Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136302e302f32302d3230203d3e20323632373834.roa
File:                     3138362e3233352e3136302e302f32302d3230203d3e20323632373834.roa (raw, json)
Hash identifier:          8HbKe0sLI4+sgQvTKXw4Ig9vpKieVEaM93cExFg7Zwg=
Subject key identifier:   68:F9:E1:7E:7D:62:B8:9A:A8:68:FB:AD:82:6A:EF:6D:2E:F7:5C:A7
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       454BD7FA867B9D4676836D781C0C056C79F8382D
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136302e302f32302d3230203d3e20323632373834.roa
Signing time:             Thu 25 Jun 2026 12:00:01 +0000
ROA not before:           Thu 25 Jun 2026 11:55:01 +0000
ROA not after:            Thu 24 Jun 2027 12:00:01 +0000
asID:                     262784
IP address blocks:        186.235.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 23:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4b:d7:fa:86:7b:9d:46:76:83:6d:78:1c:0c:05:6c:79:f8:38:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Jun 25 11:55:01 2026 GMT
            Not After : Jun 24 12:00:01 2027 GMT
        Subject: CN=68F9E17E7D62B89AA868FBAD826AEF6D2EF75CA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:78:1a:7d:b4:d9:62:95:dc:cb:98:f6:30:96:
                    7e:30:01:49:81:a7:a1:91:a1:b2:be:9b:ee:f5:f2:
                    d9:5a:5c:9b:8f:54:f4:98:94:ac:79:fd:7a:5b:51:
                    bd:93:2f:29:85:b1:3e:d7:79:87:ba:56:0a:21:e1:
                    52:94:99:de:13:94:9d:55:de:19:e3:f7:db:79:bb:
                    17:00:06:0b:c3:2a:36:35:65:dc:b7:bc:2a:99:3d:
                    ab:f7:04:75:51:72:d2:30:00:a1:c2:48:de:1b:ae:
                    ee:fb:25:72:2d:47:39:5d:41:e4:eb:71:2d:68:13:
                    68:90:26:01:69:64:72:ae:0d:41:fd:8a:3d:8e:29:
                    fe:b8:96:d3:b6:ab:4f:5f:19:b1:96:fa:6b:50:d6:
                    5d:7e:d7:44:a9:ef:25:2d:80:3c:b3:c7:2b:76:69:
                    05:87:cb:4e:4f:9f:83:17:7d:5c:6f:e5:09:18:5d:
                    82:62:cc:d7:c6:31:a4:03:e3:12:a4:ec:7a:75:43:
                    9d:6e:0e:69:78:a1:18:69:63:1b:f1:a2:a6:56:ec:
                    6a:39:c9:75:76:48:e7:29:62:da:87:17:9d:98:b4:
                    c7:80:a4:36:2f:9f:77:91:cf:eb:02:84:e5:92:32:
                    cd:06:15:51:c2:b2:82:a7:11:45:22:09:12:c3:96:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F9:E1:7E:7D:62:B8:9A:A8:68:FB:AD:82:6A:EF:6D:2E:F7:5C:A7
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136302e302f32302d3230203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         f1:36:09:39:2a:d7:52:d3:7c:99:53:f2:f4:1c:39:fd:35:c6:
         86:44:dc:df:de:a6:94:3b:f7:49:85:cf:da:be:dd:aa:77:39:
         51:74:96:92:0d:35:ce:60:12:5d:d8:1a:73:ec:23:77:65:76:
         90:6e:cc:96:41:21:93:e6:91:a2:d2:e1:6e:bb:c9:f1:7c:68:
         53:49:90:8a:53:9b:9f:cb:c1:dc:e7:5e:e3:58:dd:7e:f9:20:
         a2:ad:a1:94:67:91:98:d1:e4:2a:cb:75:69:26:52:79:80:fd:
         82:95:5f:af:8b:0b:4c:70:8d:1a:da:64:d3:97:a8:0e:ed:e2:
         da:2d:ae:a8:5c:de:f2:6a:0d:9e:d5:a9:58:d1:da:77:46:84:
         13:5f:c7:08:6b:2f:5c:b1:48:3d:37:a7:6f:1d:78:8a:95:81:
         8b:e7:8f:ad:6c:07:08:b9:2f:fe:21:75:4e:21:80:31:a3:4e:
         4f:43:45:18:77:d9:a7:0f:ee:49:f3:15:ee:f2:34:4d:c2:34:
         45:bb:29:72:83:ad:b6:cc:f7:cd:dd:1e:1d:87:4b:9d:19:8f:
         3d:ef:f8:dc:8f:d9:dc:90:da:26:a8:de:8a:b3:43:9b:8f:1a:
         d0:f0:c6:e0:58:b5:a0:df:87:ca:d5:c2:ac:0e:40:62:8a:1d:
         40:fa:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:49:06 2026 by rpki-client