Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32332d3332203d3e20323632373038.roa
File:                     3138362e3139332e33322e302f32332d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          q8x9OT6hqlG/EJ2W4PjAfaemMjKGHKi8uPCx4MX18xs=
Subject key identifier:   CE:33:59:33:3F:DC:C6:54:84:BA:AB:60:2A:15:B9:F9:38:34:AE:4D
Certificate issuer:       /CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
Certificate serial:       05346FB4D886D27D97F842153A7A7F6850E431CA
Authority key identifier: 26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32332d3332203d3e20323632373038.roa
Signing time:             Sat 26 Apr 2025 11:41:32 +0000
ROA not before:           Sat 26 Apr 2025 11:36:32 +0000
ROA not after:            Sat 25 Apr 2026 11:41:32 +0000
asID:                     262708
IP address blocks:        186.193.32.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 17:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:34:6f:b4:d8:86:d2:7d:97:f8:42:15:3a:7a:7f:68:50:e4:31:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
        Validity
            Not Before: Apr 26 11:36:32 2025 GMT
            Not After : Apr 25 11:41:32 2026 GMT
        Subject: CN=CE3359333FDCC65484BAAB602A15B9F93834AE4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:25:a0:10:55:00:74:fc:ed:02:74:0d:17:24:
                    70:c0:9e:a7:01:90:02:6a:9d:9a:bd:ac:54:8a:70:
                    23:8c:0a:d4:23:d8:58:a1:22:06:8f:0c:a1:6c:91:
                    4b:fc:70:c0:bb:3a:a9:35:1e:25:78:eb:4e:dc:75:
                    5f:77:30:9f:05:3a:9b:44:29:9d:21:78:aa:6c:c5:
                    aa:80:f4:c1:e3:15:0d:be:ed:0a:c7:69:73:f7:f8:
                    47:24:d3:cc:1f:b9:48:59:e5:4c:a9:31:8c:16:2f:
                    17:b1:bf:fe:74:1e:8f:43:ed:4b:6d:ee:2e:24:62:
                    3e:98:9b:89:aa:cf:07:3d:41:57:36:48:fe:a7:2d:
                    25:eb:17:73:1a:79:77:32:46:9f:54:c6:22:93:e7:
                    ba:3c:de:a9:ed:a7:fa:c4:b4:17:23:27:6c:e8:4e:
                    a0:47:ff:20:f3:6b:09:3c:91:37:76:81:ff:6e:7a:
                    d0:e1:6c:61:cf:41:97:0a:ac:24:c1:0d:94:b3:86:
                    8a:6d:ff:57:af:7c:70:76:f5:ff:80:38:ff:89:92:
                    11:59:7a:fa:92:78:44:ba:18:6d:6c:41:f6:32:a3:
                    cd:62:d1:1c:8b:27:28:5a:37:7d:54:88:2d:03:be:
                    84:86:ac:53:ee:2b:5b:28:d9:1f:f2:0c:85:b9:be:
                    52:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:33:59:33:3F:DC:C6:54:84:BA:AB:60:2A:15:B9:F9:38:34:AE:4D
            X509v3 Authority Key Identifier:
                keyid:26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32332d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:d4:a3:f8:b2:9c:f4:ca:41:7e:22:9c:06:b4:eb:8c:f0:b8:
         e5:53:b6:7a:86:2f:7a:b8:12:3a:dd:3b:67:ec:20:23:4b:50:
         e3:a2:c3:c5:4d:f3:11:ad:11:0a:94:fe:c6:d8:9a:c0:0d:27:
         de:25:e8:4e:80:d2:e0:8a:fc:56:0a:9f:ac:69:60:d9:49:21:
         05:2d:9f:89:a6:10:e7:77:a0:cc:18:3e:5b:6f:bf:74:1b:3c:
         e0:3e:7c:9b:07:d2:38:a8:e1:5b:c2:f5:61:c0:ad:65:a4:ac:
         75:7e:b3:60:b2:4b:9f:8a:1e:f8:40:e1:72:eb:a1:41:18:7c:
         8c:5d:74:46:ce:bc:eb:d5:91:eb:e4:c1:df:07:b3:00:32:f4:
         2f:01:99:ac:5e:ee:a8:db:41:5c:a4:19:2a:b4:b1:c8:76:97:
         fb:d7:ea:c5:4e:66:19:45:1d:0a:5c:c5:c4:e9:8d:26:48:f8:
         09:56:ab:1f:2f:c6:5c:25:c8:eb:71:72:46:39:42:a1:09:61:
         39:22:69:56:59:f1:ef:3c:18:35:71:ea:c3:13:e8:82:54:97:
         f0:76:4d:84:35:4b:ac:37:f8:34:e4:2a:d2:70:a9:1c:9a:0f:
         10:41:ee:71:f8:fb:79:da:bd:f7:78:3a:bc:0e:11:13:f7:af:
         72:d1:23:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:56:54 2025 by rpki-client