Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/3138362e3235302e3232302e302f32322d3235203d3e20323633353535.roa
File:                     3138362e3235302e3232302e302f32322d3235203d3e20323633353535.roa (raw, json)
Hash identifier:          /pSGbcZQfzxrZjLlHHAawO1s5pR+V02yK59IB2ACSXE=
Subject key identifier:   E9:87:C9:13:32:A9:9D:04:D6:CB:08:5E:EA:F2:81:2F:4A:9F:73:6E
Certificate issuer:       /CN=2028B4F00526FFD4A6479245C26F87EECD0F5352
Certificate serial:       044B562107E8B8E2BDE986E84E0670FCC06373C7
Authority key identifier: 20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/3138362e3235302e3232302e302f32322d3235203d3e20323633353535.roa
Signing time:             Wed 01 Oct 2025 14:17:34 +0000
ROA not before:           Wed 01 Oct 2025 14:12:34 +0000
ROA not after:            Wed 30 Sep 2026 14:17:34 +0000
asID:                     263555
IP address blocks:        186.250.220.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl
                          rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 03:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4b:56:21:07:e8:b8:e2:bd:e9:86:e8:4e:06:70:fc:c0:63:73:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2028B4F00526FFD4A6479245C26F87EECD0F5352
        Validity
            Not Before: Oct  1 14:12:34 2025 GMT
            Not After : Sep 30 14:17:34 2026 GMT
        Subject: CN=E987C91332A99D04D6CB085EEAF2812F4A9F736E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:33:42:d7:cc:27:47:f0:ec:d5:33:6c:b3:
                    0d:c4:94:6f:86:a7:eb:c2:b6:a3:23:c2:61:26:ea:
                    03:b2:63:3f:30:0d:76:61:05:5e:2e:57:b2:f0:ee:
                    95:5b:df:f2:c9:1f:64:42:1a:9b:fe:58:cf:ad:f9:
                    70:76:4c:98:59:dd:21:91:e8:b2:8e:3c:e3:3e:c8:
                    91:42:29:a3:3e:12:71:0f:e9:23:c4:0e:19:fd:ab:
                    29:d6:ff:da:56:ed:23:44:1d:77:36:d4:2f:98:0f:
                    15:9f:cb:5b:b6:f5:4b:e0:e1:4a:b2:fb:7f:f5:57:
                    2b:8e:43:6d:0f:1d:75:56:72:5c:65:52:88:8e:43:
                    cc:a3:3e:34:83:4c:03:9b:15:c2:32:2e:ef:a9:73:
                    20:f7:d3:fe:0b:24:7f:4b:91:56:4c:94:24:a9:e7:
                    ae:0b:e3:3b:49:ba:54:e5:5e:42:c9:79:5d:00:79:
                    cd:dd:05:e4:69:09:7d:70:67:cb:8e:22:09:1b:03:
                    77:13:5d:35:77:8e:4f:ab:13:2c:7a:ff:ee:c0:25:
                    d6:bf:89:4f:95:1e:2c:73:2a:7f:d2:26:78:36:8a:
                    a7:12:89:02:fd:bd:03:ec:2f:0f:ed:bf:e4:3d:3e:
                    ff:59:df:3e:95:7e:d7:a3:71:6b:5b:f5:2b:8f:d9:
                    e4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:87:C9:13:32:A9:9D:04:D6:CB:08:5E:EA:F2:81:2F:4A:9F:73:6E
            X509v3 Authority Key Identifier:
                keyid:20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/3138362e3235302e3232302e302f32322d3235203d3e20323633353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:eb:81:c6:2e:e7:19:c5:f5:6d:44:ca:8a:cf:cc:7e:53:28:
         a8:5a:aa:e0:e1:ea:de:fd:a4:0f:d7:37:0f:8a:3a:8b:1e:23:
         5f:43:3b:54:f4:83:ac:1e:ad:de:4f:df:e4:f6:70:68:c4:cb:
         4b:a3:5a:a7:3c:c5:6e:22:76:74:c1:89:12:88:02:88:57:38:
         97:2d:07:5e:0c:13:30:8b:4d:72:52:b8:ea:66:ad:8c:84:09:
         ac:cb:9b:b1:36:b1:56:73:be:8b:f4:5a:90:26:fa:3e:db:0e:
         b6:9e:5f:77:1d:08:53:8b:4e:5f:d6:9f:4c:1f:65:9e:91:bc:
         c2:c8:31:1c:df:a4:88:b1:35:97:98:94:3d:b1:7d:2f:8b:08:
         4f:94:50:88:3a:63:2c:38:af:1e:8b:92:54:b7:c4:c5:70:6c:
         e3:a2:f3:b7:f0:64:0a:65:eb:c1:98:d5:8d:c2:67:5d:6d:aa:
         e0:9e:17:d3:05:bb:d2:12:00:f1:8b:e0:b8:1e:de:a0:8a:f1:
         80:bd:67:66:12:af:22:6b:29:a8:13:ff:99:11:9d:62:c1:6a:
         7a:fc:49:1a:a5:8c:75:e9:d7:76:d2:02:2d:07:04:37:0d:9b:
         a2:33:e1:29:f4:5c:b5:12:1f:4f:21:51:4a:cf:1a:f5:1e:15:
         b6:41:dc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:11:11 2025 by rpki-client