Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/3138362e3139322e37342e302f32342d3234203d3e20323734383139.roa
File:                     3138362e3139322e37342e302f32342d3234203d3e20323734383139.roa (raw, json)
Hash identifier:          TZvYIPP5sEIeDU4fAGsU+TwTjCbmHCQnZ9ytbDMH12o=
Subject key identifier:   B4:47:4F:7D:1E:79:F0:C9:75:6B:44:7D:8A:0E:29:DE:4D:16:3B:51
Certificate issuer:       /CN=20453DF9CBCD59107BDF91EC0FDEEE8A867A031B
Certificate serial:       73D53484548845F1CFFD06135842B44830B2F3E6
Authority key identifier: 20:45:3D:F9:CB:CD:59:10:7B:DF:91:EC:0F:DE:EE:8A:86:7A:03:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/3138362e3139322e37342e302f32342d3234203d3e20323734383139.roa
Signing time:             Fri 17 Apr 2026 09:28:13 +0000
ROA not before:           Fri 17 Apr 2026 09:23:13 +0000
ROA not after:            Fri 16 Apr 2027 09:28:13 +0000
asID:                     274819
IP address blocks:        186.192.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.crl
                          rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 11:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d5:34:84:54:88:45:f1:cf:fd:06:13:58:42:b4:48:30:b2:f3:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20453DF9CBCD59107BDF91EC0FDEEE8A867A031B
        Validity
            Not Before: Apr 17 09:23:13 2026 GMT
            Not After : Apr 16 09:28:13 2027 GMT
        Subject: CN=B4474F7D1E79F0C9756B447D8A0E29DE4D163B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:33:7d:04:93:66:86:4c:84:85:1c:0b:d8:
                    fb:53:50:46:7d:bc:4b:e1:31:dc:45:af:c5:96:95:
                    e0:d2:59:0a:a9:b6:c1:ce:d8:44:25:b4:50:25:58:
                    e9:dd:42:65:70:4a:5a:2e:db:af:ab:b8:a3:91:17:
                    29:fc:97:87:96:ed:91:16:36:2f:88:1e:63:5e:be:
                    e5:91:a8:e7:06:f2:a0:15:c5:7a:9f:92:5e:cd:4f:
                    5f:0f:b1:d9:59:d1:4f:3a:00:a3:b9:2d:2f:4e:d5:
                    50:c7:42:a1:77:b5:90:9a:2e:2f:34:2e:82:38:a2:
                    e9:50:14:b5:28:e4:42:9e:e1:69:09:20:3f:33:8b:
                    c0:16:36:ba:cb:1c:f6:20:db:49:66:17:90:d5:c9:
                    3c:81:34:21:80:ba:e0:56:c3:32:98:5e:47:7b:e7:
                    71:86:c0:19:0a:5c:c7:9a:ac:88:d5:fb:a1:66:23:
                    7e:29:c4:31:74:93:ad:62:cc:58:20:18:fe:8f:b8:
                    6e:83:26:b1:4d:cf:a4:ff:63:7c:7d:1f:ce:96:fb:
                    35:f7:1a:13:01:f1:0a:eb:62:af:fb:8f:51:eb:90:
                    26:3f:f4:1b:66:b0:54:b0:16:50:3d:ed:6c:4e:1a:
                    cb:94:c6:4f:ad:d5:2e:4d:d3:54:3b:28:15:62:83:
                    37:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:47:4F:7D:1E:79:F0:C9:75:6B:44:7D:8A:0E:29:DE:4D:16:3B:51
            X509v3 Authority Key Identifier:
                keyid:20:45:3D:F9:CB:CD:59:10:7B:DF:91:EC:0F:DE:EE:8A:86:7A:03:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/3138362e3139322e37342e302f32342d3234203d3e20323734383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:c9:1f:4c:6c:64:04:b0:e9:6d:f1:ca:91:d6:77:3a:b1:6a:
         da:45:af:33:82:a4:7c:b9:b4:dd:a5:d0:97:7c:af:01:c1:6d:
         4e:46:5b:b6:52:3e:9e:90:cc:ba:68:30:3c:00:08:0b:fb:c7:
         0a:f9:e3:70:a5:b8:1e:a8:2b:18:55:e4:14:a5:d6:85:13:19:
         73:ce:0c:72:04:ae:d2:8b:a7:24:55:ed:65:5c:e9:aa:a6:f8:
         06:72:3b:72:72:de:fd:9b:62:8b:b1:85:c5:b7:01:e8:26:a9:
         8b:54:45:aa:55:fe:9d:2b:7c:f0:a7:84:74:e4:fa:3e:f1:f0:
         d2:4f:90:a2:fc:54:02:3d:59:30:73:64:23:0a:87:41:6f:55:
         c0:00:51:58:eb:7b:95:71:54:5e:7f:af:5f:68:75:37:01:21:
         8d:ce:2e:93:c0:4f:63:f6:7e:83:74:25:d9:48:87:0f:df:57:
         9e:fd:0a:e8:36:92:2f:60:ca:d7:97:7e:c5:04:3d:41:86:60:
         44:45:47:55:5d:88:d3:4b:cd:ae:3c:25:19:40:e2:37:ce:fa:
         de:0b:1b:28:4d:7a:f3:41:c0:5a:1f:51:f5:9a:b9:ae:dd:3f:
         88:57:2c:ae:1a:2c:ca:5f:ab:c9:70:6b:0f:be:4e:8a:7e:19:
         22:f8:70:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:55 2026 by rpki-client