Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135332e302f32342d3234203d3e20323633303539.roa
File:                     3138362e3233322e3135332e302f32342d3234203d3e20323633303539.roa (raw, json)
Hash identifier:          +FPKlWgJssUZBXnRRJGfZlXca0chgCYNYPW3mNnl7VU=
Subject key identifier:   3D:38:77:E6:29:46:0D:87:38:F0:0C:FC:92:F7:3F:6C:80:77:C1:D0
Certificate issuer:       /CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Certificate serial:       41C684B0841CF922E6FFAED5A85FE2AFDBBDE935
Authority key identifier: 87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135332e302f32342d3234203d3e20323633303539.roa
Signing time:             Thu 17 Jul 2025 18:36:50 +0000
ROA not before:           Thu 17 Jul 2025 18:31:50 +0000
ROA not after:            Thu 16 Jul 2026 18:36:50 +0000
asID:                     263059
IP address blocks:        186.232.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 04:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c6:84:b0:84:1c:f9:22:e6:ff:ae:d5:a8:5f:e2:af:db:bd:e9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
        Validity
            Not Before: Jul 17 18:31:50 2025 GMT
            Not After : Jul 16 18:36:50 2026 GMT
        Subject: CN=3D3877E629460D8738F00CFC92F73F6C8077C1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ac:97:d1:7b:d1:e4:ff:49:65:d5:3b:19:0a:
                    17:c9:be:73:65:7d:55:2f:b2:c6:ab:38:a8:74:34:
                    e8:19:e9:81:e8:98:4c:31:30:26:00:80:b0:2b:97:
                    97:35:ef:63:1d:4b:42:a1:1d:88:1f:98:0b:81:9c:
                    1c:d2:48:4b:51:75:87:42:58:b3:fa:77:16:62:c0:
                    a5:75:e7:2e:38:7a:ed:91:8d:b8:4d:14:7d:0b:1a:
                    6e:e8:0b:8b:68:90:f4:be:6b:02:fb:9b:8f:cc:01:
                    66:4c:18:c6:d7:64:6c:1b:01:fb:ef:59:9b:75:d6:
                    38:e9:01:e3:31:52:ea:df:6b:dc:cc:40:fe:f2:ab:
                    1a:74:e4:e1:2b:bb:f3:7a:05:04:a6:9f:c8:68:3e:
                    82:2f:7b:d8:c2:c2:8b:4b:5c:0f:b5:f0:ad:5d:90:
                    e1:3c:3e:ba:79:1e:fc:ef:26:2d:19:7b:fc:01:b6:
                    7b:a9:0d:04:d9:9e:48:8a:c5:77:7e:76:18:ca:4d:
                    1e:eb:7b:98:94:2e:60:bb:91:32:b9:a0:c3:98:db:
                    ae:de:a8:fa:95:a3:1c:ad:49:20:41:c7:b9:20:e2:
                    39:f1:2c:3f:dd:33:70:65:b5:67:49:20:56:b4:7e:
                    2a:c9:d9:49:14:86:7e:54:aa:3d:3d:08:92:d2:b3:
                    89:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:38:77:E6:29:46:0D:87:38:F0:0C:FC:92:F7:3F:6C:80:77:C1:D0
            X509v3 Authority Key Identifier:
                keyid:87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135332e302f32342d3234203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:15:9e:d0:7e:c3:9e:b0:a5:cb:be:e1:7a:f2:31:ef:5b:7a:
         e0:5e:e7:ed:b7:7c:12:d0:ff:d7:4f:6e:d9:fe:a1:ab:35:a9:
         6a:a6:27:5c:9c:d5:8c:3d:7b:4a:e9:b3:a8:c0:aa:35:7f:56:
         2e:45:dd:43:1d:3c:4c:2b:39:07:d2:79:9b:ba:d4:95:6d:d2:
         7d:3d:73:8c:63:19:10:59:8d:55:0a:f9:00:ce:39:54:ed:00:
         fd:0d:d9:06:81:2c:3c:a9:65:b9:a9:1f:c6:24:bf:31:8b:6d:
         c7:9e:59:7a:c1:db:72:2a:e2:c9:f8:f7:23:7e:90:da:f6:7f:
         2d:dd:f6:53:cc:63:f3:2e:0f:0c:18:99:0a:37:b2:c4:f1:3e:
         89:cb:c7:01:84:93:12:af:33:bd:0e:65:6c:91:77:f9:9d:f2:
         3d:84:2f:66:e2:9b:59:a5:37:c0:af:09:cd:e8:2d:37:8a:96:
         b3:c9:82:1a:3e:54:48:43:b2:80:86:82:3b:3c:ab:af:3e:f3:
         ad:c2:a4:e8:96:4c:2a:98:19:3b:4a:42:8c:c0:9d:4b:54:9b:
         9e:e9:1e:38:1e:90:d0:34:11:1b:9d:04:78:46:a9:93:fe:90:
         de:40:cf:10:89:6e:43:83:f4:c1:39:d8:2e:28:6a:d2:78:b4:
         e6:76:6f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:09:31 2025 by rpki-client