Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36382e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e36382e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          yDZHTXuQ242AQru/bk5pRevsnGhfy1nyynSVNC+cgbo=
Subject key identifier:   9C:F3:04:FE:73:91:B9:B7:D8:42:64:23:62:3C:AD:4F:EF:F6:B9:27
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       0A0E4381896281B8A738E13F6A1303D7080B9649
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36382e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:38:08 +0000
ROA not before:           Wed 30 Apr 2025 18:33:08 +0000
ROA not after:            Wed 29 Apr 2026 18:38:08 +0000
asID:                     52580
IP address blocks:        186.195.68.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 09:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0e:43:81:89:62:81:b8:a7:38:e1:3f:6a:13:03:d7:08:0b:96:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:33:08 2025 GMT
            Not After : Apr 29 18:38:08 2026 GMT
        Subject: CN=9CF304FE7391B9B7D8426423623CAD4FEFF6B927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:78:28:6d:4b:cb:82:6f:c7:c8:6e:12:24:2a:
                    69:ba:36:3e:e2:cc:bb:43:77:e7:f8:c9:ab:67:3b:
                    8b:45:99:87:f8:ca:13:d5:1d:41:e9:d9:a0:84:e1:
                    46:17:83:e8:ad:99:87:11:76:8f:43:be:3c:b2:4d:
                    7c:fb:6e:9c:d5:fd:26:7f:1b:d2:01:72:ee:ea:6c:
                    c0:57:a9:a1:e8:5a:99:64:e8:74:e9:e7:d2:bb:66:
                    70:38:94:b2:fb:98:86:2d:ba:51:7a:f0:23:42:18:
                    9f:d7:1a:95:53:71:2b:73:c6:53:d0:34:b1:07:e8:
                    7b:74:89:4d:57:87:1c:f2:bd:39:3d:b4:5e:2f:6b:
                    03:a8:ed:06:b3:5e:ac:49:12:0a:7f:13:64:a1:a0:
                    ea:01:32:8e:64:b2:5a:9e:8f:a0:fc:49:08:ce:9e:
                    08:22:5e:c2:40:af:4b:26:5c:b8:ba:56:9a:87:83:
                    97:3d:b6:6b:46:c1:2c:86:83:fd:b3:a7:f3:f2:a3:
                    49:51:5f:c5:28:49:45:c7:3e:27:78:33:08:8a:d6:
                    20:b3:12:56:10:54:d4:4e:ec:b7:ce:25:62:df:2f:
                    eb:59:90:8e:b7:f7:c4:cb:78:47:90:64:59:d3:d9:
                    2e:7e:da:3d:81:31:b8:aa:21:f0:9d:b4:d9:95:a9:
                    8b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F3:04:FE:73:91:B9:B7:D8:42:64:23:62:3C:AD:4F:EF:F6:B9:27
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36382e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:a6:29:ab:60:e7:7d:9b:b2:bd:f8:05:52:ea:2e:06:0d:e3:
         dd:99:44:3d:5e:7b:fc:62:3c:c3:17:81:8b:f8:49:81:f7:ff:
         84:ff:e3:00:d0:16:da:37:e9:51:c4:77:46:2e:de:d2:2e:18:
         bd:8a:cb:5e:cf:ba:ea:3c:99:05:29:1e:17:a6:68:ee:fe:8f:
         a1:21:f6:d4:75:3b:ae:08:62:00:1e:b4:85:68:cc:e1:60:e7:
         75:28:27:af:78:c4:66:b9:2a:be:d8:6b:06:32:45:31:1a:0a:
         61:71:f9:bb:b0:43:6c:44:fb:9d:56:e2:8e:52:76:93:87:3c:
         e0:31:4e:ed:b1:cf:0e:8f:20:6a:c4:f1:17:bf:57:ee:b0:47:
         eb:14:ea:4d:8d:c5:fa:e0:21:55:d7:69:df:79:ef:b0:08:c0:
         fb:2b:b7:4e:59:9c:f4:73:d6:4d:95:90:66:62:0e:31:4e:a5:
         cb:16:8c:df:2c:de:78:e7:6b:10:31:bc:50:47:7a:9d:13:a4:
         aa:ae:c8:35:21:06:bd:75:54:4e:7d:19:32:d8:8f:15:7a:bc:
         d1:23:d6:7a:1b:bb:6b:92:07:f1:ed:be:52:62:47:f2:eb:55:
         13:88:05:85:f7:7e:d5:17:f2:56:45:ca:88:45:99:e1:36:18:
         0c:6e:da:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:31:04 2025 by rpki-client