Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3134332e3133372e3138382e302f32332d3234203d3e203533313037.roa
File:                     3134332e3133372e3138382e302f32332d3234203d3e203533313037.roa (raw, json)
Hash identifier:          Q006R7CBSb7yrX92LqZj49fnMnG6ZR9jXsWf3S566fA=
Subject key identifier:   7A:2F:4B:3C:92:E2:8B:BE:FD:E1:6B:72:2D:79:57:E3:8E:C8:CB:B3
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       56724FCBC2F03534BF1DC21B73D345A14D1EB21D
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3134332e3133372e3138382e302f32332d3234203d3e203533313037.roa
Signing time:             Tue 09 Jun 2026 01:56:43 +0000
ROA not before:           Tue 09 Jun 2026 01:51:43 +0000
ROA not after:            Tue 08 Jun 2027 01:56:43 +0000
asID:                     53107
IP address blocks:        143.137.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 14:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:72:4f:cb:c2:f0:35:34:bf:1d:c2:1b:73:d3:45:a1:4d:1e:b2:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Jun  9 01:51:43 2026 GMT
            Not After : Jun  8 01:56:43 2027 GMT
        Subject: CN=7A2F4B3C92E28BBEFDE16B722D7957E38EC8CBB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b8:ac:a8:75:c7:b7:bd:b6:04:6b:0d:07:9b:
                    ce:a4:ac:ef:c5:de:46:4c:64:3f:95:23:8d:68:c6:
                    59:38:4a:03:69:a5:52:22:db:84:2a:18:7c:46:4a:
                    88:87:ed:45:f8:fe:9a:d9:c0:d8:f0:8e:bd:69:31:
                    ab:89:dc:19:b8:18:8e:b0:e0:f4:30:e6:97:0c:f7:
                    40:2f:f6:28:70:0e:17:7d:30:b4:1b:ee:d3:f7:b5:
                    96:92:08:31:cb:cc:31:68:70:dd:fe:30:40:cc:ae:
                    d7:0a:ad:fe:84:25:e2:0c:c4:7b:e2:04:df:f5:98:
                    7b:53:20:31:10:48:3b:b3:26:2c:6a:65:3b:cc:e2:
                    55:b3:5f:17:79:99:55:4b:d4:85:24:02:93:81:40:
                    c2:71:99:9a:99:c0:02:3c:03:b2:80:e5:ad:dc:f2:
                    e2:bb:e1:d5:a4:8b:bb:9f:7e:43:9c:8f:6b:fc:46:
                    34:f3:13:d5:7d:5c:62:92:26:6b:22:a0:ef:1f:2a:
                    41:27:a9:19:1b:51:a4:ac:91:53:e8:c7:2b:b2:4c:
                    a4:c1:70:b3:72:2b:ad:5d:1d:0b:e5:6c:2e:5f:55:
                    81:ae:54:ef:95:15:0c:22:3f:f1:fd:56:5a:0f:00:
                    b7:b3:9f:43:0a:7d:2b:0b:47:d5:e1:df:30:a4:c2:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2F:4B:3C:92:E2:8B:BE:FD:E1:6B:72:2D:79:57:E3:8E:C8:CB:B3
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3134332e3133372e3138382e302f32332d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:62:0d:a8:b7:c9:db:cf:93:7d:19:dc:37:6e:2a:7a:04:3f:
         be:b5:4c:3f:85:7a:2e:c1:48:73:bc:61:1f:45:c0:79:bc:76:
         42:28:ec:43:9a:80:b5:14:6a:47:37:d2:83:21:9b:fb:22:63:
         4f:06:28:bf:53:b5:e2:70:5d:a3:1d:95:b5:43:38:e9:c2:18:
         96:eb:56:7e:a8:f4:7c:41:25:f6:60:d4:8c:93:98:e1:a7:60:
         9f:51:38:d4:1b:e8:19:6e:c3:a4:72:5d:18:4d:18:b3:10:85:
         52:2d:d2:3a:7b:48:b3:d9:e8:b4:e4:cc:bd:29:8e:ec:5f:a9:
         c9:f4:94:2a:73:33:63:f7:8e:ac:00:cf:56:12:31:00:f1:e9:
         1e:f2:65:65:48:a7:5e:27:f7:4c:1b:92:ab:a9:10:3b:73:0e:
         5b:8d:1a:59:8e:5c:a5:05:3b:1d:f5:14:64:3e:86:b7:65:ac:
         a0:a7:50:51:88:bc:6c:b3:a2:e2:38:2c:1a:93:25:6c:8d:0a:
         ae:ae:02:13:9a:ec:ef:7f:83:5a:1e:8b:5d:da:57:dd:a6:f8:
         22:f2:22:5a:e1:b8:9d:8f:20:5a:05:15:8d:7e:65:2e:c4:da:
         58:f3:4f:60:10:71:5b:4b:0c:aa:16:ae:01:01:4a:30:b1:37:
         d0:9b:c2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:16:50 2026 by rpki-client