Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138372e302e3133382e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3133382e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          KavgHe1b5K2CNVf4JVVRLxBCak+Sc31deiLNtl36UoM=
Subject key identifier:   1A:F5:D6:F4:DE:D6:D3:23:47:8A:59:85:DB:A5:CB:24:23:8C:5B:78
Certificate issuer:       /CN=1F89CA79234EBEE1EDFBB720CAEAD02161B8C443
Certificate serial:       17BE80F36F30C7B1EED2340D0A702E582C83DCBA
Authority key identifier: 1F:89:CA:79:23:4E:BE:E1:ED:FB:B7:20:CA:EA:D0:21:61:B8:C4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138372e302e3133382e302f32342d3234203d3e203238323338.roa
Signing time:             Mon 25 May 2026 14:18:09 +0000
ROA not before:           Mon 25 May 2026 14:13:09 +0000
ROA not after:            Mon 24 May 2027 14:18:09 +0000
asID:                     28238
IP address blocks:        187.0.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:be:80:f3:6f:30:c7:b1:ee:d2:34:0d:0a:70:2e:58:2c:83:dc:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F89CA79234EBEE1EDFBB720CAEAD02161B8C443
        Validity
            Not Before: May 25 14:13:09 2026 GMT
            Not After : May 24 14:18:09 2027 GMT
        Subject: CN=1AF5D6F4DED6D323478A5985DBA5CB24238C5B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:bf:31:f8:36:c8:5a:d4:2f:1f:17:c8:60:
                    6c:98:ad:98:a9:cc:3a:84:77:30:40:8a:46:72:21:
                    b9:81:b0:25:65:ca:a3:73:52:87:d0:5f:41:17:41:
                    d3:78:9d:ae:8e:4b:61:32:02:99:cb:0c:36:38:fb:
                    d3:b4:a0:8d:ae:7b:30:bb:80:29:08:98:64:0a:6b:
                    a2:91:07:ee:d6:b9:b0:56:62:cb:79:10:fb:9a:50:
                    a0:6f:4a:bd:cf:b9:2c:9a:2c:75:8c:c1:52:2c:14:
                    5a:03:bd:e6:c5:4e:06:8a:d7:79:90:6f:38:35:00:
                    ce:35:c2:c0:4d:bc:5b:a5:d6:f0:8f:76:49:2a:49:
                    42:ec:38:a1:75:ae:e5:69:e1:84:01:23:95:cc:10:
                    8a:d0:a6:c4:b1:3b:0f:77:27:88:94:31:63:8b:ba:
                    2a:a2:9c:b8:d5:97:50:ec:64:02:0d:8b:07:f1:ac:
                    97:0d:5d:ac:f6:1c:e5:69:48:ce:43:c5:01:55:19:
                    27:90:6f:c6:99:11:dd:28:0d:bf:12:84:91:f2:75:
                    cb:d1:0a:7d:a9:59:a1:4c:42:8c:b2:1a:78:fb:90:
                    34:85:1c:d3:7c:03:75:52:9e:46:09:93:22:7d:d7:
                    af:f7:93:cc:bc:74:e0:0b:da:1b:c2:3c:c6:17:0a:
                    56:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F5:D6:F4:DE:D6:D3:23:47:8A:59:85:DB:A5:CB:24:23:8C:5B:78
            X509v3 Authority Key Identifier:
                keyid:1F:89:CA:79:23:4E:BE:E1:ED:FB:B7:20:CA:EA:D0:21:61:B8:C4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138372e302e3133382e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:e8:ce:6d:d8:56:4b:14:e7:1b:3e:f0:f0:76:c9:e9:00:80:
         56:1c:17:9e:e7:55:ae:f5:85:2f:0a:2b:86:55:18:d9:42:65:
         87:df:68:96:23:05:a3:e6:38:51:f7:0f:bb:7d:3a:2e:f1:d6:
         16:27:a7:0e:e3:cc:6e:0d:05:d4:63:cd:4b:dd:0b:fa:ea:77:
         eb:75:f0:8b:94:77:96:4e:33:fd:57:58:11:c6:40:92:0c:87:
         8e:9c:04:9e:23:3d:ed:25:e0:63:da:37:71:94:10:0d:27:2a:
         59:f5:2c:78:b5:85:50:8a:a3:c5:e8:03:2f:a6:21:60:d0:28:
         e1:8e:94:4c:66:d0:c5:1e:31:96:18:ce:3b:84:7a:6e:ce:ac:
         dc:7e:cb:c1:52:4e:08:2c:4a:a6:b6:0d:48:51:62:d7:42:48:
         1a:80:16:91:fb:bf:f4:c4:76:15:6f:46:b7:66:03:43:34:73:
         6d:cb:35:2d:58:7d:ef:f3:d5:c0:93:be:cd:8e:67:05:94:2a:
         be:fb:de:29:0f:89:b0:80:03:b7:c6:4d:32:ec:d4:e1:2b:37:
         c3:89:83:aa:5e:dd:b5:3c:15:4f:84:7f:b9:95:5f:fb:ab:c2:
         7b:98:03:6d:0d:8a:5a:9d:4e:c3:8d:de:e1:44:09:85:26:68:
         6c:7f:8e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:33:25 2026 by rpki-client