Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231352e302f32342d3234203d3e20323634393330.roa
File:                     3136382e3232382e3231352e302f32342d3234203d3e20323634393330.roa (raw, json)
Hash identifier:          ZbbaShrNaP8Vk8CiGHlICd9jStOJTnEo9UB58Aw5ey0=
Subject key identifier:   4F:68:A4:40:06:0A:1F:A9:03:0F:24:60:A0:97:2B:9E:6C:BB:DD:BF
Certificate issuer:       /CN=39E1F5197664D9A2E3133424783F9B2651CB8874
Certificate serial:       1508AF18E4EB734406E02F5969BD1C264CF56E8C
Authority key identifier: 39:E1:F5:19:76:64:D9:A2:E3:13:34:24:78:3F:9B:26:51:CB:88:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E1F5197664D9A2E3133424783F9B2651CB8874.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231352e302f32342d3234203d3e20323634393330.roa
Signing time:             Tue 14 Apr 2026 17:05:23 +0000
ROA not before:           Tue 14 Apr 2026 17:00:23 +0000
ROA not after:            Tue 13 Apr 2027 17:05:23 +0000
asID:                     264930
IP address blocks:        168.228.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/39E1F5197664D9A2E3133424783F9B2651CB8874.crl
                          rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/39E1F5197664D9A2E3133424783F9B2651CB8874.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E1F5197664D9A2E3133424783F9B2651CB8874.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 18:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:08:af:18:e4:eb:73:44:06:e0:2f:59:69:bd:1c:26:4c:f5:6e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E1F5197664D9A2E3133424783F9B2651CB8874
        Validity
            Not Before: Apr 14 17:00:23 2026 GMT
            Not After : Apr 13 17:05:23 2027 GMT
        Subject: CN=4F68A440060A1FA9030F2460A0972B9E6CBBDDBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:59:07:69:05:96:ad:31:35:84:82:01:fc:eb:
                    1c:ae:87:6d:8e:7d:c0:16:61:c1:3a:7e:9e:e2:29:
                    79:a3:aa:7b:79:d8:12:36:97:23:56:36:59:0f:96:
                    bc:2a:89:76:2b:e0:7e:8d:5c:47:ce:3d:5e:c2:fc:
                    02:cd:2c:87:95:26:17:9c:11:37:b6:bb:5c:89:12:
                    14:5e:40:5a:95:f4:17:ae:f2:24:3f:5c:f1:da:f6:
                    be:4f:d2:d8:5a:d0:3e:24:79:65:93:43:95:1f:02:
                    3b:30:f1:a5:55:62:b8:47:8c:e3:6c:87:c9:cc:a5:
                    86:87:be:91:96:4d:d7:81:85:e5:e6:b2:22:53:99:
                    a6:a4:71:8c:65:a7:5b:ac:f6:1a:6f:b8:42:97:24:
                    5d:6a:33:b3:48:71:ce:84:f9:f7:9f:0a:72:d3:26:
                    03:f7:85:7c:38:98:75:1e:91:77:00:b0:ae:c9:ea:
                    b6:65:10:34:0d:fe:27:2f:0e:92:ab:7f:8d:bb:9c:
                    c9:e3:22:ab:bd:11:e4:3a:db:05:31:e3:e4:6b:32:
                    c5:cd:5e:57:59:84:a6:9b:85:27:4b:08:48:b8:6c:
                    9b:2a:6b:7f:c1:6c:bb:26:11:ca:5b:0e:56:e6:f3:
                    53:ad:27:99:76:d6:4c:4f:65:6a:16:cd:48:02:9f:
                    16:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:68:A4:40:06:0A:1F:A9:03:0F:24:60:A0:97:2B:9E:6C:BB:DD:BF
            X509v3 Authority Key Identifier:
                keyid:39:E1:F5:19:76:64:D9:A2:E3:13:34:24:78:3F:9B:26:51:CB:88:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/39E1F5197664D9A2E3133424783F9B2651CB8874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E1F5197664D9A2E3133424783F9B2651CB8874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231352e302f32342d3234203d3e20323634393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:e0:c1:46:d5:c2:80:52:a0:96:4b:f0:a1:55:7f:ad:5c:61:
         60:82:b4:04:7e:33:25:98:bf:44:e0:35:b6:38:45:3d:7e:69:
         a2:ae:22:e3:2a:00:0e:4c:68:e9:df:86:53:a3:38:dd:6b:af:
         1e:9d:2b:70:f6:5c:c9:fc:f7:8d:5d:5e:9a:a4:cc:e3:1b:23:
         87:be:02:49:eb:a8:d9:56:ef:18:18:0a:08:e0:8d:6a:0f:0b:
         bc:3b:a1:b6:09:05:a0:cb:13:fc:7e:de:d0:59:12:1c:e3:39:
         e0:63:ce:05:c7:5a:09:34:d7:d3:2a:93:a6:08:f8:3d:a8:b5:
         3d:b8:ae:03:31:41:35:85:4e:4c:52:49:9b:30:19:b0:17:87:
         ef:c0:7d:1d:05:18:30:e4:f5:20:f9:5f:71:55:2d:de:e4:56:
         fb:ba:1d:e4:af:c9:6e:57:00:43:5a:14:c0:fe:ec:1f:a1:e5:
         69:2b:1a:bf:e0:09:b3:49:04:15:77:ea:08:9a:9b:25:87:4a:
         80:7a:cb:80:aa:9a:c0:46:9c:a7:dd:7b:d7:25:18:db:53:22:
         94:7f:19:ba:da:12:23:5d:e5:e4:d7:ad:c8:67:06:a8:ff:50:
         a1:20:a1:ae:c7:db:fd:fb:1f:2a:0c:c6:cc:c4:51:a7:9c:00:
         e0:88:7a:76
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFQivGOTrc0QG4C9Zab0cJkz1bowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlFMUY1MTk3NjY0RDlBMkUzMTMzNDI0NzgzRjlCMjY1
MUNCODg3NDAeFw0yNjA0MTQxNzAwMjNaFw0yNzA0MTMxNzA1MjNaMDMxMTAvBgNV
BAMTKDRGNjhBNDQwMDYwQTFGQTkwMzBGMjQ2MEEwOTcyQjlFNkNCQkREQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMWQdpBZatMTWEggH86xyuh22O
fcAWYcE6fp7iKXmjqnt52BI2lyNWNlkPlrwqiXYr4H6NXEfOPV7C/ALNLIeVJhec
ETe2u1yJEhReQFqV9Beu8iQ/XPHa9r5P0tha0D4keWWTQ5UfAjsw8aVVYrhHjONs
h8nMpYaHvpGWTdeBheXmsiJTmaakcYxlp1us9hpvuEKXJF1qM7NIcc6E+fefCnLT
JgP3hXw4mHUekXcAsK7J6rZlEDQN/icvDpKrf427nMnjIqu9EeQ62wUx4+RrMsXN
XldZhKabhSdLCEi4bJsqa3/BbLsmEcpbDlbm81OtJ5l21kxPZWoWzUgCnxa/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUT2ikQAYKH6kDDyRgoJcrnmy73b8wHwYDVR0j
BBgwFoAUOeH1GXZk2aLjEzQkeD+bJlHLiHQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHl1WWZHTEFXUjM0Z0t3d3A0WnZqb0tiQ05ZQm1nQ21jdlpMdHpOa3h6
aVkvMC8zOUUxRjUxOTc2NjREOUEyRTMxMzM0MjQ3ODNGOUIyNjUxQ0I4ODc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5RTFGNTE5NzY2NEQ5QTJF
MzEzMzQyNDc4M0Y5QjI2NTFDQjg4NzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h5dVlmR0xBV1IzNGdLd3dwNFp2am9LYkNOWUJtZ0NtY3ZaTHR6Tmt4emlZLzAv
MzEzNjM4MmUzMjMyMzgyZTMyMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM5MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjk1zANBgkqhkiG9w0BAQsFAAOCAQEAhuDB
RtXCgFKglkvwoVV/rVxhYIK0BH4zJZi/ROA1tjhFPX5poq4i4yoADkxo6d+GU6M4
3WuvHp0rcPZcyfz3jV1emqTM4xsjh74CSeuo2VbvGBgKCOCNag8LvDuhtgkFoMsT
/H7e0FkSHOM54GPOBcdaCTTX0yqTpgj4Pai1PbiuAzFBNYVOTFJJmzAZsBeH78B9
HQUYMOT1IPlfcVUt3uRW+7od5K/JblcAQ1oUwP7sH6HlaSsav+AJs0kEFXfqCJqb
JYdKgHrLgKqawEacp9171yUY21MilH8ZutoSI13l5NetyGcGqP9QoSChrsfb/fsf
KgzGzMRRp5wA4Ih6dg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:32:59 2026 by rpki-client