Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33352e302f32342d3332203d3e20323632373038.roa
File:                     3138362e3139332e33352e302f32342d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          +tFA89muCwKvjf2XMgXsZPDVi7rIUbXSqCd4PDgU9fg=
Subject key identifier:   D3:DA:4D:93:D9:69:44:6C:BC:22:50:5C:67:E3:47:31:0B:27:88:12
Certificate issuer:       /CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
Certificate serial:       1E2F0062332646F0247D2202A9A4C619F7F291DF
Authority key identifier: 26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33352e302f32342d3332203d3e20323632373038.roa
Signing time:             Sat 26 Apr 2025 11:43:54 +0000
ROA not before:           Sat 26 Apr 2025 11:38:54 +0000
ROA not after:            Sat 25 Apr 2026 11:43:54 +0000
asID:                     262708
IP address blocks:        186.193.35.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 06:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2f:00:62:33:26:46:f0:24:7d:22:02:a9:a4:c6:19:f7:f2:91:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
        Validity
            Not Before: Apr 26 11:38:54 2025 GMT
            Not After : Apr 25 11:43:54 2026 GMT
        Subject: CN=D3DA4D93D969446CBC22505C67E347310B278812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cd:8d:a6:9a:87:97:1d:41:d8:07:36:94:fa:
                    c2:72:0a:db:af:31:04:4a:a6:25:94:61:0b:3c:8d:
                    bb:13:8c:77:e7:e5:61:eb:45:f9:81:f8:17:14:d1:
                    97:c7:af:f4:9d:db:d9:46:db:c7:09:4f:f9:11:cd:
                    fe:23:39:2f:05:96:d0:7b:71:12:c3:d3:80:33:bc:
                    0f:e8:d9:9e:2f:c9:8d:a9:a5:02:e4:78:3e:31:eb:
                    49:68:75:96:f7:80:60:fa:d2:c6:9a:cc:ca:a7:6c:
                    ce:bb:da:cf:91:e0:3d:26:d6:d2:8b:48:af:b4:79:
                    3c:31:26:fb:32:77:f0:18:1e:b5:25:af:e0:68:fb:
                    f9:90:67:7a:61:05:cb:26:a0:7f:98:af:86:0e:22:
                    82:07:68:e3:3b:54:0b:9c:01:1e:96:bc:97:c7:ce:
                    19:2e:fa:93:0d:f1:d8:40:46:fe:b2:31:0f:08:85:
                    9d:8e:38:da:16:97:1e:47:8f:94:ac:ec:d8:2a:df:
                    fa:10:39:08:b0:e1:72:c8:e6:08:1f:62:86:e4:4c:
                    42:e6:8a:48:a1:ba:f1:3a:15:68:97:21:05:6d:94:
                    ef:41:25:ff:4b:ee:07:08:db:3e:66:ea:cb:fc:31:
                    24:c1:78:36:38:72:10:2d:77:ce:d2:c1:f8:79:1e:
                    02:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DA:4D:93:D9:69:44:6C:BC:22:50:5C:67:E3:47:31:0B:27:88:12
            X509v3 Authority Key Identifier:
                keyid:26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33352e302f32342d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:12:db:85:57:6f:49:7f:25:14:67:97:ce:ce:c5:3f:b9:69:
         b3:d7:75:56:e8:48:8e:d8:b6:6b:0a:58:f3:76:ee:ac:d8:a0:
         7e:04:af:b2:71:62:76:90:36:3e:b3:34:db:fa:9b:33:e6:76:
         80:dc:da:2b:8d:b2:24:a3:64:16:5e:da:7e:b3:5c:2a:75:0e:
         b8:72:a1:48:0f:12:32:90:b7:a1:3b:78:6b:8b:36:07:27:f1:
         33:ab:bf:64:7e:7a:38:86:71:f8:43:7e:28:a5:16:1b:c5:23:
         2c:96:dd:42:48:a4:e0:7a:cb:ab:e8:70:c2:0e:e6:b0:75:47:
         97:03:e4:e8:b6:e0:7d:55:89:11:c4:a0:3e:94:e2:dc:f6:f0:
         98:80:11:66:fc:2f:20:b8:29:c0:8d:4f:38:53:16:f4:b4:62:
         32:78:36:b2:07:70:54:98:c1:e6:a6:81:9d:ec:08:5c:82:7f:
         db:02:60:80:3a:9a:a6:ab:ce:d9:77:40:7c:e3:35:80:d1:51:
         5a:a1:74:ee:b4:d4:7e:71:c7:6c:fd:17:ae:f4:08:2c:24:04:
         07:df:56:07:34:b7:c3:53:be:a7:d2:09:79:b6:04:ae:fb:f5:
         3b:26:0f:51:12:d1:29:05:d3:df:6b:c2:92:5b:67:84:85:54:
         00:37:c0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 22:03:04 2025 by rpki-client