Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e34342e302f32342d3234203d3e20323632383035.roa
File:                     3138362e3235302e34342e302f32342d3234203d3e20323632383035.roa (raw, json)
Hash identifier:          o/lvYroVFvkz/UjFQKefN3JdOKqSi4C+k6UX3Ce7wEU=
Subject key identifier:   4A:6C:66:8D:93:70:D5:B2:89:AB:76:75:22:C8:77:A2:91:DC:BB:85
Certificate issuer:       /CN=F7ECED1FAE9A90D251231BC04051D1B557DF53FB
Certificate serial:       71F986317FC5F5D4666751CB4BAB9B289C3EAFAF
Authority key identifier: F7:EC:ED:1F:AE:9A:90:D2:51:23:1B:C0:40:51:D1:B5:57:DF:53:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e34342e302f32342d3234203d3e20323632383035.roa
Signing time:             Thu 13 Aug 2026 19:37:31 +0000
ROA not before:           Thu 13 Aug 2026 19:32:31 +0000
ROA not after:            Thu 12 Aug 2027 19:37:31 +0000
asID:                     262805
IP address blocks:        186.250.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.crl
                          rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f9:86:31:7f:c5:f5:d4:66:67:51:cb:4b:ab:9b:28:9c:3e:af:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7ECED1FAE9A90D251231BC04051D1B557DF53FB
        Validity
            Not Before: Aug 13 19:32:31 2026 GMT
            Not After : Aug 12 19:37:31 2027 GMT
        Subject: CN=4A6C668D9370D5B289AB767522C877A291DCBB85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:55:38:6b:16:1f:f0:25:6a:d4:ca:53:3f:
                    5e:d4:a8:79:da:b9:e5:98:2c:18:f9:f2:07:9f:ce:
                    82:75:a5:04:bc:a7:c3:87:5c:ee:a1:1e:51:29:ac:
                    95:42:a0:93:06:64:52:06:a7:5b:e1:d2:d6:a6:91:
                    2b:ab:0f:42:b1:fd:04:0d:d4:dc:b3:d3:c2:c2:2e:
                    de:9d:37:1d:6b:bc:5f:21:91:f9:47:6b:0e:7a:e6:
                    a3:ae:27:67:9a:14:76:2e:76:75:d9:85:3a:ae:6d:
                    55:19:e5:d5:47:f8:ce:53:f9:13:51:29:3d:34:6b:
                    33:00:4f:1e:10:2f:b7:09:57:ce:20:d2:ce:73:c8:
                    db:c2:ba:db:5f:12:8d:70:ef:d9:fa:77:00:fb:7f:
                    dc:88:b7:cd:48:10:7b:14:16:58:5d:17:27:26:7c:
                    44:50:cb:65:2a:b6:72:d5:a7:1d:a7:80:3f:15:25:
                    51:4a:36:e2:35:0e:c0:50:e3:fd:b3:62:f9:77:a4:
                    6f:05:3b:0f:a4:6a:a4:3e:39:42:85:16:c6:c2:95:
                    14:02:93:95:3e:f6:1b:92:ef:2f:72:13:19:0a:24:
                    fa:44:3c:e2:c8:36:b5:27:0d:58:18:c1:fe:5f:f4:
                    7b:5f:15:2e:e2:df:bf:c0:f8:a5:21:0b:7c:a2:2a:
                    e5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6C:66:8D:93:70:D5:B2:89:AB:76:75:22:C8:77:A2:91:DC:BB:85
            X509v3 Authority Key Identifier:
                keyid:F7:EC:ED:1F:AE:9A:90:D2:51:23:1B:C0:40:51:D1:B5:57:DF:53:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e34342e302f32342d3234203d3e20323632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:73:e5:05:86:cc:02:73:0f:17:49:05:d1:e5:2c:5d:8a:59:
         5e:92:9f:42:e4:ec:9e:99:e0:7d:9e:f0:3d:d2:b2:4f:ba:4d:
         b0:45:83:0b:ae:b6:67:61:7a:eb:bc:73:47:bf:9d:37:c2:88:
         6f:2b:0d:ae:b8:4c:e1:4a:11:f0:06:c2:06:9d:66:6f:1d:9e:
         07:27:58:b8:ec:b1:51:d6:69:22:68:07:16:65:82:a6:d4:ac:
         e0:52:b9:dd:fd:21:96:8f:0f:10:63:50:a6:11:5a:1c:8e:b1:
         52:ae:4c:31:37:26:86:3f:af:ad:b0:14:0b:b3:70:f9:6a:53:
         14:ef:a2:e9:01:8e:41:7c:89:b5:82:0b:8a:c8:96:fa:78:08:
         a7:58:a6:7b:ba:6a:03:17:dc:31:b5:00:86:84:42:5d:a8:13:
         3a:cd:4c:f5:39:b7:9a:34:3a:1a:6c:43:a1:66:87:b8:98:87:
         85:f5:4f:62:75:1b:79:7b:41:67:55:90:70:64:0d:9d:9e:04:
         97:ee:92:03:68:cc:22:03:56:c8:f3:4f:e8:20:35:c9:36:1c:
         2c:7e:ac:72:01:9b:48:cc:c5:2b:cc:d2:5a:4b:f1:8f:ed:53:
         28:f1:ab:4a:89:2f:34:fd:65:a3:f5:19:81:a7:83:f8:32:67:
         e7:90:31:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 01:14:09 2026 by rpki-client