Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32312d3231203d3e20323633303539.roa
File:                     3138362e3233322e3135322e302f32312d3231203d3e20323633303539.roa (raw, json)
Hash identifier:          6+196TGm0r/m9Lkt3pSNJrBmw8K8qNlhgsxwB1kZD5M=
Subject key identifier:   83:EF:26:89:40:73:74:EC:5E:E0:5C:E3:12:F0:6D:1E:0B:AB:8F:FD
Certificate issuer:       /CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Certificate serial:       7366C158F8A9DF1EAF97069A7DE59619E38DDD67
Authority key identifier: 87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32312d3231203d3e20323633303539.roa
Signing time:             Thu 17 Jul 2025 18:36:39 +0000
ROA not before:           Thu 17 Jul 2025 18:31:39 +0000
ROA not after:            Thu 16 Jul 2026 18:36:39 +0000
asID:                     263059
IP address blocks:        186.232.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 23:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:66:c1:58:f8:a9:df:1e:af:97:06:9a:7d:e5:96:19:e3:8d:dd:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
        Validity
            Not Before: Jul 17 18:31:39 2025 GMT
            Not After : Jul 16 18:36:39 2026 GMT
        Subject: CN=83EF2689407374EC5EE05CE312F06D1E0BAB8FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:78:ee:e7:f6:b3:83:12:2a:1d:5b:b1:ec:50:
                    33:1f:55:be:ef:b8:f8:9a:76:36:5d:02:75:72:31:
                    6b:6e:c9:e7:a6:f0:59:fe:07:15:7e:00:5f:1c:25:
                    91:24:b3:f3:66:79:02:8d:c0:8e:4c:23:21:66:3c:
                    9b:06:8e:d1:de:a8:78:a5:d9:88:91:b0:0d:fa:8c:
                    a7:64:21:9a:08:9c:a8:d5:47:dc:b8:c3:01:6e:27:
                    b6:06:fc:f8:b3:6a:fe:c5:14:df:e2:36:f4:d0:5d:
                    8f:f2:9d:e3:d7:06:8c:23:e5:0d:4c:25:16:81:b9:
                    04:a6:9b:c9:0f:9b:04:67:55:dd:9c:b5:63:45:96:
                    c2:de:2c:99:ed:94:13:09:c7:37:36:06:6d:c3:7e:
                    9c:b5:d1:82:b5:52:a6:23:e9:c6:5c:87:5c:1c:9c:
                    0d:d3:31:1b:47:a3:18:b3:66:db:0b:e5:08:06:b5:
                    94:a5:ef:44:5a:78:71:74:b4:a6:62:ea:b9:dd:5a:
                    a4:17:66:72:7e:23:7e:3f:8c:60:33:68:23:ca:bc:
                    b8:54:13:6c:4d:f0:28:79:18:56:a6:f4:78:be:35:
                    f2:b6:cd:9c:29:a2:70:2e:3b:01:48:66:31:a3:f1:
                    88:10:73:1f:3b:d4:5d:f9:fd:97:51:ac:51:2f:a1:
                    e7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EF:26:89:40:73:74:EC:5E:E0:5C:E3:12:F0:6D:1E:0B:AB:8F:FD
            X509v3 Authority Key Identifier:
                keyid:87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32312d3231203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:a9:3c:78:f8:8b:98:1e:e0:0c:fd:a7:5d:50:21:ef:bc:17:
         ef:e1:5e:58:a7:76:e5:7c:77:a7:cf:76:e5:1d:25:a7:46:8d:
         0e:fa:8a:bb:92:3a:15:77:22:d3:07:c7:03:59:c4:6c:2d:98:
         20:10:72:cb:b2:01:85:e6:a0:e3:1c:5a:37:f9:a5:05:5c:08:
         4a:c5:58:77:6b:ad:ba:b3:c1:f4:d8:26:03:96:d6:76:e8:7f:
         67:65:7b:5b:2b:9b:5b:56:04:ad:4f:ff:7d:05:88:27:6f:e4:
         52:4e:60:8c:03:63:a7:7e:f2:5f:8a:1b:78:c8:bb:88:76:1e:
         6d:92:a3:d1:cf:d1:80:11:6f:a2:b5:37:c2:ff:bd:98:9d:62:
         e0:a6:87:2a:b3:04:31:37:33:9c:28:b1:5b:c5:47:e0:c2:22:
         8c:be:69:dc:3d:22:5a:00:fd:b8:f5:5a:40:e3:9e:7d:f0:79:
         10:38:76:7d:3d:af:19:77:ff:0c:10:e6:db:a9:0e:fb:3c:42:
         8e:89:f5:82:c3:ba:8e:d2:57:07:48:d7:86:66:3b:5f:08:c6:
         c3:59:6d:8b:91:50:8c:d4:07:89:9b:f3:24:f4:df:93:39:72:
         59:03:18:a2:70:88:1b:6e:9f:00:bd:e3:62:1b:f9:02:9e:3c:
         19:f8:3e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:51:27 2025 by rpki-client