Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133322e302f32342d3234203d3e203237373135.roa
File:                     3138372e312e3133322e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          yIMR8en6VnNYnT33QGj3/drpS96Eol/ge2GkpNMypeI=
Subject key identifier:   85:89:03:53:C0:7D:38:C7:7F:67:F6:2C:28:0A:24:45:46:3E:06:33
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       1C8F1F8D9A2B07003C5C18B46F13318EADAD03DC
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133322e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 21 Sep 2026 12:30:59 +0000
ROA not before:           Mon 21 Sep 2026 12:25:59 +0000
ROA not after:            Mon 20 Sep 2027 12:30:59 +0000
asID:                     27715
IP address blocks:        187.1.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8f:1f:8d:9a:2b:07:00:3c:5c:18:b4:6f:13:31:8e:ad:ad:03:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Sep 21 12:25:59 2026 GMT
            Not After : Sep 20 12:30:59 2027 GMT
        Subject: CN=85890353C07D38C77F67F62C280A2445463E0633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:ca:0c:7f:99:88:49:b8:30:89:1b:10:1f:
                    dd:5c:fa:83:a4:0c:b8:16:33:0a:41:93:49:4f:d4:
                    52:a9:fe:c5:f7:ef:9a:24:d6:21:8e:22:ac:ed:25:
                    de:16:63:31:27:6f:1c:65:c8:92:6c:8a:1a:cc:64:
                    ad:e1:52:3a:93:13:32:4a:a0:52:5a:0d:7d:8f:1a:
                    78:60:12:32:47:d8:87:74:c4:df:03:83:50:8c:fb:
                    07:8b:af:49:39:4f:de:a9:f8:95:64:6e:53:b7:90:
                    fb:2e:46:b8:84:17:be:90:01:a9:59:fa:97:ce:4e:
                    bd:35:71:6a:02:64:af:b8:d5:0e:6e:18:76:ad:61:
                    e9:a4:51:01:09:10:42:bf:92:c3:03:d2:50:e3:ec:
                    14:64:b4:c7:d3:8f:a3:68:6f:8a:ed:8f:18:f2:f2:
                    e9:e9:83:32:16:70:ca:1c:f3:ce:8d:a7:03:55:63:
                    78:d2:b9:87:c0:cf:cd:73:c5:41:a0:12:04:ef:86:
                    57:42:3d:54:89:1d:bb:53:a1:db:22:c5:08:29:aa:
                    34:43:75:40:74:6d:19:c7:c9:83:1c:4c:e2:07:6d:
                    0c:9f:a8:9a:0b:3e:7f:f4:bc:48:d1:ad:15:18:81:
                    8f:ae:e3:ae:09:d1:8c:57:ec:4a:59:ea:83:a7:46:
                    93:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:89:03:53:C0:7D:38:C7:7F:67:F6:2C:28:0A:24:45:46:3E:06:33
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133322e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:be:93:bb:93:4f:e5:17:ad:c4:c2:2f:d1:1c:b4:14:e1:8c:
         d5:fb:8c:c9:2e:f0:35:ff:5c:ee:3d:90:9c:89:5d:cd:df:a0:
         84:22:65:3d:21:c9:a6:32:a3:40:ab:bd:24:c7:37:82:fa:20:
         87:0a:af:31:06:74:17:6f:ff:d2:c9:99:98:e4:52:dd:bf:7b:
         98:82:ff:56:dc:8b:d6:3a:00:66:c8:6d:c2:f6:48:04:10:fe:
         35:b4:b7:ab:36:fe:76:04:39:d5:e9:5d:e8:78:5c:90:b4:0b:
         2a:36:91:fb:f9:4c:9f:17:ab:01:ac:5d:3c:88:9f:4b:28:f7:
         17:38:84:cd:2a:ce:36:41:d4:e1:8f:93:d0:0c:34:dd:4a:36:
         79:6c:cd:73:74:df:65:76:11:39:ba:bd:5e:cd:20:0c:87:ff:
         7b:e8:04:c4:76:e2:19:78:cc:7c:10:1a:f4:41:9d:86:2a:e7:
         9a:50:51:c7:6c:96:22:e8:9e:05:27:3e:14:1c:e8:f3:cb:b7:
         73:f0:b7:25:73:aa:f3:85:64:83:70:dc:ff:9c:fb:31:e1:19:
         3c:13:23:6c:85:78:e2:42:19:8c:2c:5c:37:16:58:20:63:91:
         6e:fa:c8:6f:cb:72:99:de:c5:79:2c:a5:3c:e9:4c:f1:e5:59:
         f9:5d:a7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:23:59 2026 by rpki-client