Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3136382e3139352e31322e302f32322d3234203d3e203533313037.roa
File:                     3136382e3139352e31322e302f32322d3234203d3e203533313037.roa (raw, json)
Hash identifier:          XoMFBLR1Bhg6MI2CkvJkGMB7bAk2f+3MZFiNv/rLi84=
Subject key identifier:   31:99:1D:9C:7A:B4:A1:4D:5D:DA:47:F2:3D:44:85:68:E4:7F:77:F0
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       079BD719C344D30CE565BF3BA8DC4DB36E84715E
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3136382e3139352e31322e302f32322d3234203d3e203533313037.roa
Signing time:             Wed 03 Jun 2026 14:54:26 +0000
ROA not before:           Wed 03 Jun 2026 14:49:26 +0000
ROA not after:            Wed 02 Jun 2027 14:54:26 +0000
asID:                     53107
IP address blocks:        168.195.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 14:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9b:d7:19:c3:44:d3:0c:e5:65:bf:3b:a8:dc:4d:b3:6e:84:71:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Jun  3 14:49:26 2026 GMT
            Not After : Jun  2 14:54:26 2027 GMT
        Subject: CN=31991D9C7AB4A14D5DDA47F23D448568E47F77F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:50:06:3c:a2:b8:ee:2c:c2:92:23:90:f6:77:
                    a1:d0:0d:fd:76:af:7b:0d:58:da:f0:41:ff:a2:ae:
                    68:7d:ef:6f:c7:57:88:11:4a:5c:97:8b:0c:55:61:
                    89:9b:87:f5:89:ce:00:99:39:ff:28:84:58:5f:8b:
                    8b:52:99:73:89:21:29:d7:38:18:6a:61:da:81:64:
                    45:7d:7f:b6:d8:d8:18:e3:e9:d9:e9:f8:6c:5e:64:
                    93:ab:db:b2:95:3a:d8:3e:71:af:db:bb:30:1c:1a:
                    ec:13:6a:db:b2:a6:60:ab:b7:65:ba:da:64:05:12:
                    29:1b:ea:7e:15:38:87:1c:d6:ac:1c:95:dc:2b:ec:
                    bb:45:f5:fa:4d:29:28:3b:cf:0b:f5:68:ac:25:a2:
                    fb:dd:37:3d:86:62:f7:4e:c5:df:14:1d:03:e8:b9:
                    f1:ac:5f:3b:e3:da:b8:ce:79:3d:0d:78:77:88:b7:
                    82:b8:5c:83:73:52:07:9a:b0:bd:e3:11:64:c3:e9:
                    7c:52:36:c8:d4:53:6a:91:94:71:6a:29:5f:d9:12:
                    21:3a:81:23:bf:21:b4:20:9c:43:a5:d1:d5:13:f3:
                    00:58:3d:87:bd:51:5f:88:d0:b8:5a:80:b0:b6:dc:
                    25:52:79:59:46:ae:27:f4:55:1f:03:5b:63:7c:9e:
                    a7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:99:1D:9C:7A:B4:A1:4D:5D:DA:47:F2:3D:44:85:68:E4:7F:77:F0
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3136382e3139352e31322e302f32322d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:37:a6:e2:05:0f:5f:bc:78:8f:02:23:c7:2e:44:d8:83:a0:
         cc:94:15:ae:bc:bb:bb:b7:01:9b:89:89:f1:82:62:99:ca:a7:
         6d:27:aa:49:cd:0c:fe:55:6c:5f:4e:5f:89:46:c1:83:25:54:
         6b:1d:9d:ea:9e:84:f2:e5:1d:98:bc:f5:1d:10:a3:6d:1d:02:
         78:b9:be:f8:ae:76:a1:11:e6:90:62:12:08:48:2a:56:34:e5:
         0f:af:a5:53:93:ee:e3:74:a8:76:dc:e1:ac:2e:5c:84:cc:5a:
         91:d9:b6:5a:e5:9b:16:c1:aa:32:57:20:d2:a7:db:f9:1a:64:
         12:09:17:b3:24:8f:75:6d:ac:42:34:7e:db:0f:8a:47:6a:dd:
         3f:31:e8:66:7e:f6:f0:bf:b8:d1:45:17:35:7b:43:ad:8d:05:
         82:83:59:2c:6c:10:98:0d:5b:ea:8e:18:1c:65:0c:54:19:be:
         0e:db:0f:ff:c5:29:2b:6c:6d:5f:84:b9:60:a1:e8:4e:ea:23:
         e3:34:e3:35:ed:06:b1:7c:b3:63:ba:e6:ec:fe:c1:98:d0:72:
         29:b1:9e:ef:6c:02:56:8a:c4:fc:e4:5a:df:f3:e8:94:f0:2b:
         ec:06:8f:0c:37:df:7d:4f:31:36:5a:29:79:5b:7f:20:d4:6c:
         05:41:52:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:16:02 2026 by rpki-client