Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/3138312e3138392e3132362e302f32342d3234203d3e20323731353032.roa
File:                     3138312e3138392e3132362e302f32342d3234203d3e20323731353032.roa (raw, json)
Hash identifier:          T0gzSDVwjXIQcNoUo7Ts00btkH8Iepn5gfBK82fbJz4=
Subject key identifier:   E0:41:C9:4E:20:2E:EE:B5:B9:6F:7C:9A:F0:33:28:50:6A:96:DA:01
Certificate issuer:       /CN=6F829768E6FF5165C19F6DEBD0D7BC9614E1A029
Certificate serial:       7EF3CCC5880803CEFCFB3257FF8A05C8BE21D10A
Authority key identifier: 6F:82:97:68:E6:FF:51:65:C1:9F:6D:EB:D0:D7:BC:96:14:E1:A0:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F829768E6FF5165C19F6DEBD0D7BC9614E1A029.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/3138312e3138392e3132362e302f32342d3234203d3e20323731353032.roa
Signing time:             Wed 10 Jun 2026 16:07:51 +0000
ROA not before:           Wed 10 Jun 2026 16:02:51 +0000
ROA not after:            Wed 09 Jun 2027 16:07:51 +0000
asID:                     271502
IP address blocks:        181.189.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/6F829768E6FF5165C19F6DEBD0D7BC9614E1A029.crl
                          rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/6F829768E6FF5165C19F6DEBD0D7BC9614E1A029.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F829768E6FF5165C19F6DEBD0D7BC9614E1A029.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f3:cc:c5:88:08:03:ce:fc:fb:32:57:ff:8a:05:c8:be:21:d1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F829768E6FF5165C19F6DEBD0D7BC9614E1A029
        Validity
            Not Before: Jun 10 16:02:51 2026 GMT
            Not After : Jun  9 16:07:51 2027 GMT
        Subject: CN=E041C94E202EEEB5B96F7C9AF03328506A96DA01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:73:af:5a:86:46:7b:b5:1e:8c:7e:f8:9b:64:
                    67:e7:dc:44:c5:d7:eb:85:25:40:42:db:b4:da:ef:
                    bb:28:54:78:8f:53:62:df:ec:de:68:01:fc:0d:1a:
                    0c:dd:22:8f:89:80:01:67:cf:80:89:6c:23:ba:ea:
                    26:99:6b:72:86:e9:6c:e7:df:9c:7e:cc:c2:09:33:
                    de:54:fc:0a:58:45:b2:5a:cd:b5:d1:10:53:5f:7c:
                    ef:76:82:aa:a7:59:46:b4:fa:bc:89:0b:23:8f:b8:
                    6c:1c:25:8e:c6:ec:94:46:2f:2b:d6:f4:a1:23:fa:
                    f3:fe:70:fb:f9:ec:b2:0c:24:7c:5b:4c:32:a0:7b:
                    58:af:27:e3:5e:3c:d2:8c:cb:28:f0:5b:7c:c5:ff:
                    62:ee:d8:0b:cb:ba:9b:ce:1d:43:c0:e8:70:ec:8c:
                    6c:ff:34:8f:85:88:30:e2:fa:f5:d4:6d:a7:ba:a6:
                    b7:b8:5a:6b:7b:6f:31:92:ad:97:35:a6:23:21:3c:
                    10:04:a5:dc:38:d7:b7:65:67:ee:09:1d:ad:a5:c7:
                    07:04:5e:27:36:d5:0f:e2:03:2c:d9:96:b5:04:41:
                    c5:3c:f4:2a:25:f0:40:67:c6:15:59:5a:4b:42:99:
                    09:86:7c:34:d7:95:54:6c:93:50:c9:b0:ee:a0:34:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:41:C9:4E:20:2E:EE:B5:B9:6F:7C:9A:F0:33:28:50:6A:96:DA:01
            X509v3 Authority Key Identifier:
                keyid:6F:82:97:68:E6:FF:51:65:C1:9F:6D:EB:D0:D7:BC:96:14:E1:A0:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/6F829768E6FF5165C19F6DEBD0D7BC9614E1A029.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F829768E6FF5165C19F6DEBD0D7BC9614E1A029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/3138312e3138392e3132362e302f32342d3234203d3e20323731353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:a4:1d:e3:b5:02:09:18:8a:3a:1e:f3:57:56:99:5b:8e:1a:
         bb:55:d3:3d:bc:00:e5:11:29:36:9e:1c:8f:0b:b2:7f:00:56:
         d3:74:4a:ba:19:35:1c:3b:81:5a:f4:de:dc:86:2e:f5:25:70:
         fd:e3:14:6b:d8:44:61:ea:b0:80:50:81:37:0b:ae:7c:15:45:
         20:0e:57:f5:8d:44:a9:02:a3:c5:39:fd:02:ed:56:5e:51:cf:
         45:1a:07:ed:07:28:d3:ea:98:6c:51:87:ad:63:17:a6:a9:e3:
         3d:81:4a:76:db:b2:09:0f:d5:eb:7d:77:e7:1e:48:52:d4:fd:
         0e:d0:f5:01:6f:31:f3:2b:29:26:b0:a8:18:c0:55:60:fd:32:
         ab:58:b2:ba:b4:b4:79:1a:54:ef:e4:2d:5c:78:e0:b4:78:e9:
         13:af:65:4d:2e:f0:c0:d6:27:69:b7:e7:66:da:ec:af:0b:70:
         43:75:47:63:6c:82:0e:ce:4b:38:8e:c7:4f:b4:71:c1:40:3f:
         b4:d5:5c:e2:d5:1c:30:ae:7a:c0:20:cb:5f:5a:d4:e3:28:ea:
         83:67:c7:ae:ae:88:fa:0d:e9:27:34:95:15:cd:81:61:48:55:
         04:7c:6b:bf:87:9b:b7:93:df:ed:d3:78:9e:0d:49:d9:f9:ad:
         b5:c7:39:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:54:49 2026 by rpki-client