Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/3138362e3230392e3137362e302f32312d3332203d3e20313938393439.roa
File:                     3138362e3230392e3137362e302f32312d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          cX8wMYQ6EBM2/TdOU3aALkUCn5mOBqFRVb5pf3rCMOM=
Subject key identifier:   79:B0:2A:54:5B:88:90:72:E8:72:92:A4:84:6C:CD:42:04:FA:9C:C7
Certificate issuer:       /CN=E648F8D55C21E34319A7C414ECB0155EED5E0B31
Certificate serial:       63F4AE23EABE3CE8EB121D956917CE5BAC42BF2E
Authority key identifier: E6:48:F8:D5:5C:21:E3:43:19:A7:C4:14:EC:B0:15:5E:ED:5E:0B:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E648F8D55C21E34319A7C414ECB0155EED5E0B31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/3138362e3230392e3137362e302f32312d3332203d3e20313938393439.roa
Signing time:             Wed 27 Aug 2025 15:17:06 +0000
ROA not before:           Wed 27 Aug 2025 15:12:06 +0000
ROA not after:            Wed 26 Aug 2026 15:17:06 +0000
asID:                     198949
IP address blocks:        186.209.176.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/E648F8D55C21E34319A7C414ECB0155EED5E0B31.crl
                          rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/E648F8D55C21E34319A7C414ECB0155EED5E0B31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E648F8D55C21E34319A7C414ECB0155EED5E0B31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 10:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f4:ae:23:ea:be:3c:e8:eb:12:1d:95:69:17:ce:5b:ac:42:bf:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E648F8D55C21E34319A7C414ECB0155EED5E0B31
        Validity
            Not Before: Aug 27 15:12:06 2025 GMT
            Not After : Aug 26 15:17:06 2026 GMT
        Subject: CN=79B02A545B889072E87292A4846CCD4204FA9CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:66:d2:e8:a5:1b:83:62:c9:ed:00:3e:2d:8e:
                    25:b4:db:00:04:0c:dd:1b:ec:83:4e:c3:e1:b5:e6:
                    39:84:0d:22:a0:6f:ff:2b:9e:4d:a2:70:fe:50:f6:
                    79:5e:bf:5a:e8:f2:3f:28:8b:d9:8a:16:25:2d:f6:
                    aa:18:27:d3:2f:64:ae:b8:ab:2e:c1:e8:77:6f:60:
                    dd:eb:61:f1:cd:d1:d5:7f:79:05:f3:3d:54:11:12:
                    bb:04:b1:d5:8a:e7:00:b3:6e:48:6a:df:ed:09:fa:
                    af:42:ce:53:86:85:72:84:5e:ef:57:03:e1:e9:82:
                    f5:ab:68:4e:30:15:4f:11:27:6d:ac:2c:94:46:1c:
                    ef:33:01:3d:b8:46:cd:78:c6:a1:67:95:41:77:b0:
                    df:68:61:de:c8:88:3c:65:19:72:13:4c:06:c0:94:
                    52:22:ed:1e:ed:7e:3e:34:1b:b3:d1:7f:25:83:fd:
                    06:bf:ca:29:8e:c8:1d:a6:a6:9f:17:ce:62:9d:a9:
                    a6:86:c4:55:f9:d8:c3:65:18:5b:98:09:74:44:63:
                    01:43:92:0f:6b:f1:72:10:69:b3:1d:66:8a:4d:f5:
                    d0:4a:0d:7e:20:8d:da:1b:59:f6:77:a1:3a:27:b6:
                    70:57:00:f9:64:68:0f:d8:bb:9d:13:5a:9f:8f:13:
                    ac:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B0:2A:54:5B:88:90:72:E8:72:92:A4:84:6C:CD:42:04:FA:9C:C7
            X509v3 Authority Key Identifier:
                keyid:E6:48:F8:D5:5C:21:E3:43:19:A7:C4:14:EC:B0:15:5E:ED:5E:0B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/E648F8D55C21E34319A7C414ECB0155EED5E0B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E648F8D55C21E34319A7C414ECB0155EED5E0B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/3138362e3230392e3137362e302f32312d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:e3:29:c2:bf:9a:f2:00:ed:68:5a:de:24:ea:de:c0:1b:68:
         9c:06:32:5c:8e:e2:de:d4:74:6b:fa:5b:14:f8:48:3d:88:1b:
         27:af:3c:8d:8c:aa:2a:a6:a4:d7:57:10:f1:1c:0d:06:62:8e:
         d4:5b:da:92:72:db:59:a6:ba:8a:23:aa:d1:7f:9c:ad:35:1d:
         1e:b1:17:93:6e:f5:8d:a8:e7:df:c0:e0:0a:39:54:51:9c:9f:
         90:9f:7f:e8:13:b5:2f:83:53:85:cc:65:40:2f:e8:8b:06:28:
         f3:60:6a:0a:ac:94:42:b8:fd:13:b5:06:51:e2:f5:10:4f:fc:
         69:2d:11:d0:01:36:04:d6:44:c4:26:30:5a:01:f8:47:c4:ba:
         f5:3c:d6:43:1a:fe:64:ce:a9:e5:e5:fa:23:66:6a:10:d4:8d:
         b8:39:9e:a0:a6:05:9a:95:a0:4a:47:02:24:9b:79:07:1c:46:
         a9:74:37:03:9c:86:c7:01:a3:87:aa:2e:da:c4:0e:a8:8e:65:
         15:a2:a8:5a:86:e8:e4:a7:22:fb:fd:e6:b3:c0:8c:e1:d6:71:
         47:0d:99:83:3a:c5:7f:6a:19:76:1a:37:57:97:5f:95:38:ab:
         b8:5f:a1:3c:36:a5:79:47:5e:db:c9:c3:d8:13:20:1c:69:d2:
         10:99:ee:f1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUY/SuI+q+POjrEh2VaRfOW6xCvy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY0OEY4RDU1QzIxRTM0MzE5QTdDNDE0RUNCMDE1NUVF
RDVFMEIzMTAeFw0yNTA4MjcxNTEyMDZaFw0yNjA4MjYxNTE3MDZaMDMxMTAvBgNV
BAMTKDc5QjAyQTU0NUI4ODkwNzJFODcyOTJBNDg0NkNDRDQyMDRGQTlDQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZtLopRuDYsntAD4tjiW02wAE
DN0b7INOw+G15jmEDSKgb/8rnk2icP5Q9nlev1ro8j8oi9mKFiUt9qoYJ9MvZK64
qy7B6HdvYN3rYfHN0dV/eQXzPVQRErsEsdWK5wCzbkhq3+0J+q9CzlOGhXKEXu9X
A+HpgvWraE4wFU8RJ22sLJRGHO8zAT24Rs14xqFnlUF3sN9oYd7IiDxlGXITTAbA
lFIi7R7tfj40G7PRfyWD/Qa/yimOyB2mpp8XzmKdqaaGxFX52MNlGFuYCXREYwFD
kg9r8XIQabMdZopN9dBKDX4gjdobWfZ3oTontnBXAPlkaA/Yu50TWp+PE6xtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUebAqVFuIkHLocpKkhGzNQgT6nMcwHwYDVR0j
BBgwFoAU5kj41Vwh40MZp8QU7LAVXu1eCzEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlgxTk5ZVTI4YzEzb2hBWXBBbm1mY05QUFBLUGVvN25EcUdxcmlrbjVj
RGEvMC9FNjQ4RjhENTVDMjFFMzQzMTlBN0M0MTRFQ0IwMTU1RUVENUUwQjMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2NDhGOEQ1NUMyMUUzNDMx
OUE3QzQxNEVDQjAxNTVFRUQ1RTBCMzEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYMU5OWVUyOGMxM29oQVlwQW5tZmNOUFBQS1BlbzduRHFHcXJpa241Y0RhLzAv
MzEzODM2MmUzMjMwMzkyZTMxMzczNjJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDMx
MzkzODM5MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7rRsDANBgkqhkiG9w0BAQsFAAOCAQEAn+Mp
wr+a8gDtaFreJOrewBtonAYyXI7i3tR0a/pbFPhIPYgbJ688jYyqKqak11cQ8RwN
BmKO1FvaknLbWaa6iiOq0X+crTUdHrEXk271jajn38DgCjlUUZyfkJ9/6BO1L4NT
hcxlQC/oiwYo82BqCqyUQrj9E7UGUeL1EE/8aS0R0AE2BNZExCYwWgH4R8S69TzW
Qxr+ZM6p5eX6I2ZqENSNuDmeoKYFmpWgSkcCJJt5BxxGqXQ3A5yGxwGjh6ou2sQO
qI5lFaKoWobo5Kci+/3ms8CM4dZxRw2ZgzrFf2oZdho3V5dflTiruF+hPDaleUde
28nD2BMgHGnSEJnu8Q==
-----END CERTIFICATE-----
Generated at Thu Sep 18 20:05:31 2025 by rpki-client