Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3138362e3232372e3135322e302f32322d3234203d3e20323632393732.roa
File:                     3138362e3232372e3135322e302f32322d3234203d3e20323632393732.roa (raw, json)
Hash identifier:          vIsKJSI8FCC6hs1iYHo7sQFyaLhajmEhdvfHYSmHYSE=
Subject key identifier:   22:FF:CF:13:7C:F0:59:65:0E:D2:9F:6C:60:A2:4D:4F:A8:64:93:61
Certificate issuer:       /CN=2E8A78050D14D3994E0832B18E3688CC1C9ABF41
Certificate serial:       775ED7BD21E80C117E4CC1B7E6819E5E77EBCAD7
Authority key identifier: 2E:8A:78:05:0D:14:D3:99:4E:08:32:B1:8E:36:88:CC:1C:9A:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8A78050D14D3994E0832B18E3688CC1C9ABF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3138362e3232372e3135322e302f32322d3234203d3e20323632393732.roa
Signing time:             Thu 18 Jun 2026 20:42:52 +0000
ROA not before:           Thu 18 Jun 2026 20:37:52 +0000
ROA not after:            Thu 17 Jun 2027 20:42:52 +0000
asID:                     262972
IP address blocks:        186.227.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/2E8A78050D14D3994E0832B18E3688CC1C9ABF41.crl
                          rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/2E8A78050D14D3994E0832B18E3688CC1C9ABF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8A78050D14D3994E0832B18E3688CC1C9ABF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5e:d7:bd:21:e8:0c:11:7e:4c:c1:b7:e6:81:9e:5e:77:eb:ca:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8A78050D14D3994E0832B18E3688CC1C9ABF41
        Validity
            Not Before: Jun 18 20:37:52 2026 GMT
            Not After : Jun 17 20:42:52 2027 GMT
        Subject: CN=22FFCF137CF059650ED29F6C60A24D4FA8649361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:95:ab:4b:9b:fc:56:2f:be:75:a1:71:01:a8:
                    71:3b:a9:d2:10:ac:46:50:64:74:09:fd:e5:a0:38:
                    4b:9c:72:12:ca:54:a6:6b:c9:7d:a0:a4:1d:e4:72:
                    57:da:d7:7a:e3:22:d8:df:11:8b:f6:89:36:37:1a:
                    c3:85:78:04:fa:f1:7b:80:94:07:22:a8:3c:31:82:
                    15:8e:7a:23:51:76:0c:3f:db:eb:8f:85:b1:0b:db:
                    4e:31:67:38:ee:2a:99:58:34:6b:57:7a:c0:c9:d8:
                    8b:ec:21:36:a7:3e:41:a5:81:59:4e:a2:d4:e4:3d:
                    0c:59:b6:0d:67:40:30:83:96:ec:2d:ae:a2:f8:f5:
                    7b:63:56:c9:ca:cc:c9:62:fb:17:9f:60:39:df:7a:
                    fd:de:0c:e7:8f:3b:6c:aa:97:45:6e:5b:b5:7a:1a:
                    c5:3b:a8:cb:e3:89:89:cf:7f:17:f1:72:6c:d1:e0:
                    65:02:ac:d0:3a:fc:fd:2e:05:15:ad:05:d6:80:3b:
                    bc:2d:3f:c7:bc:8b:39:e8:1c:2c:1e:40:d4:5c:ae:
                    8b:ae:3d:bf:fa:f3:46:51:2e:e4:c2:33:02:79:49:
                    68:9a:c2:fb:63:ac:7e:8a:91:c4:17:e3:f6:70:84:
                    c5:07:08:66:3b:a1:b1:4e:8e:c1:f8:fa:88:29:97:
                    06:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FF:CF:13:7C:F0:59:65:0E:D2:9F:6C:60:A2:4D:4F:A8:64:93:61
            X509v3 Authority Key Identifier:
                keyid:2E:8A:78:05:0D:14:D3:99:4E:08:32:B1:8E:36:88:CC:1C:9A:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/2E8A78050D14D3994E0832B18E3688CC1C9ABF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8A78050D14D3994E0832B18E3688CC1C9ABF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3138362e3232372e3135322e302f32322d3234203d3e20323632393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:de:43:11:38:c1:98:ac:f4:fd:18:bd:ae:00:e7:ec:d8:89:
         1d:ab:ed:6f:69:d5:a6:1d:a0:d7:af:c7:f7:40:8f:8e:9c:be:
         5f:02:58:c7:10:f8:65:0b:0c:9f:8c:8e:7d:c9:32:e4:d4:05:
         e9:63:de:0f:d3:ce:1f:ff:52:29:3d:8e:fe:c1:4f:60:4f:83:
         17:87:bf:b4:7f:ac:7b:e7:87:20:8f:41:b6:ff:ce:08:f0:25:
         4e:2d:62:7b:2a:5e:d7:46:97:09:42:49:fc:23:61:63:d3:c5:
         dc:6a:84:83:a7:47:bb:d5:84:14:8a:b5:d8:a7:c8:0e:bf:a0:
         58:32:c9:d7:24:84:9a:44:1a:e7:43:b3:39:d5:a0:d5:c0:10:
         c1:53:06:53:cd:09:d6:5b:dc:a9:a6:2e:e5:f3:90:8d:6f:6c:
         81:7b:53:b4:2c:b4:75:7f:c2:2c:91:88:e8:f1:a4:dd:0b:fa:
         dd:96:b3:9a:6d:3a:dd:dc:79:ee:30:bc:19:a0:23:8c:fb:ea:
         61:fc:d8:2f:0f:55:81:53:b1:c3:1b:91:9b:dd:69:bb:e4:0b:
         8e:23:70:21:48:95:6c:41:8b:2f:67:59:10:35:70:8e:67:25:
         e6:be:bf:bf:7f:cb:99:67:48:f8:6e:6b:b9:e8:64:fd:e6:d3:
         25:60:b7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:00:22 2026 by rpki-client