Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3138372e38362e32342e302f32312d3234203d3e203532393332.roa
File:                     3138372e38362e32342e302f32312d3234203d3e203532393332.roa (raw, json)
Hash identifier:          XLIAw2+95xqliz2z3Oc61O8WkA2jQNMmOfXFruels6k=
Subject key identifier:   56:5C:4D:96:2F:B1:42:9A:C7:D2:63:74:4F:41:BD:D0:E8:48:C1:E8
Certificate issuer:       /CN=058629EB1C805566CA700E3A2EE9B2B066B42FB4
Certificate serial:       21D0D2A59EC9C87CD5B87F1112EE966A4283F1FE
Authority key identifier: 05:86:29:EB:1C:80:55:66:CA:70:0E:3A:2E:E9:B2:B0:66:B4:2F:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3138372e38362e32342e302f32312d3234203d3e203532393332.roa
Signing time:             Fri 25 Jul 2025 13:28:21 +0000
ROA not before:           Fri 25 Jul 2025 13:23:21 +0000
ROA not after:            Fri 24 Jul 2026 13:28:21 +0000
asID:                     52932
IP address blocks:        187.86.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.crl
                          rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 07:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d0:d2:a5:9e:c9:c8:7c:d5:b8:7f:11:12:ee:96:6a:42:83:f1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058629EB1C805566CA700E3A2EE9B2B066B42FB4
        Validity
            Not Before: Jul 25 13:23:21 2025 GMT
            Not After : Jul 24 13:28:21 2026 GMT
        Subject: CN=565C4D962FB1429AC7D263744F41BDD0E848C1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8a:26:5c:97:38:cc:eb:89:50:e8:98:75:ca:
                    a9:fc:35:2b:fc:86:6d:78:57:b4:3d:97:aa:d0:e9:
                    58:44:78:47:55:9f:f0:28:3c:0b:e6:ff:23:fc:7d:
                    ff:ca:a3:bc:d9:aa:6d:14:de:8e:e9:bf:ae:62:32:
                    ff:7c:64:d6:c1:81:7c:b0:6d:5c:38:91:38:10:a4:
                    65:e1:fa:1b:2c:c7:19:f1:58:23:43:40:ad:21:6c:
                    9b:a7:09:bf:4e:25:b0:72:af:96:45:c3:bf:28:b3:
                    9f:3c:41:6a:e0:5b:62:f6:de:73:29:7f:06:ba:bc:
                    9c:89:82:80:ba:df:e0:8f:b1:c8:6d:bf:0a:c9:40:
                    0e:2a:e4:31:45:93:4b:d5:c7:74:d4:fb:e1:9b:25:
                    92:5c:f7:47:32:87:cc:32:d7:80:a1:12:b1:70:0f:
                    c1:e5:e7:3e:80:78:f1:b7:2b:57:22:23:de:e7:5c:
                    ac:70:aa:d2:11:76:32:78:0a:65:2a:2e:ed:1c:4b:
                    16:12:2a:14:fc:20:42:d1:34:ba:13:2e:a1:b8:54:
                    35:50:4e:94:32:f5:b5:6c:e5:96:a4:4f:28:07:72:
                    9c:d0:74:4f:3e:e7:ba:17:c4:81:e2:82:96:b2:47:
                    fd:a2:5a:fc:96:7d:86:6b:34:33:c4:21:46:72:b5:
                    47:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5C:4D:96:2F:B1:42:9A:C7:D2:63:74:4F:41:BD:D0:E8:48:C1:E8
            X509v3 Authority Key Identifier:
                keyid:05:86:29:EB:1C:80:55:66:CA:70:0E:3A:2E:E9:B2:B0:66:B4:2F:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3138372e38362e32342e302f32312d3234203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c8:24:e3:ec:bd:3c:76:d1:53:39:1a:2d:32:8b:03:45:63:03:
         45:52:0d:b0:55:3d:13:9d:26:3c:05:96:51:ed:3c:ba:63:d7:
         b8:76:62:9a:90:18:82:48:06:dc:f4:c7:30:7b:ac:3c:fe:ac:
         20:c8:5b:b2:12:4e:d0:e7:1b:42:35:00:a6:90:e3:16:79:47:
         15:90:73:99:9c:aa:0c:d6:65:17:6f:9f:2e:c3:43:a0:32:74:
         4b:51:3e:1d:b5:db:64:10:1f:a9:6d:59:db:5f:9e:65:a1:b1:
         c4:ae:3a:d4:2a:86:ac:d2:69:2b:17:53:ee:52:0e:a9:d7:bc:
         85:f8:eb:30:21:64:bd:01:8d:4f:d0:13:e4:57:d4:66:be:f7:
         46:2d:53:c5:77:c2:82:21:3e:c8:9e:33:bf:6c:b8:8e:b8:66:
         96:6d:61:e8:e4:9d:39:11:be:f6:0a:bd:86:13:55:88:cf:2d:
         6b:15:36:74:3a:06:de:90:91:83:4d:86:d2:d7:33:88:92:bc:
         e5:7a:58:ab:20:a6:29:05:27:1e:29:70:ba:c0:a8:10:35:fb:
         29:41:35:02:2e:29:fe:bd:92:bc:73:15:c8:e8:bd:65:fc:b3:
         5a:76:fb:c4:ca:7a:8f:7b:e7:34:d5:30:7e:b7:a7:93:77:36:
         f9:2c:54:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:59:01 2025 by rpki-client