Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVe3Ukxw2qNYKQyzEUzJMuHbpkGZf1AteGhVN4TEoSwY/0/3133382e3138362e36382e302f32342d3234203d3e20323633383633.roa
File:                     3133382e3138362e36382e302f32342d3234203d3e20323633383633.roa (raw, json)
Hash identifier:          yAhIbnSf0HKa5afuIWewtNLTdeDvnhuNQ/2/vOWoP7s=
Subject key identifier:   6E:AD:2D:20:8A:F3:B7:02:20:CF:68:BC:DF:DD:FC:FB:07:D5:1E:2E
Certificate issuer:       /CN=5885E722AB9310DDD233142F2CA1214FFCB77A28
Certificate serial:       1C5C4496E1631A0A19AED46FE9F6C1AE9471AF70
Authority key identifier: 58:85:E7:22:AB:93:10:DD:D2:33:14:2F:2C:A1:21:4F:FC:B7:7A:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5885E722AB9310DDD233142F2CA1214FFCB77A28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVe3Ukxw2qNYKQyzEUzJMuHbpkGZf1AteGhVN4TEoSwY/0/3133382e3138362e36382e302f32342d3234203d3e20323633383633.roa
Signing time:             Wed 11 Jun 2025 11:54:12 +0000
ROA not before:           Wed 11 Jun 2025 11:49:12 +0000
ROA not after:            Wed 10 Jun 2026 11:54:12 +0000
asID:                     263863
IP address blocks:        138.186.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVe3Ukxw2qNYKQyzEUzJMuHbpkGZf1AteGhVN4TEoSwY/0/5885E722AB9310DDD233142F2CA1214FFCB77A28.crl
                          rsync://rpki-repo.registro.br/repo/AVe3Ukxw2qNYKQyzEUzJMuHbpkGZf1AteGhVN4TEoSwY/0/5885E722AB9310DDD233142F2CA1214FFCB77A28.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5885E722AB9310DDD233142F2CA1214FFCB77A28.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 03:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5c:44:96:e1:63:1a:0a:19:ae:d4:6f:e9:f6:c1:ae:94:71:af:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885E722AB9310DDD233142F2CA1214FFCB77A28
        Validity
            Not Before: Jun 11 11:49:12 2025 GMT
            Not After : Jun 10 11:54:12 2026 GMT
        Subject: CN=6EAD2D208AF3B70220CF68BCDFDDFCFB07D51E2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:de:c0:c3:66:2d:3e:13:dc:04:d8:7a:93:
                    18:43:8c:11:d4:c9:6b:51:d6:c2:17:a5:38:1b:aa:
                    80:60:26:0e:c5:10:4a:bd:3c:15:fc:3a:68:15:25:
                    59:af:a8:10:b7:b2:f8:22:97:af:ee:26:20:d0:ef:
                    f4:8c:ea:c9:f2:aa:65:fd:8e:cc:e9:3d:aa:87:43:
                    2d:b6:2e:42:54:3f:59:85:c8:bf:e2:0c:89:18:85:
                    9b:e1:fa:e2:63:72:58:7a:f6:1b:cb:38:f5:ea:30:
                    62:fc:10:99:fe:27:8b:03:0c:7b:22:e9:bb:31:1e:
                    f5:93:b7:5c:56:54:07:12:3d:fa:6f:00:81:a8:24:
                    6a:fe:35:db:80:d7:ea:42:27:67:c0:e3:27:df:b2:
                    69:42:8c:8e:6d:ce:56:2b:a3:54:35:d7:67:bc:0f:
                    91:20:61:8e:8a:1c:4c:59:4b:25:64:d8:0b:12:29:
                    5b:65:41:95:aa:c6:4a:29:a6:81:4a:98:98:6e:4c:
                    b3:b9:92:ff:2a:f2:ad:0b:25:a4:ed:39:42:dd:a5:
                    7c:9d:36:7f:6f:ea:e0:5d:d2:09:4c:a5:de:8d:1d:
                    74:05:4b:d7:78:38:8e:31:43:bd:10:cb:d5:39:8e:
                    bb:8f:49:fb:1c:b9:66:3b:61:19:c7:a8:8b:7e:31:
                    48:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AD:2D:20:8A:F3:B7:02:20:CF:68:BC:DF:DD:FC:FB:07:D5:1E:2E
            X509v3 Authority Key Identifier:
                keyid:58:85:E7:22:AB:93:10:DD:D2:33:14:2F:2C:A1:21:4F:FC:B7:7A:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVe3Ukxw2qNYKQyzEUzJMuHbpkGZf1AteGhVN4TEoSwY/0/5885E722AB9310DDD233142F2CA1214FFCB77A28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5885E722AB9310DDD233142F2CA1214FFCB77A28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVe3Ukxw2qNYKQyzEUzJMuHbpkGZf1AteGhVN4TEoSwY/0/3133382e3138362e36382e302f32342d3234203d3e20323633383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:da:86:d9:6b:a3:2b:16:fd:9f:c6:72:1e:02:8d:5b:98:e8:
         cd:9e:a8:9e:99:f3:58:36:e8:a3:7f:0c:de:ee:f4:7c:88:07:
         d3:18:18:d0:44:7b:0e:4e:94:dd:e9:b2:3f:47:99:ba:60:ec:
         0e:1b:63:7c:7a:28:cc:73:71:df:db:f5:de:f3:75:94:58:a9:
         03:ce:18:82:a1:01:c5:66:56:45:35:be:d6:17:3a:48:a4:ff:
         c3:5f:90:a9:d8:ad:15:8f:ab:2a:09:77:33:a9:7e:5c:24:b2:
         62:7b:e2:03:da:ca:d9:e0:47:ae:ce:2d:38:d7:35:4a:8f:53:
         d4:f6:1d:54:8b:84:d9:25:a8:57:45:d2:e0:97:1b:79:14:47:
         60:b1:ab:99:ad:d4:38:11:43:81:ea:ba:cb:7c:b1:b1:d1:3e:
         23:7d:0b:96:f5:8f:32:42:f2:d3:52:ef:c1:cc:5a:9b:fd:d9:
         e0:be:60:38:25:ff:49:c5:60:1a:d8:e1:46:ec:38:c9:a4:4b:
         2c:8f:f3:06:92:87:26:0b:ff:83:28:e1:fa:29:96:10:68:4e:
         6f:28:db:b1:ba:d0:bd:86:53:96:3f:bd:06:a0:51:9c:a0:3b:
         9b:b1:0a:76:c6:d6:d3:d9:02:12:c1:4d:15:5a:92:22:28:60:
         91:f9:24:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:51:29 2025 by rpki-client