Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HR7ipSpaPa399cYjpGuJyqfZvbJiCjEYRDGxdTHvqkuW/0/3138362e3232352e3137362e302f32342d3234203d3e20323633303939.roa
File:                     3138362e3232352e3137362e302f32342d3234203d3e20323633303939.roa (raw, json)
Hash identifier:          0NmWSOZ+h58SZIo30IeP3nTsqJVEtPGD4sQ4hNrm6tY=
Subject key identifier:   6E:93:FB:9C:C6:99:E2:2A:E0:D8:A1:52:44:CB:77:0A:86:35:B3:1A
Certificate issuer:       /CN=783148D2093D8398E4F38DB6CF3BEDDB87B56480
Certificate serial:       145BE990EE1BE8F67DB832E0284E9707309F52C6
Authority key identifier: 78:31:48:D2:09:3D:83:98:E4:F3:8D:B6:CF:3B:ED:DB:87:B5:64:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783148D2093D8398E4F38DB6CF3BEDDB87B56480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HR7ipSpaPa399cYjpGuJyqfZvbJiCjEYRDGxdTHvqkuW/0/3138362e3232352e3137362e302f32342d3234203d3e20323633303939.roa
Signing time:             Sun 05 Jul 2026 15:05:26 +0000
ROA not before:           Sun 05 Jul 2026 15:00:26 +0000
ROA not after:            Sun 04 Jul 2027 15:05:26 +0000
asID:                     263099
IP address blocks:        186.225.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HR7ipSpaPa399cYjpGuJyqfZvbJiCjEYRDGxdTHvqkuW/0/783148D2093D8398E4F38DB6CF3BEDDB87B56480.crl
                          rsync://rpki-repo.registro.br/repo/HR7ipSpaPa399cYjpGuJyqfZvbJiCjEYRDGxdTHvqkuW/0/783148D2093D8398E4F38DB6CF3BEDDB87B56480.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783148D2093D8398E4F38DB6CF3BEDDB87B56480.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 01:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5b:e9:90:ee:1b:e8:f6:7d:b8:32:e0:28:4e:97:07:30:9f:52:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783148D2093D8398E4F38DB6CF3BEDDB87B56480
        Validity
            Not Before: Jul  5 15:00:26 2026 GMT
            Not After : Jul  4 15:05:26 2027 GMT
        Subject: CN=6E93FB9CC699E22AE0D8A15244CB770A8635B31A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b4:0a:06:72:12:98:fa:69:8e:bf:87:b1:c6:
                    26:27:dc:b7:e3:c3:27:d8:a6:52:9a:af:8e:78:b7:
                    63:3e:20:91:49:ea:b9:1c:f1:1a:74:58:46:18:ea:
                    56:51:23:5e:78:2d:89:ba:32:72:15:a0:a0:6a:9a:
                    68:44:d4:36:7d:8b:08:be:fb:5f:8b:4d:cf:18:a2:
                    bb:61:26:2c:02:53:43:4c:51:dd:04:f5:3a:6d:08:
                    b2:18:e2:f1:d4:0e:71:c4:93:a4:49:51:15:dc:e4:
                    49:7e:50:14:7e:e0:91:90:0a:40:ef:06:a6:5f:ed:
                    49:5f:8f:7e:39:33:4f:19:f5:b0:9b:e2:1f:22:cd:
                    db:64:92:1d:91:83:dc:22:9a:1f:ee:53:cc:35:6a:
                    16:31:08:e5:89:72:c9:87:8b:b3:71:29:1b:fb:b6:
                    45:83:97:c1:4a:1c:2b:e8:07:79:e6:83:66:75:75:
                    43:7f:52:a6:96:30:0f:73:92:1c:ad:91:12:13:9f:
                    3e:73:81:d6:ba:7d:a9:5c:f3:63:f0:f6:50:c5:d7:
                    af:28:84:f9:da:10:95:46:c7:8b:8f:a6:02:9e:22:
                    8f:aa:e6:4a:82:31:b9:82:da:d4:fd:6b:86:12:e4:
                    c4:8f:ed:c5:5f:e8:75:aa:e0:28:f3:18:71:79:70:
                    35:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:93:FB:9C:C6:99:E2:2A:E0:D8:A1:52:44:CB:77:0A:86:35:B3:1A
            X509v3 Authority Key Identifier:
                keyid:78:31:48:D2:09:3D:83:98:E4:F3:8D:B6:CF:3B:ED:DB:87:B5:64:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HR7ipSpaPa399cYjpGuJyqfZvbJiCjEYRDGxdTHvqkuW/0/783148D2093D8398E4F38DB6CF3BEDDB87B56480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783148D2093D8398E4F38DB6CF3BEDDB87B56480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HR7ipSpaPa399cYjpGuJyqfZvbJiCjEYRDGxdTHvqkuW/0/3138362e3232352e3137362e302f32342d3234203d3e20323633303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:26:11:ca:28:5b:7a:54:ae:a3:67:a4:93:24:49:af:21:fc:
         44:d8:18:4f:c5:ad:e9:af:74:7b:e8:d7:35:d6:9c:f2:a7:46:
         28:4f:f8:84:e8:19:1a:d7:26:2f:fa:ef:c7:fd:1d:a5:86:a8:
         39:49:be:ad:6d:77:80:52:94:e5:26:2a:05:96:1a:c8:ae:1a:
         17:92:b9:6e:2a:37:7c:74:36:bf:f6:22:bb:4a:ec:de:87:e7:
         43:3e:5f:31:d0:6b:95:69:d0:c7:82:19:91:f5:55:7d:f3:30:
         c8:03:02:e7:ea:f2:86:0c:38:bf:62:23:3d:d9:f4:b4:5c:17:
         97:f3:fc:62:93:fc:ff:ab:a2:5b:e8:62:d6:5c:54:10:38:f4:
         6a:2d:73:8e:13:a5:4a:b5:df:51:45:f0:f0:63:6c:30:0b:b3:
         e7:ca:1e:24:43:b8:b1:dd:3e:3c:32:1f:34:ce:e7:bb:48:d9:
         ff:6c:34:19:f7:40:28:5a:74:b4:d0:6b:3f:1d:34:8c:18:ee:
         ab:82:0c:cb:89:ac:80:0d:0f:69:e7:6f:32:68:a2:b8:a8:b4:
         8a:77:3a:59:3d:e4:6f:21:8a:ab:41:98:1c:37:b2:27:83:8d:
         98:7b:2b:82:3d:e5:fd:17:61:8d:8f:38:2b:1e:8b:43:d0:5f:
         05:18:03:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:29 2026 by rpki-client