Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/3138362e3233352e33312e302f32342d3234203d3e20323632343334.roa
File:                     3138362e3233352e33312e302f32342d3234203d3e20323632343334.roa (raw, json)
Hash identifier:          51fzVoQ1zVy4SSYy6ehKq52OVPnkfTk9v5R7Sj54s9w=
Subject key identifier:   B4:4E:32:5B:12:26:4C:CE:C8:04:B9:6B:90:52:CD:31:28:A6:4D:CD
Certificate issuer:       /CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
Certificate serial:       6E787406BDC1137B8F6EF188406DC02CF99B5556
Authority key identifier: A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/3138362e3233352e33312e302f32342d3234203d3e20323632343334.roa
Signing time:             Tue 03 Jun 2025 20:45:31 +0000
ROA not before:           Tue 03 Jun 2025 20:40:31 +0000
ROA not after:            Tue 02 Jun 2026 20:45:31 +0000
asID:                     262434
IP address blocks:        186.235.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl
                          rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:78:74:06:bd:c1:13:7b:8f:6e:f1:88:40:6d:c0:2c:f9:9b:55:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
        Validity
            Not Before: Jun  3 20:40:31 2025 GMT
            Not After : Jun  2 20:45:31 2026 GMT
        Subject: CN=B44E325B12264CCEC804B96B9052CD3128A64DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a2:77:53:7b:ba:a2:e2:7b:e6:48:f2:df:9c:
                    a5:d0:89:7d:50:ee:51:71:bc:ee:b8:e1:d9:d2:e5:
                    27:6b:73:1d:b6:3c:79:a7:4f:dd:22:f1:4e:bd:d6:
                    18:61:2c:be:82:7b:d2:c2:9c:b5:d0:97:9c:aa:9f:
                    45:4a:85:f8:d5:50:a9:c8:be:9d:c3:e5:54:87:af:
                    43:a4:bc:78:83:8b:79:57:0b:06:c8:2f:07:aa:35:
                    c7:1a:75:02:e9:b3:d3:a9:9f:60:4a:d3:46:2e:54:
                    95:d2:31:69:2c:49:9d:e5:aa:1f:b7:ae:0b:18:c7:
                    50:5d:cc:fe:cc:44:a4:c6:f5:9f:5c:b4:45:e5:7a:
                    cc:13:68:41:30:9d:a4:44:f9:02:52:b7:12:c8:4c:
                    ef:73:b6:42:cd:4b:6e:ee:78:6f:84:06:3d:47:52:
                    7e:db:14:18:e9:79:93:a5:34:e1:06:b5:58:37:61:
                    61:18:e0:92:0d:a1:5a:ec:d3:e9:ba:27:d1:77:7f:
                    9e:b4:6f:87:60:2b:6b:be:81:68:f4:c2:7f:d7:0c:
                    82:a8:fc:86:0a:cb:c4:98:c1:54:ff:9d:6d:f7:b1:
                    f8:63:13:0e:97:63:ef:f5:24:ba:73:17:1a:8b:45:
                    98:f4:26:1d:ab:8d:90:01:ed:99:52:21:3f:04:70:
                    5a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4E:32:5B:12:26:4C:CE:C8:04:B9:6B:90:52:CD:31:28:A6:4D:CD
            X509v3 Authority Key Identifier:
                keyid:A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/3138362e3233352e33312e302f32342d3234203d3e20323632343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:d0:d1:72:a9:a5:22:ba:07:ac:79:e4:33:4f:f5:1f:ab:1f:
         0a:67:da:54:76:30:c3:97:f7:c4:59:51:07:1b:06:a0:0e:4e:
         45:ff:f7:4f:f8:63:75:c2:be:f7:cf:70:54:6e:b8:bb:e2:67:
         22:d2:9a:30:1b:b4:a2:e5:f9:92:d5:97:8f:91:70:b2:5d:77:
         b1:09:74:85:d6:86:11:f7:41:46:d0:29:f1:02:03:2d:bf:f7:
         ef:f9:15:de:4d:a3:41:5b:fa:be:62:5f:52:7c:56:ad:6c:1b:
         0f:6e:ed:a6:1b:40:79:b4:fc:67:9b:45:2c:7e:29:9c:d6:ce:
         be:e9:39:f9:ef:30:c6:49:a5:5b:0f:fc:df:07:6c:72:c5:e9:
         fb:04:ef:02:77:89:0c:b1:eb:e5:93:57:15:ab:35:66:76:58:
         e2:4c:84:17:3b:77:7e:fe:4a:0e:ad:73:4d:e1:83:34:dd:04:
         21:74:f9:65:03:6e:77:c3:41:4b:68:5c:f6:f0:19:ef:91:ac:
         9c:0b:fa:12:ea:71:1a:4c:1a:37:93:ed:48:8b:92:b9:e0:9a:
         d4:05:0b:d1:40:3b:8f:ff:c5:a5:fb:70:64:f7:2f:2a:e8:c5:
         99:8f:d1:9d:66:d4:77:5f:46:f4:6d:be:af:7e:b5:4f:34:27:
         9d:d6:8e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:39:57 2025 by rpki-client