Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3138362e3235312e3231342e302f32332d3233203d3e203232313238.roa
File:                     3138362e3235312e3231342e302f32332d3233203d3e203232313238.roa (raw, json)
Hash identifier:          iihEGbe9+bwyqEogyFRTqggu8rWKaUnkXyYFjiKwAjo=
Subject key identifier:   2E:ED:17:2F:D9:50:7D:BC:D2:FF:3E:69:F0:49:BC:85:89:85:3E:22
Certificate issuer:       /CN=14BE2DC7DA29D6A3E51E817626C1D961B3BA6787
Certificate serial:       685C5C9F0E0EFACE50E79ED4DFE99376B4FFB53A
Authority key identifier: 14:BE:2D:C7:DA:29:D6:A3:E5:1E:81:76:26:C1:D9:61:B3:BA:67:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3138362e3235312e3231342e302f32332d3233203d3e203232313238.roa
Signing time:             Tue 07 Apr 2026 17:03:00 +0000
ROA not before:           Tue 07 Apr 2026 16:58:00 +0000
ROA not after:            Tue 06 Apr 2027 17:03:00 +0000
asID:                     22128
IP address blocks:        186.251.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.crl
                          rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 15:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5c:5c:9f:0e:0e:fa:ce:50:e7:9e:d4:df:e9:93:76:b4:ff:b5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14BE2DC7DA29D6A3E51E817626C1D961B3BA6787
        Validity
            Not Before: Apr  7 16:58:00 2026 GMT
            Not After : Apr  6 17:03:00 2027 GMT
        Subject: CN=2EED172FD9507DBCD2FF3E69F049BC8589853E22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9d:1b:1f:1f:b4:64:9a:e7:94:95:3a:85:11:
                    d9:ef:84:68:01:09:83:fc:6c:ab:67:e5:f4:39:95:
                    23:0a:bb:f3:ef:f6:a2:10:74:a7:65:ee:cd:45:60:
                    b4:5a:68:53:f3:e5:2c:f8:9c:a0:53:4d:b5:d6:e0:
                    ec:00:4f:c0:ae:24:91:51:f4:d2:7a:26:5a:79:c6:
                    5b:8f:91:5a:c3:b8:fb:7b:b5:10:2a:b3:98:bc:51:
                    91:1f:b2:c5:16:1c:06:f3:5e:f0:de:1e:b5:81:e5:
                    48:24:b6:54:be:e1:d6:13:29:8f:37:8a:73:7e:f8:
                    12:b5:33:41:3f:f0:45:68:43:2b:b4:5e:36:5e:51:
                    33:89:ee:70:db:04:de:be:99:e8:47:63:c6:c1:83:
                    47:28:dc:5e:19:17:63:53:77:17:a1:28:56:94:24:
                    67:56:9c:42:99:22:19:b5:c4:4e:6a:58:58:98:70:
                    04:fa:58:a3:7a:99:5d:b4:7a:dd:31:4b:f4:b3:bf:
                    a4:26:7f:81:a8:fb:bd:67:06:40:f7:6f:3e:96:a7:
                    b4:c2:90:2c:3a:9e:ba:8c:d4:c7:af:8a:21:d0:04:
                    36:03:12:c1:e9:e4:1e:01:44:6e:d3:bb:76:bd:a9:
                    2f:7a:80:86:00:35:13:ce:4f:c2:d8:c1:a1:33:8b:
                    3b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:ED:17:2F:D9:50:7D:BC:D2:FF:3E:69:F0:49:BC:85:89:85:3E:22
            X509v3 Authority Key Identifier:
                keyid:14:BE:2D:C7:DA:29:D6:A3:E5:1E:81:76:26:C1:D9:61:B3:BA:67:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3138362e3235312e3231342e302f32332d3233203d3e203232313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:e2:70:03:3a:ec:35:c1:52:a1:4d:ea:78:3d:4b:ee:a5:90:
         31:83:4b:b5:15:12:99:03:08:6b:8b:82:03:4e:cf:01:d5:20:
         db:ba:28:30:b8:a2:3e:b2:66:fd:22:1a:b5:a5:3f:6b:f3:9f:
         3e:c4:f2:fc:bb:1f:3a:37:7c:37:30:65:83:ba:a9:75:6b:e3:
         a6:db:40:b9:5f:d8:91:f6:ab:42:6d:b3:13:56:78:97:91:73:
         ae:35:ec:20:e5:5b:02:0f:88:f8:65:45:1b:70:1e:12:e1:b0:
         bf:32:ec:73:bc:d0:27:5f:0f:02:2d:f3:6a:e2:2f:93:a5:9e:
         69:ac:4c:fa:2f:da:92:fa:5e:be:3b:ca:f5:bb:72:57:12:ec:
         f9:df:3a:14:68:3b:a0:51:40:f6:20:29:78:20:61:af:4f:f8:
         95:11:5d:52:30:68:3b:22:79:77:d6:e0:39:d2:7a:b6:af:3e:
         9c:23:ba:1a:7b:fe:c0:cd:71:09:50:e3:2d:12:77:1f:fa:a9:
         9b:14:bd:13:7c:d0:1a:cc:b0:64:96:f6:a3:eb:81:c1:90:d6:
         82:21:40:9a:fe:f3:66:13:6b:d8:3d:cb:d5:a2:bb:22:0f:66:
         54:21:bd:64:b0:27:5b:7f:99:8d:bb:55:9f:e7:bf:3d:8b:69:
         0a:d6:e3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:05:26 2026 by rpki-client