Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32302d3332203d3e203238313931.roa
File:                     3138362e3139332e3137362e302f32302d3332203d3e203238313931.roa (raw, json)
Hash identifier:          Tmj7bj92uMH7/H8hd7u2uClqQXPknNqDZLCi2Zy1TDw=
Subject key identifier:   C7:10:E7:D2:23:99:B7:24:DC:AB:69:86:F3:D8:D4:26:CF:AB:67:9D
Certificate issuer:       /CN=EDB110552B3B3B3D4D77BFAB97C959F44E9B6661
Certificate serial:       114E169507278A36D239E3DB4F963AB031D7E2C0
Authority key identifier: ED:B1:10:55:2B:3B:3B:3D:4D:77:BF:AB:97:C9:59:F4:4E:9B:66:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDB110552B3B3B3D4D77BFAB97C959F44E9B6661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32302d3332203d3e203238313931.roa
Signing time:             Tue 29 Jul 2025 12:23:41 +0000
ROA not before:           Tue 29 Jul 2025 12:18:41 +0000
ROA not after:            Tue 28 Jul 2026 12:23:41 +0000
asID:                     28191
IP address blocks:        186.193.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/EDB110552B3B3B3D4D77BFAB97C959F44E9B6661.crl
                          rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/EDB110552B3B3B3D4D77BFAB97C959F44E9B6661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDB110552B3B3B3D4D77BFAB97C959F44E9B6661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 13:44:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4e:16:95:07:27:8a:36:d2:39:e3:db:4f:96:3a:b0:31:d7:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB110552B3B3B3D4D77BFAB97C959F44E9B6661
        Validity
            Not Before: Jul 29 12:18:41 2025 GMT
            Not After : Jul 28 12:23:41 2026 GMT
        Subject: CN=C710E7D22399B724DCAB6986F3D8D426CFAB679D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:70:ec:bd:fa:80:81:07:50:dc:17:24:d5:e8:
                    9f:de:86:c8:cf:a3:62:64:e2:11:8a:af:b6:d6:12:
                    ac:2a:ee:c8:94:eb:7c:ac:77:1a:09:fb:ad:dd:fd:
                    80:3e:01:9d:0a:cb:1c:49:cc:0a:35:b2:8e:d4:97:
                    00:03:be:e8:e6:fa:26:7c:1e:fa:02:aa:1e:af:a5:
                    05:bf:d6:70:0b:ae:d0:92:8f:34:6d:35:b2:38:cd:
                    7d:1a:10:5d:f8:21:8c:29:28:86:75:4c:27:9e:f3:
                    1e:6e:2f:85:2e:84:da:23:e8:a7:be:89:99:71:fc:
                    7b:9a:3a:42:7f:c1:e0:2e:14:ea:e8:7a:32:8f:27:
                    ec:e2:f4:02:f0:fb:7b:17:04:f6:71:b2:4f:b9:0f:
                    96:7f:3b:79:be:e2:eb:ef:51:05:ba:53:ae:8b:7a:
                    5b:ac:7b:19:e0:54:34:be:16:42:b1:66:e7:9d:e4:
                    6d:e3:fa:f7:a9:82:3b:1a:10:4f:5c:b9:20:62:81:
                    de:31:1b:06:c7:9e:2f:2b:03:3e:98:80:a7:b1:fd:
                    3a:35:cf:c4:df:94:e8:66:b0:bf:1c:02:b2:f9:19:
                    10:e6:27:2d:f0:d5:d1:e3:78:98:5d:b8:42:c7:be:
                    e6:7d:70:f6:bc:27:da:8f:e0:63:89:7a:b9:37:17:
                    e6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:10:E7:D2:23:99:B7:24:DC:AB:69:86:F3:D8:D4:26:CF:AB:67:9D
            X509v3 Authority Key Identifier:
                keyid:ED:B1:10:55:2B:3B:3B:3D:4D:77:BF:AB:97:C9:59:F4:4E:9B:66:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/EDB110552B3B3B3D4D77BFAB97C959F44E9B6661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDB110552B3B3B3D4D77BFAB97C959F44E9B6661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32302d3332203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a7:9a:fc:fc:a4:67:7d:1b:da:8e:08:87:82:03:9b:61:5a:2b:
         5e:58:43:2d:c2:03:0d:1a:58:ab:36:cb:e4:41:72:80:13:1e:
         3c:1b:c4:13:63:04:a8:c0:00:3f:b4:6a:5d:a2:06:0b:ec:90:
         80:53:22:97:8e:6f:8d:d7:fd:5d:9b:d5:df:1e:1b:d9:86:13:
         23:cc:df:8e:f4:18:8e:82:a1:df:2c:fc:32:cb:cc:87:09:4d:
         1d:35:e7:af:a6:7b:25:16:c6:35:86:f0:39:fc:6e:af:44:52:
         30:2e:e8:ef:b4:6e:ea:7e:b2:8e:18:10:aa:91:a5:83:bb:81:
         2e:eb:69:9e:6f:cd:8e:e8:eb:1e:15:c8:85:f2:15:26:d0:1f:
         a9:a5:96:12:88:09:3c:aa:b3:b0:7f:08:a6:4a:b7:d1:df:07:
         83:f2:ce:84:78:e8:e8:50:cc:44:90:7b:c4:e8:ef:b0:d3:7f:
         35:a5:f1:b5:e4:b4:77:b2:2a:8d:d7:9e:65:09:8b:f4:7f:6c:
         cd:d9:c5:ee:40:37:36:15:a3:21:06:3c:23:e6:b5:0a:80:88:
         b0:76:d4:a8:4c:80:13:0d:d5:d7:af:a5:15:56:e9:db:eb:fd:
         6e:54:29:37:b5:89:2e:84:7d:c1:5e:cd:3c:16:06:ae:9a:d2:
         f7:79:8d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 19:01:30 2025 by rpki-client