Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3138362e3235312e35302e302f32342d3234203d3e20323632383234.roa
File:                     3138362e3235312e35302e302f32342d3234203d3e20323632383234.roa (raw, json)
Hash identifier:          zkTEfIfhxLN6vrpuK1fhuy2jyWtjOS0WfNjIaJxLDpk=
Subject key identifier:   A4:5D:E8:50:2A:71:DE:63:79:E4:96:30:19:7C:28:4A:9A:9D:D8:E0
Certificate issuer:       /CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
Certificate serial:       464AA18A31B042EBF84E0489AB7F9C36A0C4C248
Authority key identifier: 84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3138362e3235312e35302e302f32342d3234203d3e20323632383234.roa
Signing time:             Sun 05 Jul 2026 23:57:21 +0000
ROA not before:           Sun 05 Jul 2026 23:52:21 +0000
ROA not after:            Sun 04 Jul 2027 23:57:21 +0000
asID:                     262824
IP address blocks:        186.251.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl
                          rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 12:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4a:a1:8a:31:b0:42:eb:f8:4e:04:89:ab:7f:9c:36:a0:c4:c2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
        Validity
            Not Before: Jul  5 23:52:21 2026 GMT
            Not After : Jul  4 23:57:21 2027 GMT
        Subject: CN=A45DE8502A71DE6379E49630197C284A9A9DD8E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:d6:8d:35:7b:2c:63:33:79:e1:72:d9:65:
                    c8:a7:65:8b:a0:d3:f2:c0:75:9f:2e:29:a6:ba:4f:
                    25:3d:25:a0:09:82:6f:04:91:be:09:a9:dc:34:3b:
                    6d:1f:9d:6d:db:58:eb:52:11:b7:8a:7c:e1:ad:d1:
                    46:8f:7c:86:74:60:51:a4:eb:2c:59:44:34:c3:f3:
                    d5:f9:0a:5c:12:33:9c:8b:45:3d:70:ed:91:22:ad:
                    70:60:33:0b:dc:9c:03:14:3b:c1:f4:8e:bf:6f:ff:
                    18:6a:d6:4d:20:07:af:35:c2:dd:ff:e6:29:3c:c9:
                    f0:4c:8c:6c:d7:30:b2:ca:43:ae:a4:2b:54:96:29:
                    12:e5:63:3b:74:c5:ae:40:5c:8f:ad:af:74:8c:0a:
                    6f:81:01:1c:38:17:86:77:41:b0:57:3c:40:aa:d3:
                    f1:41:9b:44:8d:83:34:32:48:97:4f:30:14:2b:a2:
                    f0:b5:10:68:31:1f:62:1c:f9:97:5a:26:1b:48:1c:
                    13:ec:be:6a:79:0c:a5:6e:66:ff:3b:59:3f:5b:20:
                    40:c0:97:b0:c5:05:f4:db:db:74:c5:d7:66:46:2d:
                    87:4f:6e:f9:56:97:64:13:5a:a3:ef:98:2b:1b:7b:
                    57:7c:c8:a5:dd:00:d2:fc:44:78:0e:8a:cd:eb:28:
                    a3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5D:E8:50:2A:71:DE:63:79:E4:96:30:19:7C:28:4A:9A:9D:D8:E0
            X509v3 Authority Key Identifier:
                keyid:84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3138362e3235312e35302e302f32342d3234203d3e20323632383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:67:e8:b7:fb:58:99:cb:a6:a1:31:3c:38:99:f7:7f:3f:0d:
         bc:22:8d:c4:4b:7a:b7:0c:20:76:8d:54:a6:81:b8:82:fc:9b:
         69:e7:34:c2:ea:a8:1d:34:ab:75:b2:88:13:c7:e7:22:87:9b:
         de:54:db:26:c6:df:00:e9:b5:56:e2:4d:66:18:b1:f5:28:14:
         9e:ee:5e:ce:98:3c:f3:37:3e:26:1c:fc:81:e5:83:08:47:f6:
         5f:3b:97:2b:54:5f:21:80:ce:2b:45:b6:c1:75:1f:42:e8:1d:
         68:5b:ad:c7:80:b1:6c:18:fa:36:f1:5f:47:e3:55:f7:4d:88:
         11:37:f2:c3:18:a9:ce:d1:f6:dd:86:18:76:07:04:c4:86:5b:
         74:b9:a2:af:9d:74:c9:99:eb:03:5c:4d:7b:97:75:c1:ea:1b:
         ef:55:19:c0:66:cd:c4:84:18:13:54:fa:4d:21:5c:b7:ab:32:
         26:f5:bd:4e:46:ab:44:f0:3d:94:d9:3f:7a:60:83:9f:a5:03:
         2d:d9:24:49:6b:a8:11:46:af:0d:55:95:d8:c1:4d:79:07:bd:
         d4:00:22:a7:8d:27:c1:be:ad:84:eb:e5:b2:15:cd:16:e1:e0:
         0b:70:e9:ed:a7:c4:37:ea:90:ed:ac:d9:a7:a8:dd:3a:b5:c8:
         2a:00:8c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:02:31 2026 by rpki-client