Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138372e302e3133352e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3133352e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          K8ntM3ztw/hRrrMyUxEGs1tiWC9TcHUQ8JtZ9T0gIAo=
Subject key identifier:   0D:8F:44:40:9E:A3:91:E9:FE:11:C3:84:E7:B5:52:26:53:C4:67:AD
Certificate issuer:       /CN=1F89CA79234EBEE1EDFBB720CAEAD02161B8C443
Certificate serial:       7C0F892D098EA4C7765BA665E36776F5C8A9F665
Authority key identifier: 1F:89:CA:79:23:4E:BE:E1:ED:FB:B7:20:CA:EA:D0:21:61:B8:C4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138372e302e3133352e302f32342d3234203d3e203238323338.roa
Signing time:             Mon 25 May 2026 14:18:07 +0000
ROA not before:           Mon 25 May 2026 14:13:07 +0000
ROA not after:            Mon 24 May 2027 14:18:07 +0000
asID:                     28238
IP address blocks:        187.0.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0f:89:2d:09:8e:a4:c7:76:5b:a6:65:e3:67:76:f5:c8:a9:f6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F89CA79234EBEE1EDFBB720CAEAD02161B8C443
        Validity
            Not Before: May 25 14:13:07 2026 GMT
            Not After : May 24 14:18:07 2027 GMT
        Subject: CN=0D8F44409EA391E9FE11C384E7B5522653C467AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a0:6a:97:80:15:b1:73:98:b2:08:6c:6b:b0:
                    89:e8:a7:63:d4:a5:1f:91:23:8e:dd:4e:26:a7:fe:
                    ca:32:3c:51:9b:dd:39:bc:0f:2f:14:88:25:13:c5:
                    98:c1:d1:2f:1c:03:74:26:f7:34:8a:aa:0e:93:eb:
                    6f:dd:cb:b5:88:f2:22:f5:ef:d3:63:0d:67:df:1b:
                    30:a0:e1:5c:4a:06:8f:00:1c:75:f9:1c:26:42:54:
                    07:b4:09:84:e6:12:fe:08:b7:93:63:26:88:cc:98:
                    df:33:95:59:d1:19:68:ac:d4:7b:24:c8:12:7c:fe:
                    a9:b9:1a:f8:fe:b3:91:10:cf:66:d3:30:10:d1:12:
                    da:54:49:5f:7e:fe:94:5d:83:d7:75:f9:d6:7d:cc:
                    7f:dd:55:68:2b:ed:2d:ba:5e:1c:06:5c:7a:d9:c0:
                    3e:43:d5:42:fa:2d:f5:fc:5d:dd:11:5f:a8:e9:fb:
                    0e:f4:62:ac:72:b1:6d:14:6d:55:90:0a:a2:e2:54:
                    73:00:38:1a:c7:fc:5f:58:81:4e:28:31:bb:f6:f0:
                    11:9c:9b:fd:ed:d2:87:52:2d:4b:c2:3b:a6:a9:9f:
                    ea:3e:c5:db:27:82:ec:38:24:58:67:61:0b:fb:1a:
                    93:4c:08:96:ff:bc:de:a0:5f:b9:34:eb:26:ff:39:
                    7c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8F:44:40:9E:A3:91:E9:FE:11:C3:84:E7:B5:52:26:53:C4:67:AD
            X509v3 Authority Key Identifier:
                keyid:1F:89:CA:79:23:4E:BE:E1:ED:FB:B7:20:CA:EA:D0:21:61:B8:C4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138372e302e3133352e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:d2:83:57:78:39:c3:73:e3:29:b3:b1:5b:33:5e:ae:00:5e:
         13:dd:e3:5c:28:54:0e:96:dd:6d:17:7b:ba:6d:8b:ff:55:dd:
         44:86:51:e7:c6:5b:45:cd:6b:3d:f4:94:e3:9d:3e:31:d1:41:
         50:1e:e4:07:3e:84:c8:6b:9e:31:7f:25:9e:86:d5:f5:3f:14:
         e7:e4:fa:c3:f9:f5:1e:b1:76:19:bd:1b:c0:fa:c6:a2:e1:9a:
         89:3d:8c:ab:4d:89:c4:82:d5:4e:ed:14:c6:7d:ae:08:a8:cb:
         2d:49:90:fe:72:1f:ad:92:4b:90:32:8d:f0:2a:db:13:69:63:
         a7:93:a4:00:04:56:5a:e0:9d:cf:f2:30:5b:bd:d1:86:22:43:
         e5:ec:59:41:5c:d0:35:1a:74:82:aa:09:e2:3d:aa:3b:a9:32:
         64:60:79:e1:d0:43:80:95:62:f4:8c:d9:07:48:c9:7d:22:91:
         7a:a8:80:ae:b8:03:d5:b8:35:38:98:a3:80:f5:d0:fc:0d:2e:
         0c:12:06:50:0d:71:81:86:c8:17:64:59:ec:9d:8b:c4:c8:e0:
         1c:93:36:c4:1c:5c:96:fd:18:17:ac:d2:f1:cc:a7:ab:d5:b9:
         23:d7:71:11:43:74:06:e3:9a:01:f5:bb:7e:0e:f3:92:ef:e9:
         27:cd:3b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:33:20 2026 by rpki-client