Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/3133382e3138362e3133322e302f32322d3332203d3e203533313630.roa
File:                     3133382e3138362e3133322e302f32322d3332203d3e203533313630.roa (raw, json)
Hash identifier:          uW2lH76kRqFP9bNsDYT+K/1BnLGu2QQUbf7FNzxhL94=
Subject key identifier:   6C:5B:0D:A9:5A:00:E5:8E:2E:4C:09:97:D5:1E:6D:17:38:15:C9:B5
Certificate issuer:       /CN=ED3B3BA45546351061AEEB665480B9D38FE9066C
Certificate serial:       1E9C38E8B99BEE7B4F7B42373B15134FA1AA846E
Authority key identifier: ED:3B:3B:A4:55:46:35:10:61:AE:EB:66:54:80:B9:D3:8F:E9:06:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED3B3BA45546351061AEEB665480B9D38FE9066C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/3133382e3138362e3133322e302f32322d3332203d3e203533313630.roa
Signing time:             Fri 05 Sep 2025 19:08:10 +0000
ROA not before:           Fri 05 Sep 2025 19:03:10 +0000
ROA not after:            Fri 04 Sep 2026 19:08:10 +0000
asID:                     53160
IP address blocks:        138.186.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/ED3B3BA45546351061AEEB665480B9D38FE9066C.crl
                          rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/ED3B3BA45546351061AEEB665480B9D38FE9066C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED3B3BA45546351061AEEB665480B9D38FE9066C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9c:38:e8:b9:9b:ee:7b:4f:7b:42:37:3b:15:13:4f:a1:aa:84:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED3B3BA45546351061AEEB665480B9D38FE9066C
        Validity
            Not Before: Sep  5 19:03:10 2025 GMT
            Not After : Sep  4 19:08:10 2026 GMT
        Subject: CN=6C5B0DA95A00E58E2E4C0997D51E6D173815C9B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6e:03:ce:ff:bd:71:53:e4:b9:b2:3e:91:dd:
                    15:04:04:28:4f:80:d7:e0:b2:c8:f2:d5:4a:ca:f8:
                    04:dc:5a:e3:1a:61:ff:24:ab:74:cc:ee:7e:a2:57:
                    2b:19:67:35:e3:93:13:99:27:13:22:31:12:75:d4:
                    9e:bf:89:0d:2c:32:df:5a:25:f6:57:25:78:c3:0d:
                    ba:e8:c2:29:61:30:50:8d:58:58:ad:8e:a8:cc:4c:
                    df:a7:72:d4:1e:5f:87:68:17:af:8d:0b:bc:54:90:
                    54:d2:eb:ac:c9:c9:3d:bf:b4:68:5f:3f:18:1f:f6:
                    c0:c3:49:98:29:0b:52:d2:8c:68:c3:89:54:f8:79:
                    63:6f:42:24:49:df:e1:3a:c4:8a:8d:31:96:51:cb:
                    68:44:a2:99:89:ff:88:a7:a5:e2:b0:99:cf:67:89:
                    f2:b0:cb:32:a5:cd:8b:55:31:74:eb:a7:29:ba:57:
                    47:77:9b:52:04:5f:1b:a1:65:9a:35:29:a2:0e:ca:
                    f7:da:d1:88:68:de:f2:25:ef:8d:fc:26:dc:ea:d7:
                    74:da:42:a2:96:bc:44:5f:32:c3:f5:a7:61:83:da:
                    5e:ca:4f:3a:e1:3f:18:fa:b2:06:6b:e4:6e:96:c5:
                    3e:f8:1f:07:d3:b3:36:49:19:3e:d1:e9:81:13:11:
                    ef:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5B:0D:A9:5A:00:E5:8E:2E:4C:09:97:D5:1E:6D:17:38:15:C9:B5
            X509v3 Authority Key Identifier:
                keyid:ED:3B:3B:A4:55:46:35:10:61:AE:EB:66:54:80:B9:D3:8F:E9:06:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/ED3B3BA45546351061AEEB665480B9D38FE9066C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED3B3BA45546351061AEEB665480B9D38FE9066C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/3133382e3138362e3133322e302f32322d3332203d3e203533313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:ea:88:6c:be:6c:7b:11:07:80:05:d3:86:94:21:ca:91:f2:
         8b:ae:c1:ca:43:1b:53:b7:98:f0:d9:66:c8:96:af:6e:31:61:
         2c:1f:47:61:4f:c8:8f:0b:09:86:d7:e6:34:c4:e5:f5:1b:6c:
         0a:be:26:6d:44:82:56:e4:79:f0:a3:75:73:10:8d:54:0e:fa:
         77:75:00:dd:8a:71:fb:db:96:9d:3c:c1:d1:43:36:54:c4:18:
         e5:b2:e9:42:ef:de:76:4c:4f:2f:af:8c:06:85:73:e9:60:8b:
         d8:77:eb:50:65:05:8e:a7:a2:a1:2d:99:f8:43:67:12:af:6d:
         cb:03:3e:bc:19:5f:d9:ee:84:c8:e2:92:48:2c:53:4c:0e:de:
         54:70:2a:19:5d:62:e5:76:1c:5f:57:f5:6f:7a:68:c0:f8:c2:
         c3:f3:5b:44:2a:f7:9a:0c:ce:df:db:90:8f:4b:db:1e:7b:8c:
         36:d2:f7:67:16:32:83:85:7c:79:9c:b8:3c:d1:b8:ff:2f:92:
         e3:19:be:6d:ac:aa:47:f5:2d:d8:7b:1c:59:02:c6:8f:b4:25:
         71:f6:ee:22:7d:06:4c:93:8b:c6:66:be:3e:f3:29:fb:4f:f5:
         dd:cc:46:35:bf:bb:1e:d3:3d:6c:e7:7c:d1:53:7a:f6:47:68:
         9a:7d:a0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:17:40 2025 by rpki-client