Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/3138372e33312e3133302e302f32342d3234203d3e20323638313838.roa
File:                     3138372e33312e3133302e302f32342d3234203d3e20323638313838.roa (raw, json)
Hash identifier:          PmZoNx7JAT5p0XksJkfqtoFoyK4iCw7CQkrtcn24vfQ=
Subject key identifier:   D8:88:5D:3D:E3:63:46:62:33:54:48:FA:E3:7A:E0:15:DE:10:AC:52
Certificate issuer:       /CN=6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2
Certificate serial:       06A615FE0A99B2CC6B4E85AF08D7DF6892585BC5
Authority key identifier: 6A:D7:3C:62:7C:D5:5D:F9:A3:DA:F8:8D:8A:D2:45:16:9D:BD:F0:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/3138372e33312e3133302e302f32342d3234203d3e20323638313838.roa
Signing time:             Wed 28 Oct 2026 18:15:10 +0000
ROA not before:           Wed 28 Oct 2026 18:10:10 +0000
ROA not after:            Wed 27 Oct 2027 18:15:10 +0000
asID:                     268188
IP address blocks:        187.31.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.crl
                          rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 14:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a6:15:fe:0a:99:b2:cc:6b:4e:85:af:08:d7:df:68:92:58:5b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2
        Validity
            Not Before: Oct 28 18:10:10 2026 GMT
            Not After : Oct 27 18:15:10 2027 GMT
        Subject: CN=D8885D3DE3634662335448FAE37AE015DE10AC52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:1f:d3:f2:b7:95:6e:ee:77:28:0e:7c:c3:
                    70:57:c3:9c:6c:27:e2:f5:77:54:57:ed:86:9b:10:
                    31:16:b6:fe:92:3f:96:6b:f8:80:1f:d9:5a:ea:34:
                    03:02:81:0e:ac:c5:4e:ab:5c:af:ed:2f:dc:cd:e4:
                    0e:64:b8:36:ff:e5:61:bb:94:c0:ac:25:8f:d0:2f:
                    85:c8:5b:ad:e4:e4:58:ca:8c:30:0a:36:1d:63:f0:
                    2c:f6:32:6b:2b:54:ce:20:22:8e:36:3c:78:ea:b3:
                    15:8a:c6:90:5c:62:79:c1:3b:41:b5:54:96:66:c4:
                    87:07:7c:54:80:0b:6b:f6:36:16:1f:3d:58:a1:98:
                    61:4b:16:a5:5b:53:d2:18:83:26:38:a8:76:1b:fa:
                    7f:ad:ff:3b:82:73:1e:1a:b4:a9:b1:1c:41:2c:5c:
                    4b:a8:5f:0b:52:2e:cf:f3:0a:16:c0:51:9b:99:2f:
                    42:cb:c4:3d:a1:1e:77:c0:3e:92:0f:c9:03:1b:00:
                    cb:dd:a1:10:94:69:86:fa:e5:91:37:68:13:e7:c6:
                    8f:25:7b:55:b5:bc:e4:49:0a:35:aa:3e:ec:31:18:
                    6b:bc:e3:97:d1:31:1e:59:7f:4c:2e:fd:68:4a:8d:
                    fc:a5:a4:66:ef:c0:71:3f:e6:85:93:95:a6:07:e7:
                    4b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:88:5D:3D:E3:63:46:62:33:54:48:FA:E3:7A:E0:15:DE:10:AC:52
            X509v3 Authority Key Identifier:
                keyid:6A:D7:3C:62:7C:D5:5D:F9:A3:DA:F8:8D:8A:D2:45:16:9D:BD:F0:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/3138372e33312e3133302e302f32342d3234203d3e20323638313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.31.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:41:2c:8d:89:9b:f4:00:31:70:ad:b7:a4:f9:56:31:0f:ab:
         9d:2b:e0:5e:de:ee:ad:ad:c4:35:cf:b1:ef:68:4a:52:2a:76:
         7f:63:0d:96:70:83:64:d6:06:d5:35:71:f3:fb:ea:da:d6:47:
         91:f0:5e:32:b0:ee:e5:d8:54:3c:f8:0d:c0:bc:54:16:79:1c:
         c6:97:e6:30:46:ef:47:73:6e:77:8e:7c:b0:07:bc:f1:e2:f4:
         1b:93:9b:af:91:ac:ce:c3:49:d6:c8:67:cd:3a:b1:ea:99:cd:
         9b:15:2e:c8:84:a9:c3:1e:a3:2a:83:0e:42:05:71:18:0d:b6:
         ea:96:78:d4:35:00:97:f7:fc:1e:8c:f6:38:e5:78:54:0b:c2:
         2d:5e:a3:86:ba:c1:39:35:e6:2c:3b:58:9e:8a:45:5f:62:52:
         3d:60:51:4e:f9:b4:1a:4e:eb:fb:d0:29:48:18:fb:d0:6b:36:
         ff:4b:93:dc:3f:f2:54:ae:af:02:4d:bd:4d:e9:60:ae:cf:ce:
         68:76:c1:28:f5:46:d0:d4:b8:93:fc:7e:4d:9f:93:7b:43:e9:
         9d:c7:e8:e1:72:9b:4e:70:45:33:96:4b:6a:7b:89:7a:21:af:
         73:23:2e:37:14:e6:9e:b7:b4:b9:41:75:ff:b1:71:df:fc:a4:
         7d:f3:18:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 20:59:22 2026 by rpki-client