06:
         34:da:56:e8:04:83:ef:6e:36:1d:4e:74:2e:32:66:4e:a6:6e:
         f5:1c:aa:4a:14:98:34:d2:d8:60:77:fd:ec:ad:80:b4:ab:1f:
         34:01:22:91:f3:96:75:12:c3:89:ea:e9:a3:ca:01:17:3f:62:
         06:79:d7:ff:a1:f0:66:91:9a:84:ec:ec:b0:a9:a7:ac:dd:f6:
         6d:46:05:4b:8c:1d:23:56:12:1d:2c:68:71:2a:f0:b6:74:3e:
         1b:b4:e2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:08:43 2026 by rpki-client