Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/27EvXnUhASfVFWik53igHqkyjLY1XV2PvPXE8ASLTncK/0/3138362e3139352e3136342e302f32342d3234203d3e20323734373232.roa
File:                     3138362e3139352e3136342e302f32342d3234203d3e20323734373232.roa (raw, json)
Hash identifier:          60h48FS4RrCtaCttVjlYIax2xIaScB7PY9XK6pOH/D8=
Subject key identifier:   25:D2:35:FE:6D:0D:2C:14:3E:22:D1:6E:3E:0F:10:65:41:81:A1:6C
Certificate issuer:       /CN=237DE4AEE652C4BCE6906C919A2AD10D01776AF4
Certificate serial:       41B635E4323A5BED00C7567E8744C614E582D1AD
Authority key identifier: 23:7D:E4:AE:E6:52:C4:BC:E6:90:6C:91:9A:2A:D1:0D:01:77:6A:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237DE4AEE652C4BCE6906C919A2AD10D01776AF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/27EvXnUhASfVFWik53igHqkyjLY1XV2PvPXE8ASLTncK/0/3138362e3139352e3136342e302f32342d3234203d3e20323734373232.roa
Signing time:             Tue 26 Aug 2025 20:02:24 +0000
ROA not before:           Tue 26 Aug 2025 19:57:24 +0000
ROA not after:            Tue 25 Aug 2026 20:02:24 +0000
asID:                     274722
IP address blocks:        186.195.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/27EvXnUhASfVFWik53igHqkyjLY1XV2PvPXE8ASLTncK/0/237DE4AEE652C4BCE6906C919A2AD10D01776AF4.crl
                          rsync://rpki-repo.registro.br/repo/27EvXnUhASfVFWik53igHqkyjLY1XV2PvPXE8ASLTncK/0/237DE4AEE652C4BCE6906C919A2AD10D01776AF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237DE4AEE652C4BCE6906C919A2AD10D01776AF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 00:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b6:35:e4:32:3a:5b:ed:00:c7:56:7e:87:44:c6:14:e5:82:d1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237DE4AEE652C4BCE6906C919A2AD10D01776AF4
        Validity
            Not Before: Aug 26 19:57:24 2025 GMT
            Not After : Aug 25 20:02:24 2026 GMT
        Subject: CN=25D235FE6D0D2C143E22D16E3E0F10654181A16C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c5:32:3e:7f:73:3d:84:62:ad:7f:75:0f:24:
                    f6:bb:3e:89:5a:89:d2:49:86:56:bd:2a:66:07:fb:
                    4f:62:35:d4:be:ba:2e:1f:31:49:9a:4d:00:fb:98:
                    f4:46:99:5d:76:ab:58:66:f5:ac:d3:18:c6:3b:e1:
                    42:06:70:70:96:30:a2:45:77:d6:41:9e:33:32:36:
                    44:f7:d3:5e:ea:23:a2:13:fd:a7:e4:0c:64:f2:ef:
                    5d:a9:e4:19:bc:8c:f5:04:b7:4f:98:b5:08:be:2d:
                    a7:dc:8b:b5:5a:a9:3d:9b:3e:ba:ac:a6:e1:1d:cb:
                    85:5c:4c:df:4a:11:1e:59:8d:a2:89:2f:f3:e8:b1:
                    c3:2b:e5:46:a4:ef:68:5e:7e:df:69:89:bb:a7:01:
                    37:af:03:69:68:44:f4:29:12:2b:f4:26:5c:cd:58:
                    24:53:9f:72:81:de:c9:e7:a8:94:d2:34:db:c7:a0:
                    22:46:4d:18:0a:bc:4c:bb:5c:c0:3c:ea:99:2b:0d:
                    45:c7:fb:d5:5a:87:f5:50:20:a9:93:0a:c1:94:13:
                    2b:2f:d9:5c:93:5f:63:e9:3e:71:9e:bb:ed:2e:6e:
                    4a:a6:8b:59:19:1b:45:bc:02:78:aa:30:15:6f:25:
                    54:0e:57:07:35:63:8b:e0:e6:46:2a:79:9a:b4:9f:
                    31:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D2:35:FE:6D:0D:2C:14:3E:22:D1:6E:3E:0F:10:65:41:81:A1:6C
            X509v3 Authority Key Identifier:
                keyid:23:7D:E4:AE:E6:52:C4:BC:E6:90:6C:91:9A:2A:D1:0D:01:77:6A:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/27EvXnUhASfVFWik53igHqkyjLY1XV2PvPXE8ASLTncK/0/237DE4AEE652C4BCE6906C919A2AD10D01776AF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237DE4AEE652C4BCE6906C919A2AD10D01776AF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/27EvXnUhASfVFWik53igHqkyjLY1XV2PvPXE8ASLTncK/0/3138362e3139352e3136342e302f32342d3234203d3e20323734373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:3d:2e:79:65:68:82:c6:36:24:9b:8d:c2:1d:53:f4:82:0d:
         01:92:42:7d:29:4b:45:91:e6:6e:ad:fd:b0:c3:1e:0b:74:6c:
         91:dc:60:68:6d:46:75:72:5c:f2:03:3d:97:5e:29:f2:18:e9:
         c8:dd:c1:54:5f:42:4d:c3:2d:68:db:0b:d8:05:53:75:5b:0b:
         30:e0:58:f5:de:d4:01:a3:22:e5:f5:e1:ad:11:67:0b:e6:13:
         f4:99:08:b1:aa:39:93:75:f9:90:e2:00:ac:0b:05:a6:b8:c6:
         a1:e6:e8:d9:b0:a8:d8:7d:12:5f:da:43:c1:06:5e:63:4b:56:
         9f:4d:d9:a7:da:76:0c:d3:07:73:b6:0f:c6:9d:36:77:ec:ff:
         71:d3:4b:2c:16:70:53:06:ad:aa:25:9b:b1:33:7e:9a:35:27:
         71:11:08:74:fe:09:83:78:f7:92:49:3f:98:1e:a7:03:2c:26:
         19:f6:3f:11:cd:d2:e9:88:af:98:9e:94:f9:bf:96:9b:59:7c:
         57:a7:bd:da:94:c2:07:bb:7c:3c:50:04:9a:67:21:ca:40:3a:
         29:7f:97:21:b1:d0:e0:53:cd:ac:90:5d:3e:e6:8e:de:cf:b8:
         b0:1f:67:cc:fa:2a:ed:2a:39:3c:58:ab:3d:35:4f:90:b5:54:
         b6:54:20:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 06:23:06 2025 by rpki-client