Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRUm6Ad99ptoaumXSTBDb1Ho2Y6TvvZFzueSSpRXH9Mp/0/3138362e3235302e3232382e302f32322d3332203d3e203532383937.roa
File:                     3138362e3235302e3232382e302f32322d3332203d3e203532383937.roa (raw, json)
Hash identifier:          STUN1541j8aNF0gOnrCOpRNvIjbRNStNvchfwulqj00=
Subject key identifier:   E6:D2:41:A4:D0:FC:9B:59:62:EC:58:5F:FD:2E:F9:19:D2:D0:3E:D6
Certificate issuer:       /CN=17113C36FEE93462D220579FE8CB2E258D7463D7
Certificate serial:       7FD8B4FF328058AC45EBD032784D5D9873EB51F5
Authority key identifier: 17:11:3C:36:FE:E9:34:62:D2:20:57:9F:E8:CB:2E:25:8D:74:63:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17113C36FEE93462D220579FE8CB2E258D7463D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRUm6Ad99ptoaumXSTBDb1Ho2Y6TvvZFzueSSpRXH9Mp/0/3138362e3235302e3232382e302f32322d3332203d3e203532383937.roa
Signing time:             Wed 08 Jul 2026 12:13:30 +0000
ROA not before:           Wed 08 Jul 2026 12:08:30 +0000
ROA not after:            Wed 07 Jul 2027 12:13:30 +0000
asID:                     52897
IP address blocks:        186.250.228.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRUm6Ad99ptoaumXSTBDb1Ho2Y6TvvZFzueSSpRXH9Mp/0/17113C36FEE93462D220579FE8CB2E258D7463D7.crl
                          rsync://rpki-repo.registro.br/repo/BRUm6Ad99ptoaumXSTBDb1Ho2Y6TvvZFzueSSpRXH9Mp/0/17113C36FEE93462D220579FE8CB2E258D7463D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17113C36FEE93462D220579FE8CB2E258D7463D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 12:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d8:b4:ff:32:80:58:ac:45:eb:d0:32:78:4d:5d:98:73:eb:51:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17113C36FEE93462D220579FE8CB2E258D7463D7
        Validity
            Not Before: Jul  8 12:08:30 2026 GMT
            Not After : Jul  7 12:13:30 2027 GMT
        Subject: CN=E6D241A4D0FC9B5962EC585FFD2EF919D2D03ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b7:e9:00:06:27:1b:e1:4b:55:a3:6f:e3:6c:
                    21:3f:21:f1:78:70:7b:d4:ec:36:31:9f:8a:46:4d:
                    97:4a:82:ea:1e:3c:ba:aa:ab:83:f6:97:6f:76:23:
                    ea:ff:37:54:02:3a:96:b8:84:23:8c:71:23:02:8a:
                    b4:6a:f4:06:57:04:b6:e9:76:71:e3:90:d1:3c:08:
                    60:e1:a0:e4:ca:0f:77:a1:a9:b8:a3:64:ed:1b:04:
                    9d:5b:51:19:f8:e4:59:39:0e:32:94:58:81:2f:71:
                    2c:31:b0:82:d5:80:d7:87:ef:cd:0f:b8:26:34:27:
                    8b:52:74:fd:08:05:71:fe:68:b5:b2:6b:0b:58:a5:
                    7d:bd:93:bc:df:8d:23:28:0e:15:c1:c7:af:d0:14:
                    e8:63:42:5f:f2:00:d2:8e:4f:f9:8a:c4:98:f5:3d:
                    1b:9f:89:fd:33:5b:e0:52:0c:8d:fe:3c:da:ef:b2:
                    4d:a9:cd:8b:19:12:a6:21:9c:3e:39:e1:e5:44:15:
                    fe:8b:ff:84:ae:03:59:bf:2e:d6:2f:54:3a:90:1a:
                    e4:1f:fb:f4:43:5f:ce:c2:79:f4:ea:50:a6:ee:a8:
                    a8:67:13:8b:76:d0:b9:ea:ff:ef:6b:31:5c:5d:4f:
                    a0:8e:f4:6a:28:77:0b:71:31:c8:68:09:59:35:8b:
                    22:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D2:41:A4:D0:FC:9B:59:62:EC:58:5F:FD:2E:F9:19:D2:D0:3E:D6
            X509v3 Authority Key Identifier:
                keyid:17:11:3C:36:FE:E9:34:62:D2:20:57:9F:E8:CB:2E:25:8D:74:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRUm6Ad99ptoaumXSTBDb1Ho2Y6TvvZFzueSSpRXH9Mp/0/17113C36FEE93462D220579FE8CB2E258D7463D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17113C36FEE93462D220579FE8CB2E258D7463D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRUm6Ad99ptoaumXSTBDb1Ho2Y6TvvZFzueSSpRXH9Mp/0/3138362e3235302e3232382e302f32322d3332203d3e203532383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:2f:30:20:2e:1d:b5:e9:42:da:84:cf:a9:76:19:ed:d4:b3:
         38:0d:05:da:2f:f0:32:c6:d6:b9:ea:33:88:44:2e:47:cf:01:
         1c:11:18:65:55:9a:36:96:8c:81:cc:d1:c7:c9:49:6e:3a:a3:
         b2:83:8b:ba:63:9b:0b:f3:75:bd:68:71:34:ca:fc:ab:66:0a:
         c4:eb:88:22:52:f9:86:3f:5b:c8:97:7e:46:6b:e0:92:ea:13:
         03:ca:7f:0e:df:d4:b1:33:63:19:33:a3:c7:9d:39:5a:40:7c:
         61:1b:fc:b7:0a:66:67:f9:27:2d:49:0b:a2:46:3c:a0:9f:cc:
         22:98:ec:63:1d:7b:94:10:54:2d:a0:5e:3f:72:01:1d:cb:6a:
         c7:26:6b:a9:95:aa:1d:50:39:fd:c4:7c:30:23:e9:f6:2f:84:
         e5:c4:cf:64:17:c2:09:77:86:c4:2b:47:eb:33:5e:62:b6:6f:
         23:81:95:fe:e3:d0:a4:07:67:7d:7c:89:ad:c3:25:f2:00:b5:
         58:02:b1:07:ba:da:04:6f:e5:18:b6:19:47:5d:b8:df:68:bd:
         0d:a2:97:df:bf:8c:79:02:45:48:48:d6:44:9f:3a:21:b3:4c:
         fd:c0:f0:52:6f:7a:6b:cc:ef:c8:8e:00:df:a0:06:e6:58:1f:
         a9:44:49:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:29 2026 by rpki-client