Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138362e3233352e3137372e302f32342d3234203d3e203238313339.roa
File:                     3138362e3233352e3137372e302f32342d3234203d3e203238313339.roa (raw, json)
Hash identifier:          mZxKdnkEUBn0TMM8hqRPnFM3Y6/dckrTILmVTBWPDts=
Subject key identifier:   41:CF:E1:F2:D5:94:D6:0B:C9:0A:B0:02:25:BA:07:4B:8D:2F:07:F3
Certificate issuer:       /CN=8DCB7831617AC9209CC97DB36614C6B05759A03B
Certificate serial:       4FF10E2E41E3344CF332BC4A4477C401FA95F980
Authority key identifier: 8D:CB:78:31:61:7A:C9:20:9C:C9:7D:B3:66:14:C6:B0:57:59:A0:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCB7831617AC9209CC97DB36614C6B05759A03B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138362e3233352e3137372e302f32342d3234203d3e203238313339.roa
Signing time:             Fri 14 Aug 2026 18:26:06 +0000
ROA not before:           Fri 14 Aug 2026 18:21:06 +0000
ROA not after:            Fri 13 Aug 2027 18:26:06 +0000
asID:                     28139
IP address blocks:        186.235.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/8DCB7831617AC9209CC97DB36614C6B05759A03B.crl
                          rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/8DCB7831617AC9209CC97DB36614C6B05759A03B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCB7831617AC9209CC97DB36614C6B05759A03B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 13:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f1:0e:2e:41:e3:34:4c:f3:32:bc:4a:44:77:c4:01:fa:95:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DCB7831617AC9209CC97DB36614C6B05759A03B
        Validity
            Not Before: Aug 14 18:21:06 2026 GMT
            Not After : Aug 13 18:26:06 2027 GMT
        Subject: CN=41CFE1F2D594D60BC90AB00225BA074B8D2F07F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2f:e2:dc:9d:84:df:05:b8:f7:f0:48:3b:07:
                    f6:14:60:e3:af:c8:96:c6:1a:c7:fb:c0:14:3b:e9:
                    73:99:43:6f:21:6a:6f:2d:96:98:ca:54:d7:aa:ba:
                    a0:a5:0b:d5:ae:b9:f7:c7:39:87:0e:fa:5d:38:58:
                    21:82:94:59:11:d4:cc:0b:79:a0:48:94:13:6c:4f:
                    aa:21:a5:0a:f5:d8:42:14:b4:a0:4b:6f:be:46:24:
                    b3:4a:18:17:48:e5:32:76:9d:5d:0c:7a:6b:29:c7:
                    10:7d:db:fb:9c:2d:81:19:bf:d5:6f:8c:ee:b3:83:
                    38:c4:1f:68:94:90:2a:95:4d:89:7d:90:08:4f:f3:
                    84:a0:9f:fa:22:a4:56:88:b0:8e:bb:b6:6b:14:4c:
                    7d:52:6a:8d:8c:72:4e:46:0d:2c:4e:de:58:f8:38:
                    e2:61:a1:ce:85:bd:e3:4e:a5:47:2b:b9:14:58:02:
                    c0:22:c7:2d:e5:72:a4:9a:cc:76:b1:eb:ce:b2:cf:
                    0f:1b:c8:79:d9:33:60:f2:e7:59:08:d2:dc:95:47:
                    b2:85:81:23:26:9a:3c:ca:50:be:95:9e:5a:36:aa:
                    1d:3d:06:1d:aa:f1:e7:0e:de:a6:57:51:e7:63:28:
                    c9:6b:4a:f7:b6:bb:2c:c9:0c:a4:a7:48:9f:3f:5d:
                    c5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CF:E1:F2:D5:94:D6:0B:C9:0A:B0:02:25:BA:07:4B:8D:2F:07:F3
            X509v3 Authority Key Identifier:
                keyid:8D:CB:78:31:61:7A:C9:20:9C:C9:7D:B3:66:14:C6:B0:57:59:A0:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/8DCB7831617AC9209CC97DB36614C6B05759A03B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCB7831617AC9209CC97DB36614C6B05759A03B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138362e3233352e3137372e302f32342d3234203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:8d:e7:34:6c:b5:a5:17:93:61:07:08:bc:4d:72:db:31:ed:
         4c:fe:76:62:20:d5:9d:dc:6c:e2:2d:cd:8f:1f:63:52:7e:22:
         ef:0d:72:4d:e6:04:4a:08:d4:cf:22:eb:86:de:17:ed:7b:be:
         3a:d5:67:14:d1:02:e5:b9:63:fc:ab:fd:9d:f0:3b:6e:93:e7:
         95:b5:cf:7e:6a:14:55:8d:09:58:d9:82:4a:35:b2:40:5e:9d:
         85:6b:b5:08:d7:96:6e:66:0e:17:a0:45:27:36:c5:d6:82:d9:
         30:13:50:fb:fd:83:ac:12:5a:45:ad:4b:d1:3b:7f:d3:68:89:
         6d:fe:b9:d5:97:df:68:7a:fd:4d:9b:67:9c:97:f9:12:2a:4a:
         cb:fc:c2:e1:60:3e:ef:ab:a1:c4:0a:7e:d0:8d:09:05:1b:ac:
         01:21:88:ef:19:67:ef:8b:2b:d1:1c:fb:cf:0a:3e:80:e6:be:
         e4:ca:61:bd:34:07:ad:0c:de:56:a5:24:a3:01:92:ca:69:e6:
         bb:d1:0a:41:bd:c1:63:c8:ed:a8:72:3e:79:05:67:72:40:ef:
         0b:37:c2:1f:9c:0a:8b:63:9e:cb:55:16:15:d6:7f:93:f3:85:
         64:f2:a1:41:57:16:48:25:04:74:87:61:f5:ef:07:bc:70:71:
         3e:35:c9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 21:02:59 2026 by rpki-client