Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e3130342e302f32312d3231203d3e20323632383035.roa
File:                     3138362e3235302e3130342e302f32312d3231203d3e20323632383035.roa (raw, json)
Hash identifier:          MwXzRDdoxt5FPRynq26cjp+9uaXJ4Dk1oyBzK145gG0=
Subject key identifier:   82:55:DF:2F:BF:BF:D0:45:7C:27:9B:65:0B:F2:4C:A1:8F:D3:AD:FA
Certificate issuer:       /CN=F7ECED1FAE9A90D251231BC04051D1B557DF53FB
Certificate serial:       661110B6800D1C5778EA1A215351E09FC49A1213
Authority key identifier: F7:EC:ED:1F:AE:9A:90:D2:51:23:1B:C0:40:51:D1:B5:57:DF:53:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e3130342e302f32312d3231203d3e20323632383035.roa
Signing time:             Thu 13 Aug 2026 19:37:29 +0000
ROA not before:           Thu 13 Aug 2026 19:32:29 +0000
ROA not after:            Thu 12 Aug 2027 19:37:29 +0000
asID:                     262805
IP address blocks:        186.250.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.crl
                          rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 15:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:11:10:b6:80:0d:1c:57:78:ea:1a:21:53:51:e0:9f:c4:9a:12:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7ECED1FAE9A90D251231BC04051D1B557DF53FB
        Validity
            Not Before: Aug 13 19:32:29 2026 GMT
            Not After : Aug 12 19:37:29 2027 GMT
        Subject: CN=8255DF2FBFBFD0457C279B650BF24CA18FD3ADFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:6e:e6:3f:c9:74:be:dc:f1:bc:9f:97:c1:
                    20:00:cb:41:56:68:1f:7a:f6:3e:12:b4:d4:f8:0a:
                    e1:35:49:d6:5c:d0:86:d6:22:ed:a8:f0:97:18:db:
                    57:be:6b:a5:93:9e:69:04:c2:2f:dd:90:09:69:39:
                    06:dd:31:44:5c:d9:0a:08:08:0e:d0:fa:c5:70:2e:
                    13:24:d9:e2:0f:78:8f:50:0f:df:8a:87:97:91:3e:
                    0c:51:de:70:fe:b2:02:8d:fc:f9:f8:a8:f5:dd:3e:
                    5a:c8:2b:35:2c:08:f5:be:e6:60:dc:b3:86:af:10:
                    98:78:4d:f9:98:07:e2:9b:0b:1d:3a:61:a4:c0:06:
                    6c:15:d5:5c:be:55:9c:f0:c8:06:86:0c:92:24:11:
                    22:58:a9:28:4c:1f:25:49:74:c4:80:db:dc:cd:49:
                    ec:cc:43:a7:b7:83:85:86:2a:7f:5c:f9:ca:78:96:
                    fe:b2:bd:69:ba:8d:a7:02:fe:22:1b:a0:e0:b1:44:
                    a1:86:76:15:a7:a7:c2:49:5f:c0:73:1e:09:5f:4e:
                    e4:3f:11:23:35:21:eb:64:7a:e7:8f:e3:c5:e2:8d:
                    50:48:85:86:a5:98:62:18:80:89:9e:33:3a:b5:9b:
                    b9:f8:8c:29:24:6f:78:b2:a0:80:01:30:d5:66:69:
                    5e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:55:DF:2F:BF:BF:D0:45:7C:27:9B:65:0B:F2:4C:A1:8F:D3:AD:FA
            X509v3 Authority Key Identifier:
                keyid:F7:EC:ED:1F:AE:9A:90:D2:51:23:1B:C0:40:51:D1:B5:57:DF:53:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e3130342e302f32312d3231203d3e20323632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:8f:4e:a8:df:44:71:0a:21:f3:cd:f6:9a:0c:f2:fa:c4:df:
         c8:d0:c5:79:28:38:ff:6b:d9:dd:66:c6:36:4b:a8:e9:43:7a:
         0b:50:ca:55:5c:b3:15:a9:bb:a7:4e:0a:09:06:bc:6f:3e:a2:
         39:f3:e6:00:0f:e5:07:d8:d7:27:94:10:bd:78:74:0d:cd:ff:
         98:7b:6e:f6:81:54:e6:07:3b:be:9c:70:5f:c4:c4:fe:93:dd:
         84:ac:97:9b:15:b8:51:bb:1c:b6:f6:3c:dd:58:c5:15:a3:4c:
         bc:83:b5:a6:66:cc:99:90:da:0c:fd:d8:ce:36:c7:37:6d:b5:
         ab:7c:13:21:fb:f4:65:e6:ff:ba:47:db:18:ee:07:ff:90:da:
         b0:dd:27:08:26:ea:de:eb:49:18:2f:52:fe:d5:f7:c8:53:77:
         ce:ea:4d:96:71:5a:f6:65:ee:22:44:d5:fb:27:8f:93:a1:23:
         81:03:65:43:58:37:bd:5b:9d:03:70:53:09:7c:e0:33:fe:b3:
         a2:b2:99:59:94:23:c7:b0:ec:cf:03:7c:97:fe:36:f8:da:f8:
         ed:6d:f5:81:44:11:a6:0d:f0:b9:ab:aa:d7:89:68:a9:e0:bc:
         17:e9:d9:15:04:16:b3:b0:bc:7c:f1:87:23:f3:2d:d5:e6:0b:
         bd:55:e6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:34:20 2026 by rpki-client