Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/3138372e34392e3138302e302f32322d3332203d3e20323730353131.roa
File:                     3138372e34392e3138302e302f32322d3332203d3e20323730353131.roa (raw, json)
Hash identifier:          ENfHmY7LOI8gUpUXT9IPQWhiWpDPHCkc6YeTq3AjiHI=
Subject key identifier:   F7:BD:15:A3:08:1C:34:40:DB:01:DC:B9:1C:4C:DC:F0:E2:41:0D:95
Certificate issuer:       /CN=081C06A65DC3C244ABC85C8326B54FD291012905
Certificate serial:       3DB28AE9CE116000FD9590A8356F2784747F1C8A
Authority key identifier: 08:1C:06:A6:5D:C3:C2:44:AB:C8:5C:83:26:B5:4F:D2:91:01:29:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/081C06A65DC3C244ABC85C8326B54FD291012905.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/3138372e34392e3138302e302f32322d3332203d3e20323730353131.roa
Signing time:             Fri 22 Aug 2025 02:07:13 +0000
ROA not before:           Fri 22 Aug 2025 02:02:13 +0000
ROA not after:            Fri 21 Aug 2026 02:07:13 +0000
asID:                     270511
IP address blocks:        187.49.180.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/081C06A65DC3C244ABC85C8326B54FD291012905.crl
                          rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/081C06A65DC3C244ABC85C8326B54FD291012905.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/081C06A65DC3C244ABC85C8326B54FD291012905.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Aug 2025 23:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b2:8a:e9:ce:11:60:00:fd:95:90:a8:35:6f:27:84:74:7f:1c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081C06A65DC3C244ABC85C8326B54FD291012905
        Validity
            Not Before: Aug 22 02:02:13 2025 GMT
            Not After : Aug 21 02:07:13 2026 GMT
        Subject: CN=F7BD15A3081C3440DB01DCB91C4CDCF0E2410D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:34:4c:5d:4b:cd:6a:45:f5:d4:88:69:34:07:
                    2c:f6:88:f4:2a:23:55:69:e8:bb:4d:3c:65:01:3e:
                    4c:db:a4:b9:00:72:9e:3b:bc:0e:03:95:02:79:e1:
                    19:4e:b2:6e:ab:7b:66:52:67:fb:3e:86:33:a0:6b:
                    a2:e4:db:ca:e5:29:65:23:0d:e7:e4:6b:7b:ff:57:
                    67:38:c8:02:2c:56:1a:93:66:31:12:5b:55:5b:1f:
                    67:ad:45:df:97:c6:2a:b8:42:39:59:6b:6f:73:b1:
                    71:7d:13:db:10:62:31:81:14:31:2c:99:81:7f:32:
                    53:f0:4a:a8:a0:a1:ab:0d:92:a7:83:4d:d4:2a:c2:
                    6f:52:f0:a4:3f:77:18:35:d5:64:83:22:e0:11:c4:
                    8d:b8:ea:50:ee:86:cb:8e:bd:f7:88:bf:7f:5d:54:
                    3b:b6:32:3c:03:4e:0a:e0:65:41:6e:46:e8:6a:ba:
                    c9:4c:91:8b:aa:a4:ff:e1:8c:15:ff:cb:35:7d:b5:
                    d8:b1:21:5e:8b:c5:6b:d8:27:a6:21:8f:78:be:5f:
                    61:dd:3a:a2:c5:91:dd:4a:4f:f9:de:48:39:e7:3a:
                    7d:37:39:df:b4:88:fd:15:26:d0:f0:1f:af:aa:21:
                    45:cd:d2:13:29:a5:93:7c:f0:51:40:1c:40:c1:80:
                    ee:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BD:15:A3:08:1C:34:40:DB:01:DC:B9:1C:4C:DC:F0:E2:41:0D:95
            X509v3 Authority Key Identifier:
                keyid:08:1C:06:A6:5D:C3:C2:44:AB:C8:5C:83:26:B5:4F:D2:91:01:29:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/081C06A65DC3C244ABC85C8326B54FD291012905.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/081C06A65DC3C244ABC85C8326B54FD291012905.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/3138372e34392e3138302e302f32322d3332203d3e20323730353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:36:d4:4c:e7:fb:6a:1d:ee:68:b5:e1:4c:61:e1:1a:6c:68:
         ed:0a:1b:d7:27:33:ec:26:1b:5e:c6:a4:e7:3d:ec:91:f6:86:
         1a:8d:d8:73:aa:86:c1:c4:3a:97:fc:7b:d8:60:0d:12:95:84:
         13:df:8e:ea:6e:5d:df:10:6e:95:52:6c:03:6a:c4:86:44:3d:
         75:3f:78:40:0e:d5:b2:32:9f:e7:91:f5:6d:f1:95:6b:16:36:
         e6:47:7d:48:29:f3:46:f1:15:ec:be:83:8e:8e:98:75:83:0f:
         2d:92:c5:a5:d5:67:65:43:a9:d7:03:6a:b0:ca:fd:3c:21:eb:
         b2:30:2b:cc:bd:34:50:5e:1d:20:8d:83:33:1f:05:e2:0f:7f:
         c9:71:e3:bf:fa:aa:d8:65:b0:4a:9f:9c:31:5f:d9:08:c9:1d:
         aa:31:43:2d:a2:37:88:4a:ec:9d:99:c3:39:58:fe:c9:3c:ec:
         82:95:63:f3:a2:54:e6:d8:bf:27:01:c3:d6:9b:63:49:c6:24:
         a9:95:fa:ab:4a:f0:3c:44:91:b0:93:63:83:19:22:a6:62:94:
         a5:35:62:d4:ea:37:02:f2:ca:e3:a7:c0:f0:79:2b:f9:25:89:
         ee:0e:ee:8a:fe:29:1b:ba:6c:be:42:4e:7d:16:04:4c:4d:c9:
         19:b2:c2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:21:02 2025 by rpki-client