Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231332e302f32342d3332203d3e203238313430.roa
File:                     3138372e3130332e3231332e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          2bI7+V0cfA/3WdA/yOfo+WDWwn3UU8j/vEKln0rs2H0=
Subject key identifier:   5D:01:EE:64:9D:71:13:B8:0B:E7:E8:C4:E3:F1:85:B8:F2:09:29:00
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       512560322E70B4EE8A02B2CD21B8550429DB9106
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231332e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 10 Jun 2026 03:24:52 +0000
ROA not before:           Wed 10 Jun 2026 03:19:52 +0000
ROA not after:            Wed 09 Jun 2027 03:24:52 +0000
asID:                     28140
IP address blocks:        187.103.213.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:25:60:32:2e:70:b4:ee:8a:02:b2:cd:21:b8:55:04:29:db:91:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jun 10 03:19:52 2026 GMT
            Not After : Jun  9 03:24:52 2027 GMT
        Subject: CN=5D01EE649D7113B80BE7E8C4E3F185B8F2092900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:71:a0:25:24:c7:9b:9d:4f:05:19:bd:12:f2:
                    70:b8:7a:3c:32:89:79:70:1d:68:ec:21:0d:33:dc:
                    f2:da:b9:b0:a5:b0:f3:06:0a:80:09:da:4d:8b:dd:
                    48:e0:5a:ba:8d:1e:83:08:08:f6:0a:8e:c5:15:48:
                    48:50:83:0b:fd:bd:9c:d3:03:c0:11:b1:cb:16:17:
                    30:fe:b3:83:a3:05:ac:16:31:67:52:bb:38:32:73:
                    d5:6e:c5:2a:fe:c1:18:8c:b3:6b:cf:6c:03:99:6e:
                    2b:2d:47:b7:04:7f:c2:51:33:57:ff:73:c5:4e:19:
                    94:6c:e7:21:62:c4:61:c9:29:9c:32:75:83:93:ac:
                    69:75:36:3d:3c:81:6a:d9:45:aa:0f:65:bb:db:51:
                    50:02:09:0a:00:22:9c:bc:b5:ea:08:af:45:d0:14:
                    4a:d2:37:0b:31:2d:04:a6:04:d7:d5:12:bd:a0:51:
                    5d:c8:43:07:bb:e5:f2:f7:34:03:d4:63:51:db:af:
                    31:9c:fe:e6:48:2f:b3:8b:cf:57:ea:91:cc:28:51:
                    9b:40:28:f6:d7:6e:72:0f:69:9c:66:9a:ab:b7:58:
                    3c:a8:d6:81:ea:e2:47:e7:a9:64:96:04:f1:6e:e9:
                    4c:bc:4d:1e:85:32:18:4c:79:78:a5:05:69:b4:f1:
                    40:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:01:EE:64:9D:71:13:B8:0B:E7:E8:C4:E3:F1:85:B8:F2:09:29:00
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231332e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:50:38:12:b7:38:24:c0:17:97:8f:1c:2e:ed:64:95:57:9f:
         dc:1f:bb:e6:3f:48:55:66:2c:a0:d7:44:cb:f6:b2:e3:76:da:
         49:b2:7f:fd:5a:c2:9a:9e:1b:c1:14:4f:12:a9:8f:88:9e:bb:
         5b:5a:e9:c0:aa:32:e8:77:87:02:6d:ed:22:1a:90:b1:7a:d9:
         23:f6:b0:e0:71:f1:83:60:c2:38:5a:c8:5a:66:5a:87:2e:5f:
         50:f7:a0:f2:7a:87:ca:03:3e:28:3e:9c:c5:af:50:d5:cc:92:
         0e:e3:c0:4d:c8:b0:3a:73:8f:4a:3c:ba:20:3e:da:eb:39:9b:
         8c:78:4c:d7:a4:be:c9:53:4b:0e:61:fa:c9:4f:1c:2f:e7:a5:
         e1:db:da:8e:d3:66:31:d9:8a:fd:cc:c5:bb:1d:b6:70:db:b0:
         ca:94:97:e6:1f:bc:c9:9b:d5:24:da:dc:47:ce:d0:7c:38:4e:
         c6:eb:b4:fb:b8:fa:75:c9:19:b4:15:8e:ba:b3:4a:43:8c:06:
         91:e8:b3:3a:8a:66:c4:40:70:9c:cf:a9:d7:af:d8:f7:69:3c:
         3c:b7:66:7c:30:21:75:a3:9e:ac:fa:0c:4a:a4:15:ab:ba:9c:
         ae:99:3e:de:05:86:50:fc:0e:a3:e0:19:92:ca:9c:23:0d:5d:
         46:9a:f1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:28:32 2026 by rpki-client