Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/3138362e3235302e3136302e302f32342d3234203d3e20323632383138.roa
File:                     3138362e3235302e3136302e302f32342d3234203d3e20323632383138.roa (raw, json)
Hash identifier:          mSwIkgwv27QgLezHehCCveIg6XAwpCdnR193OBsG8y0=
Subject key identifier:   55:1C:C9:FD:E3:62:20:8C:1A:BC:A5:5C:70:CD:8C:89:E2:F6:AD:B3
Certificate issuer:       /CN=F8A5885612DC8F082016099D6959B32B90C3706E
Certificate serial:       6BAB9B63C0D4921BE4ACD19D7C1FF8C9CD7CEC19
Authority key identifier: F8:A5:88:56:12:DC:8F:08:20:16:09:9D:69:59:B3:2B:90:C3:70:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/3138362e3235302e3136302e302f32342d3234203d3e20323632383138.roa
Signing time:             Fri 08 Aug 2025 11:47:43 +0000
ROA not before:           Fri 08 Aug 2025 11:42:43 +0000
ROA not after:            Fri 07 Aug 2026 11:47:43 +0000
asID:                     262818
IP address blocks:        186.250.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.crl
                          rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 08:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ab:9b:63:c0:d4:92:1b:e4:ac:d1:9d:7c:1f:f8:c9:cd:7c:ec:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A5885612DC8F082016099D6959B32B90C3706E
        Validity
            Not Before: Aug  8 11:42:43 2025 GMT
            Not After : Aug  7 11:47:43 2026 GMT
        Subject: CN=551CC9FDE362208C1ABCA55C70CD8C89E2F6ADB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ea:19:35:29:eb:67:e1:f5:65:0e:89:3f:58:
                    13:48:23:8a:95:7b:ad:6a:16:95:50:33:03:eb:a1:
                    46:8d:40:f9:97:e8:23:05:ba:7e:de:23:d7:a6:98:
                    8d:1e:52:38:e4:a0:cc:77:4c:5d:11:d6:b9:3b:c4:
                    76:21:ef:09:f1:d3:d2:cf:ab:50:22:81:9c:5b:4e:
                    59:7d:dd:5a:a7:b7:b3:ba:05:71:76:e9:6d:02:a7:
                    10:25:41:7e:19:fe:28:16:48:8f:7a:95:40:f8:85:
                    90:1b:77:6a:57:6d:44:53:a9:b5:45:38:4d:0a:55:
                    8b:5a:55:29:4b:e6:59:af:8f:16:9e:02:ea:9f:78:
                    7c:88:e3:78:3e:a4:07:91:9f:5e:a3:40:67:0e:d2:
                    b9:46:97:ff:19:3c:d1:39:62:30:54:dd:39:65:84:
                    30:23:22:f6:ae:ae:8c:b6:07:26:9a:8d:63:42:12:
                    52:eb:f1:43:93:f1:93:17:32:df:e3:44:95:2e:64:
                    4b:2b:f2:0e:8a:7b:13:a0:92:0b:6c:09:d2:3a:26:
                    fc:1e:37:a1:01:5f:05:1b:ad:ca:36:0f:fa:0b:f6:
                    05:08:11:54:54:1e:26:69:67:3f:29:54:ce:3e:19:
                    92:13:28:e6:31:c4:2d:c6:b2:74:a6:59:60:35:91:
                    39:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1C:C9:FD:E3:62:20:8C:1A:BC:A5:5C:70:CD:8C:89:E2:F6:AD:B3
            X509v3 Authority Key Identifier:
                keyid:F8:A5:88:56:12:DC:8F:08:20:16:09:9D:69:59:B3:2B:90:C3:70:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/3138362e3235302e3136302e302f32342d3234203d3e20323632383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:ef:26:b5:5d:4b:01:2e:5f:81:dd:4d:55:b3:b3:61:aa:c2:
         e4:2c:ee:47:80:5a:08:70:e2:54:db:c4:b7:f1:de:26:ad:f1:
         ff:f5:ab:5a:a7:b9:dd:49:bb:d4:98:86:09:8e:31:69:4f:31:
         67:49:55:27:63:f3:f8:69:a5:34:3e:83:77:25:dc:ec:9f:74:
         dd:c5:86:9c:3c:bd:39:db:c0:fa:8b:c0:3c:27:8d:98:d1:ab:
         11:e0:a4:6e:6b:f1:50:e1:8f:b2:31:ef:df:23:b2:d3:bf:92:
         48:20:b5:ba:6b:5b:85:48:65:a7:19:78:65:e0:62:05:37:b5:
         4d:51:c9:a6:6c:f2:5a:d3:e7:ba:0a:2c:04:b8:15:98:c1:07:
         30:08:6d:6c:19:1d:4d:19:a3:d7:4a:35:d5:8e:8d:e0:e0:a5:
         7d:aa:ff:38:e3:c3:08:a2:91:0d:e3:f4:08:5e:8a:85:ed:3f:
         b1:c7:f7:32:3c:b4:c8:ff:0a:d5:c2:ac:19:bf:4e:2f:13:b3:
         0f:77:7e:7b:37:8e:dc:76:c1:7f:f3:20:a6:ac:24:f6:7a:6b:
         3a:16:94:52:cd:a7:c7:2b:f3:37:d4:a2:c3:a2:5e:08:33:cf:
         54:71:0d:a5:86:30:d2:5d:97:ed:26:80:ca:51:62:d4:93:c5:
         a5:85:50:4b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUa6ubY8DUkhvkrNGdfB/4yc187BkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhBNTg4NTYxMkRDOEYwODIwMTYwOTlENjk1OUIzMkI5
MEMzNzA2RTAeFw0yNTA4MDgxMTQyNDNaFw0yNjA4MDcxMTQ3NDNaMDMxMTAvBgNV
BAMTKDU1MUNDOUZERTM2MjIwOEMxQUJDQTU1QzcwQ0Q4Qzg5RTJGNkFEQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb6hk1Ketn4fVlDok/WBNII4qV
e61qFpVQMwProUaNQPmX6CMFun7eI9emmI0eUjjkoMx3TF0R1rk7xHYh7wnx09LP
q1AigZxbTll93Vqnt7O6BXF26W0CpxAlQX4Z/igWSI96lUD4hZAbd2pXbURTqbVF
OE0KVYtaVSlL5lmvjxaeAuqfeHyI43g+pAeRn16jQGcO0rlGl/8ZPNE5YjBU3Tll
hDAjIvauroy2ByaajWNCElLr8UOT8ZMXMt/jRJUuZEsr8g6KexOgkgtsCdI6Jvwe
N6EBXwUbrco2D/oL9gUIEVRUHiZpZz8pVM4+GZITKOYxxC3GsnSmWWA1kTnDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUVRzJ/eNiIIwavKVccM2MieL2rbMwHwYDVR0j
BBgwFoAU+KWIVhLcjwggFgmdaVmzK5DDcG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUNyU3A4R3Q1YXhEVmZyeUZwTkV3MURONVRTOGV4WDZjc2o4RXRVZHVH
Zm0vMC9GOEE1ODg1NjEyREM4RjA4MjAxNjA5OUQ2OTU5QjMyQjkwQzM3MDZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4QTU4ODU2MTJEQzhGMDgy
MDE2MDk5RDY5NTlCMzJCOTBDMzcwNkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VDclNwOEd0NWF4RFZmcnlGcE5FdzFETjVUUzhleFg2Y3NqOEV0VWR1R2ZtLzAv
MzEzODM2MmUzMjM1MzAyZTMxMzYzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM4MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALr6oDANBgkqhkiG9w0BAQsFAAOCAQEAD+8m
tV1LAS5fgd1NVbOzYarC5CzuR4BaCHDiVNvEt/HeJq3x//WrWqe53Um71JiGCY4x
aU8xZ0lVJ2Pz+GmlND6DdyXc7J903cWGnDy9OdvA+ovAPCeNmNGrEeCkbmvxUOGP
sjHv3yOy07+SSCC1umtbhUhlpxl4ZeBiBTe1TVHJpmzyWtPnugosBLgVmMEHMAht
bBkdTRmj10o11Y6N4OClfar/OOPDCKKRDeP0CF6Khe0/scf3Mjy0yP8K1cKsGb9O
LxOzD3d+ezeO3HbBf/Mgpqwk9nprOhaUUs2nxyvzN9Siw6JeCDPPVHENpYYw0l2X
7SaAylFi1JPFpYVQSw==
-----END CERTIFICATE-----
Generated at Wed Aug 20 18:31:33 2025 by rpki-client