Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/2/3138372e302e3132382e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3132382e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          H0IkXKaQdF20PrgNf+ByHL8QEFfU8kpCaCTndx9hn2M=
Subject key identifier:   99:AD:CA:85:C0:6A:43:F3:1F:96:93:0B:74:9C:83:D2:5F:66:3B:4E
Certificate issuer:       /CN=A1059BEEA2C570CB29BBD2246F48FD323FA2D26F
Certificate serial:       5CB0B072A6597AEA11D43F67807F4A38C09D8E4A
Authority key identifier: A1:05:9B:EE:A2:C5:70:CB:29:BB:D2:24:6F:48:FD:32:3F:A2:D2:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1059BEEA2C570CB29BBD2246F48FD323FA2D26F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/2/3138372e302e3132382e302f32342d3234203d3e203238323338.roa
Signing time:             Mon 23 Feb 2026 15:07:04 +0000
ROA not before:           Mon 23 Feb 2026 15:02:04 +0000
ROA not after:            Mon 22 Feb 2027 15:07:04 +0000
asID:                     28238
IP address blocks:        187.0.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/2/A1059BEEA2C570CB29BBD2246F48FD323FA2D26F.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/2/A1059BEEA2C570CB29BBD2246F48FD323FA2D26F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1059BEEA2C570CB29BBD2246F48FD323FA2D26F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 01:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b0:b0:72:a6:59:7a:ea:11:d4:3f:67:80:7f:4a:38:c0:9d:8e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1059BEEA2C570CB29BBD2246F48FD323FA2D26F
        Validity
            Not Before: Feb 23 15:02:04 2026 GMT
            Not After : Feb 22 15:07:04 2027 GMT
        Subject: CN=99ADCA85C06A43F31F96930B749C83D25F663B4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ed:16:18:e1:de:b8:62:e5:a6:af:96:dc:90:
                    47:d5:85:1b:7a:1d:8c:1b:36:2a:7b:2c:fb:72:4b:
                    ce:b2:42:c0:12:f4:7a:ba:16:8a:b0:e2:d4:06:c4:
                    20:59:90:82:75:46:8b:40:0a:05:77:2b:48:dc:32:
                    ec:8f:b7:a2:f2:be:ee:a1:ea:f1:24:00:74:65:12:
                    d6:86:af:62:60:66:9a:13:0a:60:2d:f1:90:87:ec:
                    cc:c9:f0:0a:37:c5:de:fe:24:24:e4:91:9a:21:48:
                    9c:6c:52:ab:6e:68:93:6b:37:7d:57:b9:77:ad:0e:
                    29:b6:fe:c4:74:9f:72:78:5f:6e:90:ec:9b:ee:37:
                    97:a7:6e:11:7b:54:33:7e:7e:97:a2:7e:3f:01:30:
                    8b:d9:8d:33:a6:4e:05:7a:8c:bf:a1:dc:65:ff:ba:
                    2b:7d:34:19:c2:1a:81:ce:66:cc:7e:a5:3c:d9:85:
                    df:5d:13:b8:41:4d:2b:07:9c:5b:bd:eb:34:66:7d:
                    21:50:dd:93:87:03:df:09:57:72:10:5a:59:03:a5:
                    fa:33:27:65:73:e0:76:95:7b:b6:94:1e:e8:25:02:
                    4b:52:b6:b0:c6:22:65:da:ac:a1:5c:c3:37:ba:52:
                    73:a6:95:e9:45:5a:2b:f2:54:ab:1d:bd:ca:e1:87:
                    f8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AD:CA:85:C0:6A:43:F3:1F:96:93:0B:74:9C:83:D2:5F:66:3B:4E
            X509v3 Authority Key Identifier:
                keyid:A1:05:9B:EE:A2:C5:70:CB:29:BB:D2:24:6F:48:FD:32:3F:A2:D2:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/2/A1059BEEA2C570CB29BBD2246F48FD323FA2D26F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1059BEEA2C570CB29BBD2246F48FD323FA2D26F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/2/3138372e302e3132382e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:3f:01:11:4f:1c:99:49:d0:7d:b0:c9:b8:2a:bb:e3:b0:80:
         6f:fd:c6:16:4e:d7:80:40:b4:57:60:af:4f:6c:20:19:f9:7a:
         a8:77:f8:eb:6a:92:d5:04:8b:50:cf:2f:b2:6c:17:00:40:2e:
         2e:0e:10:2a:a1:b4:c3:05:d8:37:ea:e2:b1:9a:52:c3:cf:5f:
         f3:13:e4:99:dd:99:94:a9:59:2e:c4:1e:07:b8:67:5c:c7:ee:
         f2:ca:d8:1b:69:b2:80:00:57:8d:c3:39:7a:38:fc:65:e7:cf:
         7e:17:12:11:fa:27:35:b0:ea:af:c5:0a:a7:a9:72:be:ae:15:
         bb:37:25:b7:e4:cd:e9:f6:4f:41:33:c8:a9:7c:f0:cc:ca:4c:
         6b:e1:7f:6c:00:fd:61:91:81:e9:6a:e2:4f:cb:6b:2d:b2:7b:
         37:b5:e9:64:49:38:ac:dc:ea:ff:21:98:0a:f0:81:d3:bf:95:
         30:53:95:ab:f6:03:6d:19:a2:6d:ea:d9:29:d6:11:dc:5a:51:
         df:f9:86:b4:28:21:0c:9f:1b:27:cc:aa:a1:49:79:14:06:37:
         8d:a8:4f:46:fb:ed:63:ec:44:10:2e:1c:24:9f:b1:bd:70:dc:
         27:2d:80:fb:0e:5d:cf:26:44:f8:6b:4e:31:a5:63:de:ed:6c:
         45:10:d4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:17 2026 by rpki-client