Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138372e302e3134302e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3134302e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          24Gzi1ZhYeoCKHePXv0HdtRcQqlR0Dy7fOM9cnpfa/o=
Subject key identifier:   A9:9B:30:BB:B4:68:28:10:67:85:3C:93:65:FE:37:4F:D9:17:3B:E2
Certificate issuer:       /CN=1F89CA79234EBEE1EDFBB720CAEAD02161B8C443
Certificate serial:       4A7AA78FC532892A364D99B7B80937CAE57FC3B3
Authority key identifier: 1F:89:CA:79:23:4E:BE:E1:ED:FB:B7:20:CA:EA:D0:21:61:B8:C4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138372e302e3134302e302f32342d3234203d3e203238323338.roa
Signing time:             Mon 25 May 2026 14:18:11 +0000
ROA not before:           Mon 25 May 2026 14:13:11 +0000
ROA not after:            Mon 24 May 2027 14:18:11 +0000
asID:                     28238
IP address blocks:        187.0.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7a:a7:8f:c5:32:89:2a:36:4d:99:b7:b8:09:37:ca:e5:7f:c3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F89CA79234EBEE1EDFBB720CAEAD02161B8C443
        Validity
            Not Before: May 25 14:13:11 2026 GMT
            Not After : May 24 14:18:11 2027 GMT
        Subject: CN=A99B30BBB468281067853C9365FE374FD9173BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3a:e6:86:d4:6e:41:e7:b2:6b:33:45:e1:76:
                    ee:18:c4:91:62:58:fb:2f:13:13:5a:02:a5:21:62:
                    ce:ea:e0:f7:d1:be:90:e4:83:f8:fa:13:fb:1d:b5:
                    e5:f2:06:ba:d9:23:81:6d:6f:00:2c:eb:e3:33:a3:
                    83:d4:00:92:49:cc:4d:cd:bb:62:77:92:1a:25:60:
                    4f:12:bd:c1:6a:75:d5:f5:2e:eb:2f:79:cf:87:d8:
                    24:c9:38:a1:7a:db:cb:6c:79:bc:ab:f8:58:5a:d7:
                    d8:ee:e8:e6:4f:ba:8d:d6:d0:ce:93:59:8a:17:3d:
                    65:64:08:ac:0c:05:00:43:d8:13:29:00:ef:20:89:
                    82:e6:86:52:4b:44:51:41:14:31:9d:6c:ae:22:a8:
                    d6:3d:0d:59:ac:a5:02:91:0f:6a:57:bd:94:e8:54:
                    fa:08:88:24:1c:7f:69:a2:62:c3:df:56:d7:14:74:
                    4d:b3:4d:c5:4b:72:27:82:24:d7:46:72:2d:ef:48:
                    c9:72:c3:89:44:65:69:32:a4:a1:8a:1b:e8:f9:65:
                    cb:65:28:18:f1:a2:12:93:17:c8:af:55:08:90:6d:
                    29:98:bf:27:2e:88:08:88:07:d7:5b:47:ac:32:58:
                    90:94:fe:84:10:ea:ce:3a:a0:5c:a1:64:41:1c:a1:
                    58:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9B:30:BB:B4:68:28:10:67:85:3C:93:65:FE:37:4F:D9:17:3B:E2
            X509v3 Authority Key Identifier:
                keyid:1F:89:CA:79:23:4E:BE:E1:ED:FB:B7:20:CA:EA:D0:21:61:B8:C4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138372e302e3134302e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:c2:51:c1:51:72:95:02:2d:c1:c0:43:0d:7e:e8:19:2e:f4:
         10:c3:82:c4:e3:76:46:1c:e2:cf:34:e8:05:ec:87:25:a3:a2:
         6c:15:16:1c:06:8f:b7:e2:8e:29:19:48:cb:1c:f8:82:b8:3d:
         3e:1d:06:b6:89:e5:ee:fe:82:66:0f:5a:fe:e8:83:2e:27:97:
         31:23:d5:47:a9:c1:00:e1:54:56:a3:f1:03:fe:72:6e:b6:eb:
         cd:5f:ce:2f:2d:cf:eb:82:8b:83:88:01:cb:d0:de:ff:cd:ec:
         1a:96:86:01:a4:87:c1:e4:86:ad:c8:30:59:07:7d:62:7d:8f:
         c7:db:d3:98:21:18:bc:fb:43:80:e5:76:9f:20:53:cd:dc:87:
         ec:29:0e:d0:b5:6c:b2:44:36:5d:1d:13:16:bb:04:de:e3:df:
         70:8e:4e:0a:fd:55:b4:ef:6a:39:6f:a5:84:3f:59:ee:87:d5:
         33:1b:4c:cd:47:8f:97:eb:60:0e:08:a0:c1:6a:ac:36:15:f0:
         b7:ec:f2:a6:bf:69:47:0a:d1:8e:ef:89:94:c3:6c:0c:44:8a:
         d2:1b:39:70:1a:fc:a1:74:ea:6a:0f:0e:cd:bf:01:00:dd:5b:
         53:b6:12:97:5e:0a:d9:cf:e3:1e:83:ce:b9:40:d8:b3:81:af:
         39:b2:c9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:43:53 2026 by rpki-client