Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/3138362e3234382e302e302f31362d3234203d3e203233313036.roa
File:                     3138362e3234382e302e302f31362d3234203d3e203233313036.roa (raw, json)
Hash identifier:          8FSdWczw5myCPoiLuPBb7d6lS9+czoSRNIP2wdxuL6E=
Subject key identifier:   39:F7:67:C4:3F:D9:03:34:F0:46:49:80:E5:38:08:51:00:86:96:4A
Certificate issuer:       /CN=E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC
Certificate serial:       7A6D5D8BF73A880EDC2386BB9BD6C4C07626826A
Authority key identifier: E6:DD:4A:59:FA:8F:F5:B9:19:C1:CC:8C:B6:3B:8E:D9:50:2A:B7:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/3138362e3234382e302e302f31362d3234203d3e203233313036.roa
Signing time:             Fri 23 May 2025 06:09:35 +0000
ROA not before:           Fri 23 May 2025 06:04:35 +0000
ROA not after:            Fri 22 May 2026 06:09:35 +0000
asID:                     23106
IP address blocks:        186.248.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.crl
                          rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 07:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6d:5d:8b:f7:3a:88:0e:dc:23:86:bb:9b:d6:c4:c0:76:26:82:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC
        Validity
            Not Before: May 23 06:04:35 2025 GMT
            Not After : May 22 06:09:35 2026 GMT
        Subject: CN=39F767C43FD90334F0464980E53808510086964A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:17:e7:d9:f9:a8:dc:48:c1:ed:93:17:1f:84:
                    c2:8d:67:34:9f:e1:7c:f0:7c:17:73:c4:8e:bc:7d:
                    aa:fc:c5:a7:1f:40:09:d9:16:4e:a3:4f:71:ae:7e:
                    1d:3f:4f:4c:3b:01:c3:4e:92:af:da:74:15:06:8c:
                    10:78:3d:ce:49:b2:55:62:af:f6:42:0a:ed:94:1f:
                    96:de:43:27:c3:aa:b1:b4:8c:aa:5f:76:49:7d:eb:
                    3c:be:ca:c7:a2:de:40:f8:23:a6:92:c9:02:a6:62:
                    2f:b7:41:8a:d5:85:eb:ae:14:fd:21:3f:3c:7f:3a:
                    62:e0:4d:2d:95:12:09:cb:64:bb:82:53:a0:29:5b:
                    fd:eb:10:af:57:47:67:fd:f2:09:7e:d8:92:91:ce:
                    e0:71:75:d8:29:54:be:54:84:99:87:e9:f6:29:67:
                    84:bd:78:c0:c2:c7:58:3a:23:d0:ca:c5:f3:21:a1:
                    f1:31:b5:80:a7:41:47:15:af:28:57:0a:ab:74:b6:
                    e8:ae:99:52:25:1f:a7:d9:30:90:35:37:66:c0:bd:
                    cf:0f:c3:38:eb:09:2b:a8:1b:2b:50:e3:69:0d:0d:
                    44:09:0c:d6:cc:2e:35:f2:7e:93:9f:25:c5:be:50:
                    dd:f1:4d:a2:28:e4:87:3a:6b:48:79:26:a6:b3:7a:
                    4b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F7:67:C4:3F:D9:03:34:F0:46:49:80:E5:38:08:51:00:86:96:4A
            X509v3 Authority Key Identifier:
                keyid:E6:DD:4A:59:FA:8F:F5:B9:19:C1:CC:8C:B6:3B:8E:D9:50:2A:B7:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/3138362e3234382e302e302f31362d3234203d3e203233313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.248.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         49:4e:cf:81:20:13:07:10:5c:bd:b4:fb:48:da:8b:77:3c:30:
         21:e1:c9:83:68:fd:ba:6d:d0:5d:0e:86:79:29:fe:81:d8:83:
         72:80:ed:f9:12:69:9f:04:09:fc:98:ae:32:af:eb:37:b3:c2:
         05:3c:a6:d9:90:d8:60:3e:84:15:c3:9c:cb:8c:e5:f7:27:ef:
         71:72:df:f3:0a:a1:43:bd:2e:13:9c:8d:9a:8e:68:b2:01:5f:
         6f:42:90:46:81:3c:8b:3d:e7:3a:0c:0d:44:08:ab:7a:1d:10:
         e4:41:1e:f6:fb:c7:03:cd:17:97:dd:54:61:f8:6a:7d:d9:02:
         42:38:8f:d3:41:79:b2:3e:d9:94:63:02:dd:af:e5:84:1a:3d:
         d8:db:28:8c:41:f0:2d:60:4f:25:73:23:ab:1a:35:d7:ef:10:
         f9:da:35:6f:ce:35:85:ae:87:b7:5c:3e:c6:b3:0d:1d:6c:bb:
         6d:43:bf:1e:66:b2:96:53:f4:b9:09:56:50:ef:89:c6:61:87:
         62:d9:e7:1e:b1:bf:de:ac:ae:63:0d:1e:dc:a8:52:e7:2a:47:
         f3:f2:39:ee:82:03:fe:21:6e:89:58:91:0d:37:98:e3:eb:3d:
         a2:17:6c:38:b1:24:30:e2:28:c9:61:f1:78:68:58:13:6c:92:
         24:cc:c4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:02:13 2025 by rpki-client