Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/2/3138372e302e3134322e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3134322e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          1vNDmNFdPD10B4Ia5ZXgpmlGcZPdVumTB8ymQs5LhTQ=
Subject key identifier:   85:FC:47:3B:5E:AA:48:77:5F:69:77:A7:2F:04:0B:43:E4:D4:85:95
Certificate issuer:       /CN=A1059BEEA2C570CB29BBD2246F48FD323FA2D26F
Certificate serial:       4BCC6263B8D72301B57D750B69A3B4438AE9FA3F
Authority key identifier: A1:05:9B:EE:A2:C5:70:CB:29:BB:D2:24:6F:48:FD:32:3F:A2:D2:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1059BEEA2C570CB29BBD2246F48FD323FA2D26F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/2/3138372e302e3134322e302f32342d3234203d3e203238323338.roa
Signing time:             Mon 23 Feb 2026 15:07:06 +0000
ROA not before:           Mon 23 Feb 2026 15:02:06 +0000
ROA not after:            Mon 22 Feb 2027 15:07:06 +0000
asID:                     28238
IP address blocks:        187.0.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/2/A1059BEEA2C570CB29BBD2246F48FD323FA2D26F.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/2/A1059BEEA2C570CB29BBD2246F48FD323FA2D26F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1059BEEA2C570CB29BBD2246F48FD323FA2D26F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 01:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cc:62:63:b8:d7:23:01:b5:7d:75:0b:69:a3:b4:43:8a:e9:fa:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1059BEEA2C570CB29BBD2246F48FD323FA2D26F
        Validity
            Not Before: Feb 23 15:02:06 2026 GMT
            Not After : Feb 22 15:07:06 2027 GMT
        Subject: CN=85FC473B5EAA48775F6977A72F040B43E4D48595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b3:30:f0:e7:b3:ef:49:17:09:f5:3d:95:1a:
                    86:f7:82:3c:85:93:b2:42:e1:8b:13:32:e8:5d:2a:
                    07:18:65:d1:3e:ab:22:57:5f:19:07:64:47:1c:42:
                    d2:4b:4d:78:87:da:07:cd:15:5c:3f:e0:ad:b2:ab:
                    39:d4:61:ec:55:d2:16:c4:cb:4d:24:48:99:46:da:
                    8e:6b:eb:94:38:01:b9:b3:21:80:d6:00:2b:10:61:
                    fa:d3:cb:19:8b:37:ee:b4:a2:1b:8b:3a:55:5f:bf:
                    57:c6:1b:d5:62:ed:8f:79:63:3f:6d:61:ce:9b:a5:
                    8c:f2:fa:e0:65:ad:d0:a6:6b:8b:ee:b3:ef:34:76:
                    8c:93:e3:9c:ce:c9:48:79:11:3a:84:3a:30:db:36:
                    fc:82:16:d6:58:20:da:64:91:fc:e2:1b:c6:b0:46:
                    96:0d:01:0d:42:96:75:06:ad:a4:4b:ae:5c:c8:b7:
                    5e:5f:80:ec:5e:6b:ce:7b:3e:fe:a3:1c:e7:a3:dd:
                    96:4e:7e:15:4b:b1:2b:f1:cb:08:e5:f7:7b:4b:27:
                    26:da:94:ca:52:44:06:c0:e1:c1:d9:c3:ff:e2:6f:
                    e4:39:03:1e:0e:4f:c9:72:0b:91:10:81:3e:d2:af:
                    5f:5b:34:6e:7e:17:1e:8b:00:6b:c0:3d:61:7e:0d:
                    94:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FC:47:3B:5E:AA:48:77:5F:69:77:A7:2F:04:0B:43:E4:D4:85:95
            X509v3 Authority Key Identifier:
                keyid:A1:05:9B:EE:A2:C5:70:CB:29:BB:D2:24:6F:48:FD:32:3F:A2:D2:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/2/A1059BEEA2C570CB29BBD2246F48FD323FA2D26F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1059BEEA2C570CB29BBD2246F48FD323FA2D26F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/2/3138372e302e3134322e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:e6:b5:88:b9:ad:fd:e4:1c:82:a2:9c:f1:43:a5:1d:76:62:
         0c:a7:1b:50:78:de:d7:0a:74:b8:ac:28:3d:b3:2c:e5:4d:3e:
         f2:cd:0d:14:b1:c7:0a:aa:2b:da:0e:b1:3d:fe:cf:08:c7:39:
         4c:3d:3b:fb:ec:16:13:a8:e9:d1:cb:93:23:b4:68:b2:00:38:
         43:03:88:b1:82:09:4f:d9:3e:71:34:54:4a:42:96:c6:ce:85:
         d9:2b:22:fd:c3:04:3d:48:2b:66:7f:bf:78:04:d4:77:2b:cd:
         6d:02:84:9f:10:14:95:cc:86:dd:15:87:42:6c:e4:a2:dc:d6:
         bd:d2:f4:46:43:8e:67:0b:ca:ce:15:cd:fc:7c:44:7d:3a:f0:
         89:4b:bb:35:ad:f6:c5:13:cb:75:34:e3:3c:46:1c:bc:5f:a4:
         f9:12:68:ca:2b:2d:0c:d1:95:cb:97:61:9e:c6:82:0f:51:bb:
         33:25:94:2f:2f:2e:bf:ae:45:80:3b:a1:56:b3:74:0a:61:1c:
         50:31:46:5c:81:c1:e9:5c:90:08:43:26:f9:c6:b0:1a:01:63:
         9f:33:ab:7b:e8:bf:bb:14:5b:f0:6d:2b:e5:86:f4:1d:65:cc:
         26:46:46:4c:85:13:d9:b2:31:4e:3b:75:2e:d8:bc:6d:0b:24:
         8d:47:cc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:16 2026 by rpki-client