Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e34372e302f32342d3234203d3e20323632383035.roa
File:                     3138362e3235302e34372e302f32342d3234203d3e20323632383035.roa (raw, json)
Hash identifier:          dJV5zgx2Zs99NBPtyow4ZRIV59rKvp/sG4T//j+wXCc=
Subject key identifier:   D9:3F:EC:72:26:10:D3:87:C6:6E:90:ED:C5:B4:EE:96:78:56:30:DB
Certificate issuer:       /CN=F7ECED1FAE9A90D251231BC04051D1B557DF53FB
Certificate serial:       6B6EC1DDAECD89A56006F952F8451BE1D4CD6663
Authority key identifier: F7:EC:ED:1F:AE:9A:90:D2:51:23:1B:C0:40:51:D1:B5:57:DF:53:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e34372e302f32342d3234203d3e20323632383035.roa
Signing time:             Thu 13 Aug 2026 19:37:29 +0000
ROA not before:           Thu 13 Aug 2026 19:32:29 +0000
ROA not after:            Thu 12 Aug 2027 19:37:29 +0000
asID:                     262805
IP address blocks:        186.250.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.crl
                          rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 18:38:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6e:c1:dd:ae:cd:89:a5:60:06:f9:52:f8:45:1b:e1:d4:cd:66:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7ECED1FAE9A90D251231BC04051D1B557DF53FB
        Validity
            Not Before: Aug 13 19:32:29 2026 GMT
            Not After : Aug 12 19:37:29 2027 GMT
        Subject: CN=D93FEC722610D387C66E90EDC5B4EE96785630DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cd:a0:f2:34:94:95:ab:63:cb:7b:f4:68:98:
                    af:6f:8c:4d:32:d3:7e:6a:43:c5:4f:5c:d4:2d:23:
                    55:17:23:bd:21:fa:b2:82:26:72:a6:4d:30:3d:13:
                    fe:45:f9:50:79:53:e2:58:c5:95:3d:82:78:98:4f:
                    95:c1:19:13:ad:c5:53:f2:33:d7:28:d2:1e:18:25:
                    52:04:9c:49:a2:1c:6d:f6:ca:04:ff:71:9b:27:19:
                    59:2e:b6:bb:41:71:7b:90:e2:d6:eb:f8:17:25:ba:
                    fa:7f:ec:c0:5f:e7:28:84:3c:2d:ea:fa:66:c1:cc:
                    49:b2:f6:1a:78:71:e2:71:f2:cd:55:69:19:20:48:
                    40:f6:b9:5e:86:74:a1:7b:c1:d5:f5:18:2b:8c:2e:
                    c1:b4:2c:43:1e:44:44:02:b5:f5:02:c1:29:a1:5f:
                    e3:89:4d:00:c1:74:1d:32:1b:e9:ba:22:a7:29:3a:
                    cd:43:3f:5e:58:ee:47:38:a1:fa:db:e1:d6:9c:83:
                    89:d6:9a:ed:a5:8a:96:4a:79:03:96:c9:6a:de:75:
                    80:d8:b0:f3:cb:f2:54:70:2c:3a:d0:cb:b5:7e:c3:
                    fd:e8:3f:10:9a:e9:0f:60:4b:cf:f4:2e:13:4c:dc:
                    9c:46:91:19:ba:54:dc:0a:04:c5:41:09:ab:f8:48:
                    d4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3F:EC:72:26:10:D3:87:C6:6E:90:ED:C5:B4:EE:96:78:56:30:DB
            X509v3 Authority Key Identifier:
                keyid:F7:EC:ED:1F:AE:9A:90:D2:51:23:1B:C0:40:51:D1:B5:57:DF:53:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e34372e302f32342d3234203d3e20323632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:6a:02:b7:c5:50:4b:11:66:16:5c:36:0b:a7:12:0d:33:10:
         0c:b0:f4:72:cb:f0:58:05:bd:75:4a:37:25:95:61:12:54:7a:
         d0:e0:be:dc:9b:79:ed:44:6c:a7:ef:c2:03:07:cd:59:17:55:
         fe:c7:c2:02:de:65:0b:f9:ea:c1:26:2d:73:3c:c9:68:06:fe:
         b4:9f:21:14:81:1b:0f:3e:4c:be:6b:67:dc:59:cb:46:56:7d:
         f3:e6:25:98:7d:b2:13:41:e6:05:1d:02:1b:a8:55:83:3f:5e:
         60:90:15:4b:ef:00:6f:78:d6:1f:bb:0e:0e:97:d1:d5:45:b2:
         ce:1f:0b:88:51:2e:b0:0d:06:cb:0e:2d:65:35:f1:f0:75:d9:
         da:ef:c1:e6:99:a3:95:57:93:94:bd:fa:20:a1:94:d5:e1:d8:
         1c:4b:86:2f:42:e7:62:30:b1:91:4d:19:02:c7:c8:04:11:89:
         5a:4b:eb:11:af:4c:f9:9f:af:b0:96:26:6a:31:4c:67:d9:85:
         05:8b:c1:87:d7:65:a3:ea:95:14:bc:d8:0e:98:d0:59:09:fc:
         05:b3:76:43:74:12:1a:06:dd:f6:0a:d5:62:53:98:4f:55:4d:
         b4:49:66:ff:0b:d7:35:76:d1:f6:c9:a2:37:63:3c:14:b4:16:
         5c:ea:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:57:47 2026 by rpki-client