Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CjCpTQxTGQazKvpXpqBA1HfsBV3aM6PmTo2fzJhyB37Y/0/3138362e3232372e38302e302f32322d3234203d3e203533313835.roa
File:                     3138362e3232372e38302e302f32322d3234203d3e203533313835.roa (raw, json)
Hash identifier:          QxoYqn4EFW6aItDWBhmJnojSUdjOUGx3jF/+Oeh9XlI=
Subject key identifier:   DA:E9:87:96:9E:04:A1:D2:42:0D:7E:72:8A:02:CF:F5:62:67:72:34
Certificate issuer:       /CN=46E758623EFE170AA967DD9B708B55161C29035A
Certificate serial:       2364475BADE46F5E15C903AB2B7533ED6A39D30C
Authority key identifier: 46:E7:58:62:3E:FE:17:0A:A9:67:DD:9B:70:8B:55:16:1C:29:03:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E758623EFE170AA967DD9B708B55161C29035A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CjCpTQxTGQazKvpXpqBA1HfsBV3aM6PmTo2fzJhyB37Y/0/3138362e3232372e38302e302f32322d3234203d3e203533313835.roa
Signing time:             Wed 13 May 2026 17:25:52 +0000
ROA not before:           Wed 13 May 2026 17:20:52 +0000
ROA not after:            Wed 12 May 2027 17:25:52 +0000
asID:                     53185
IP address blocks:        186.227.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CjCpTQxTGQazKvpXpqBA1HfsBV3aM6PmTo2fzJhyB37Y/0/46E758623EFE170AA967DD9B708B55161C29035A.crl
                          rsync://rpki-repo.registro.br/repo/CjCpTQxTGQazKvpXpqBA1HfsBV3aM6PmTo2fzJhyB37Y/0/46E758623EFE170AA967DD9B708B55161C29035A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E758623EFE170AA967DD9B708B55161C29035A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 21:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:64:47:5b:ad:e4:6f:5e:15:c9:03:ab:2b:75:33:ed:6a:39:d3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E758623EFE170AA967DD9B708B55161C29035A
        Validity
            Not Before: May 13 17:20:52 2026 GMT
            Not After : May 12 17:25:52 2027 GMT
        Subject: CN=DAE987969E04A1D2420D7E728A02CFF562677234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:ae:e9:0f:68:15:9b:df:e1:cd:24:84:ad:
                    3e:83:d0:62:94:ff:a4:25:25:c8:a7:2f:92:e4:39:
                    c5:0a:5f:ef:12:5a:7a:a2:df:57:c7:2f:b0:2f:35:
                    0c:2b:fc:e3:f4:7f:96:78:23:41:13:a2:b5:c2:fe:
                    2d:88:e8:c0:4d:d8:21:53:ea:dd:b4:db:e5:ae:ac:
                    66:eb:5a:4c:b9:b9:1e:06:cd:63:74:96:14:6f:5b:
                    15:2a:77:07:1e:87:8b:ca:4c:20:a2:b0:94:af:bb:
                    24:05:32:77:94:ed:6e:5d:b0:f1:61:49:94:fd:21:
                    de:78:13:bc:37:d9:67:69:11:0b:b3:62:1a:58:69:
                    8a:fb:a5:ac:4e:6d:6a:72:88:8a:c1:de:fa:35:ff:
                    f7:d6:29:26:62:f8:e7:f8:a5:40:78:ea:44:b0:ab:
                    a0:ca:a8:d5:bb:88:ec:35:5a:ca:52:32:2c:38:0d:
                    c1:63:d0:e1:fa:87:0e:65:c1:96:5f:a4:6d:77:fd:
                    2e:69:66:15:39:af:d4:5b:1b:6b:3e:9b:97:ca:fb:
                    bd:03:22:55:b3:bd:dc:cb:96:da:6d:27:5d:9c:7c:
                    4a:78:ea:a7:2a:ca:8c:a3:20:15:66:2e:13:be:6b:
                    cf:84:69:75:96:30:7b:f3:59:2f:14:4b:38:16:47:
                    c2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E9:87:96:9E:04:A1:D2:42:0D:7E:72:8A:02:CF:F5:62:67:72:34
            X509v3 Authority Key Identifier:
                keyid:46:E7:58:62:3E:FE:17:0A:A9:67:DD:9B:70:8B:55:16:1C:29:03:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CjCpTQxTGQazKvpXpqBA1HfsBV3aM6PmTo2fzJhyB37Y/0/46E758623EFE170AA967DD9B708B55161C29035A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E758623EFE170AA967DD9B708B55161C29035A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CjCpTQxTGQazKvpXpqBA1HfsBV3aM6PmTo2fzJhyB37Y/0/3138362e3232372e38302e302f32322d3234203d3e203533313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:c0:7d:84:bd:eb:e8:78:27:cb:80:ce:12:5f:69:8d:aa:d3:
         07:d5:7b:ff:c9:3b:16:04:0c:e7:14:02:66:bf:d8:40:ef:ba:
         25:ff:8f:2a:ac:36:a0:80:7c:b4:6a:ef:f7:38:e2:c2:da:11:
         e3:69:ae:fb:0f:5b:b5:0f:29:d5:fc:9c:9e:ff:f6:3d:c6:1f:
         42:55:54:74:cc:b6:1f:7c:2a:56:51:d9:8a:4e:49:d4:f2:9b:
         b6:8b:72:14:b1:14:48:d8:30:a7:4f:24:1f:05:45:88:1c:bf:
         15:21:6b:b5:48:95:bc:35:e0:80:af:6c:68:ed:c5:b4:55:d3:
         b7:04:f7:1b:bb:83:ec:3f:f5:b4:3a:f0:46:e5:9b:35:86:15:
         8e:9a:23:e7:a6:0a:3e:2f:97:7b:fa:36:15:f7:bf:be:61:9d:
         bf:3b:5e:63:1c:9a:09:7b:e7:4b:8c:83:1e:09:f0:51:86:d6:
         72:45:1c:18:3e:ec:b1:1f:d7:f4:89:0d:01:66:07:a9:77:4f:
         33:7b:44:3d:36:5a:9e:2f:9d:2e:a1:78:be:17:de:7f:98:f1:
         43:5a:0b:9f:f6:9a:87:6f:85:dc:ca:58:a3:ee:19:a4:c7:24:
         74:59:2b:95:d0:fb:f4:91:5e:0c:ac:56:cf:35:e8:00:52:6b:
         c4:ed:eb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:27:36 2026 by rpki-client