Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/3138362e3235312e3138382e302f32332d3233203d3e20323633353638.roa
File:                     3138362e3235312e3138382e302f32332d3233203d3e20323633353638.roa (raw, json)
Hash identifier:          Hxeky+iof6W1Jak934m9bheTMMYY6WiDvsjBZFgGVeI=
Subject key identifier:   22:06:22:74:48:A4:60:E1:65:13:BC:53:B2:4A:99:0F:AC:01:BA:EE
Certificate issuer:       /CN=EC8C5177426EBAD56894C2BA770DB2AAB119516F
Certificate serial:       66EE1FB4BE696B005AB4D044429F546749E87EF5
Authority key identifier: EC:8C:51:77:42:6E:BA:D5:68:94:C2:BA:77:0D:B2:AA:B1:19:51:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC8C5177426EBAD56894C2BA770DB2AAB119516F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/3138362e3235312e3138382e302f32332d3233203d3e20323633353638.roa
Signing time:             Wed 18 Mar 2026 11:54:13 +0000
ROA not before:           Wed 18 Mar 2026 11:49:13 +0000
ROA not after:            Wed 17 Mar 2027 11:54:13 +0000
asID:                     263568
IP address blocks:        186.251.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/EC8C5177426EBAD56894C2BA770DB2AAB119516F.crl
                          rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/EC8C5177426EBAD56894C2BA770DB2AAB119516F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC8C5177426EBAD56894C2BA770DB2AAB119516F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 10:57:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ee:1f:b4:be:69:6b:00:5a:b4:d0:44:42:9f:54:67:49:e8:7e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC8C5177426EBAD56894C2BA770DB2AAB119516F
        Validity
            Not Before: Mar 18 11:49:13 2026 GMT
            Not After : Mar 17 11:54:13 2027 GMT
        Subject: CN=2206227448A460E16513BC53B24A990FAC01BAEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1f:2c:5a:db:3c:73:a0:3f:df:a3:08:21:85:
                    fa:13:20:94:ba:1a:fb:56:26:96:42:3b:1a:56:1f:
                    b6:51:0d:95:38:a0:e6:ff:ff:c3:e9:79:9f:cb:33:
                    a4:38:dd:23:01:de:83:52:5f:d1:c1:6a:fa:ad:65:
                    d2:e1:66:67:e0:8a:26:10:1d:4d:7a:d0:a3:68:d8:
                    51:fa:fe:45:1d:77:61:35:5d:2b:2f:d1:71:27:45:
                    b1:07:30:8e:f2:b9:fc:d5:19:b1:92:5a:53:4d:d9:
                    0c:fc:36:7b:fd:e1:3e:0e:89:4d:8b:13:10:fe:71:
                    ca:35:e6:36:70:81:39:3a:40:4b:f7:2c:7c:3c:dd:
                    a8:88:e5:a5:12:00:64:ed:19:c6:67:7e:51:68:a4:
                    5e:b2:cc:2d:83:27:ab:11:8d:df:8f:0e:58:e4:30:
                    a6:12:0b:c3:11:53:47:fd:94:c3:09:f4:c5:79:c6:
                    72:f3:ec:f1:3e:6a:e7:cf:a4:43:74:62:51:7e:1e:
                    91:40:b0:82:db:66:44:0d:17:59:52:46:52:c9:82:
                    1d:b3:48:c2:ed:51:60:a3:20:27:b9:af:58:58:76:
                    6e:4a:cb:cb:d1:fb:1a:ce:c1:ce:23:a2:b2:ce:69:
                    21:b2:38:b3:20:ee:56:71:10:a8:06:5e:be:ed:da:
                    43:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:06:22:74:48:A4:60:E1:65:13:BC:53:B2:4A:99:0F:AC:01:BA:EE
            X509v3 Authority Key Identifier:
                keyid:EC:8C:51:77:42:6E:BA:D5:68:94:C2:BA:77:0D:B2:AA:B1:19:51:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/EC8C5177426EBAD56894C2BA770DB2AAB119516F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC8C5177426EBAD56894C2BA770DB2AAB119516F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/3138362e3235312e3138382e302f32332d3233203d3e20323633353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:71:9c:c0:4b:6d:07:1b:e6:b9:31:f4:73:10:71:3f:29:4f:
         24:36:f6:0b:8c:91:d3:a0:b4:a2:a7:c8:28:25:ac:e7:2c:8b:
         3d:ef:cf:41:c9:fb:45:33:af:8f:83:09:e4:cc:d4:c7:e2:22:
         23:fb:84:24:12:8f:f4:fc:d4:b0:e4:d1:55:f5:cc:d1:87:ad:
         45:c6:9c:ef:bf:f6:54:d4:3e:e6:29:79:66:12:84:fb:06:11:
         9c:73:65:26:f9:c8:71:43:23:d3:ba:21:f4:19:6e:64:d1:fe:
         c4:07:21:f2:7a:a6:ae:2c:36:3e:95:49:13:da:95:d6:df:ab:
         c4:48:84:e2:c6:1b:27:9a:f7:27:68:30:40:45:05:ee:b8:2a:
         a8:78:25:2d:a5:f3:ce:1a:b4:d9:a3:c7:4e:8d:a9:6f:44:de:
         68:2d:76:8c:1d:a6:44:83:b0:35:00:00:da:45:61:d6:a9:c1:
         4d:c8:30:ff:80:4d:9e:1d:07:54:19:9e:6b:62:0e:52:13:6b:
         b8:1e:8e:01:c3:75:d7:38:2e:6c:dc:9f:d7:77:30:43:7f:af:
         6c:7b:6d:ff:b6:76:59:a5:c6:50:89:6a:46:02:eb:6f:4c:91:
         3a:57:16:f2:d1:24:3c:41:20:f3:1b:1f:8d:fc:05:65:74:7d:
         c8:75:21:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:59:09 2026 by rpki-client