Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa
File:                     3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa (raw, json)
Hash identifier:          DhWML9LbNA2RRgnB1Kuj0sl9O7DJQowUJBfIgbd8raM=
Subject key identifier:   3A:E3:CD:BA:11:12:1A:F3:1A:F2:18:84:EB:1D:85:F0:BE:9E:A7:3C
Certificate issuer:       /CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8
Certificate serial:       36C14BCBD613B17FA451F4F7AE058C55EA88E433
Authority key identifier: D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa
Signing time:             Tue 28 Oct 2025 12:17:38 +0000
ROA not before:           Tue 28 Oct 2025 12:12:38 +0000
ROA not after:            Tue 27 Oct 2026 12:17:38 +0000
asID:                     262754
IP address blocks:        186.219.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl
                          rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 10:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c1:4b:cb:d6:13:b1:7f:a4:51:f4:f7:ae:05:8c:55:ea:88:e4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8
        Validity
            Not Before: Oct 28 12:12:38 2025 GMT
            Not After : Oct 27 12:17:38 2026 GMT
        Subject: CN=3AE3CDBA11121AF31AF21884EB1D85F0BE9EA73C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5d:39:79:91:ae:7a:63:aa:0c:1d:9b:b6:77:
                    2f:85:61:e5:bd:72:a4:70:62:2f:92:77:ab:28:a7:
                    30:d7:c0:c2:63:1e:5a:b8:9e:7f:40:6a:d9:40:10:
                    7e:bb:2a:37:81:99:10:0c:48:53:2c:c2:77:25:24:
                    d2:6c:c9:04:f1:4a:a6:90:cb:4c:42:1b:5c:e0:7e:
                    fa:09:3c:92:aa:22:35:79:f4:6b:e5:7d:53:83:60:
                    a3:26:6b:b3:5f:63:18:d2:a4:19:86:22:b5:d0:9e:
                    27:b6:8d:b3:72:71:11:17:05:e3:21:5b:9f:8d:af:
                    8d:1a:ee:e3:92:b9:d5:c3:b8:c5:35:18:12:28:59:
                    b4:b3:1e:8f:53:15:8e:4d:53:97:05:34:e8:64:d8:
                    44:fb:0b:f5:f6:c3:06:6e:9d:94:a1:2c:6f:ec:c1:
                    76:b7:41:da:9b:9d:bc:ca:1e:a4:ba:80:4b:a4:05:
                    22:ec:90:97:96:01:9c:ce:df:3f:a9:be:f7:a9:e5:
                    c7:83:dc:59:46:e7:a6:2e:19:b8:ed:00:4b:1f:bc:
                    09:62:19:86:63:7a:14:72:03:48:35:30:93:f5:93:
                    b0:0b:3a:76:58:92:dc:fe:0f:a3:74:7f:68:06:f9:
                    55:36:93:a6:46:2d:34:0a:1a:df:e6:ed:77:6b:76:
                    c7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E3:CD:BA:11:12:1A:F3:1A:F2:18:84:EB:1D:85:F0:BE:9E:A7:3C
            X509v3 Authority Key Identifier:
                keyid:D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:d6:cb:c5:e0:1c:42:37:7c:3a:2b:8b:ff:f0:5b:4c:7d:a4:
         4e:06:33:ac:c9:f4:56:a2:38:56:48:68:37:bc:5f:bc:00:b9:
         d5:48:f8:f5:73:8f:db:e3:ec:12:75:bf:e0:4d:c0:6f:e4:66:
         89:46:1e:81:27:3a:64:b1:44:f2:3f:bd:71:c3:72:81:98:51:
         b7:e8:2d:c7:25:29:2a:55:3a:1c:8a:ab:a1:a7:f2:55:24:36:
         5f:6e:90:86:bb:d5:98:11:db:5f:5b:2d:d8:49:18:c7:17:0a:
         98:58:39:35:91:30:ba:69:01:57:2b:43:6c:be:9e:9a:3d:9b:
         85:e2:fc:90:79:62:47:2f:08:67:3c:e4:a3:30:c3:7d:51:f8:
         92:52:e8:78:46:d6:bf:b8:f0:d4:e5:54:42:0f:81:30:40:27:
         9d:d1:77:3d:c2:97:c6:b0:6c:ba:bd:30:bf:a4:46:a7:49:43:
         2e:4a:5e:46:39:64:46:0f:db:b0:b1:ea:82:df:bd:aa:06:bc:
         43:f3:7d:6a:4f:4e:79:86:90:2e:47:88:63:71:6b:7a:4a:bc:
         cd:aa:09:85:8a:ff:1b:26:bf:b5:78:5a:27:60:01:ee:a0:57:
         47:42:8a:77:77:65:65:59:f1:98:c4:6f:af:ab:04:1c:e2:e6:
         2d:6e:55:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:17 2025 by rpki-client