Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136322e302f32342d3234203d3e20323632373834.roa
File:                     3138362e3233352e3136322e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          689IBLwaKA/9LMt4lhUEI+4KQVTUfdjZh1FCEYOWsSA=
Subject key identifier:   37:D5:47:9C:3D:11:96:ED:0A:5C:FD:E9:F3:1E:9E:2C:1C:DC:63:3C
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       5D92E43727C7F7B4AB3850DEC5E78A60BB670BA1
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136322e302f32342d3234203d3e20323632373834.roa
Signing time:             Thu 25 Jun 2026 12:00:03 +0000
ROA not before:           Thu 25 Jun 2026 11:55:03 +0000
ROA not after:            Thu 24 Jun 2027 12:00:03 +0000
asID:                     262784
IP address blocks:        186.235.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:92:e4:37:27:c7:f7:b4:ab:38:50:de:c5:e7:8a:60:bb:67:0b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Jun 25 11:55:03 2026 GMT
            Not After : Jun 24 12:00:03 2027 GMT
        Subject: CN=37D5479C3D1196ED0A5CFDE9F31E9E2C1CDC633C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:55:1f:06:50:20:55:3b:dd:2a:ba:12:0d:cf:
                    02:4e:6a:4e:dc:80:ab:e9:2f:87:d7:89:f2:a2:c6:
                    53:0c:58:5d:97:e9:8d:d9:51:80:c7:56:52:a0:64:
                    c9:c4:ae:82:ef:dd:07:a2:23:c7:9f:4f:9a:16:fe:
                    e6:ca:e4:1b:d5:af:0f:3b:95:5b:9b:16:2c:bf:ae:
                    51:c1:e4:ab:f6:66:19:64:70:cd:6a:3f:ef:cd:a1:
                    38:4d:c9:d3:e9:e1:9c:16:6e:35:3a:bf:d3:0c:36:
                    36:fb:c3:48:b1:a2:ec:4b:b4:01:af:bb:58:5e:1e:
                    20:1a:45:07:6a:8b:00:4f:c8:3c:75:ea:7f:8f:21:
                    98:6a:63:58:41:7c:33:cc:9f:6c:20:ec:cd:f7:c8:
                    cf:cf:dd:26:23:83:ac:c8:48:f3:e5:4c:0a:b6:e0:
                    c8:b6:1d:28:66:c4:6d:53:4a:9c:b0:90:a2:6b:7d:
                    9e:43:a0:29:e7:4d:d6:5f:c7:d2:75:1d:2d:78:6f:
                    f9:9e:6f:d6:56:fa:16:08:7a:11:c7:d8:46:17:43:
                    e0:d9:59:ac:7f:f0:f1:36:55:db:3e:44:82:3e:e1:
                    a6:68:6a:63:7f:09:e7:f1:e2:cc:cb:7e:b1:bc:7a:
                    61:f1:b5:8e:3b:6c:2e:76:d4:41:5f:3c:f2:ba:ea:
                    bc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D5:47:9C:3D:11:96:ED:0A:5C:FD:E9:F3:1E:9E:2C:1C:DC:63:3C
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136322e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:68:70:de:03:8c:46:58:fd:72:51:30:40:a2:8b:5e:c9:cc:
         aa:57:b0:f7:2c:ff:66:c7:d1:e6:67:3c:b6:14:af:41:08:b6:
         64:7e:f6:f5:26:72:e2:1e:25:d3:67:0a:3f:b8:83:52:aa:b6:
         3b:6e:06:ec:64:5c:7d:98:18:e8:54:a6:17:bb:8d:31:ed:9f:
         73:59:49:f3:ed:40:22:41:8f:07:2d:dc:8a:a3:21:dd:e7:43:
         2f:a4:99:b4:ef:37:33:c9:9d:b7:cb:81:8a:2e:b6:62:be:79:
         48:ec:c2:a1:18:ae:e6:01:19:ce:9d:7b:99:a3:c0:fe:d3:5b:
         89:6d:cc:3f:0d:18:e4:47:25:ad:ee:5b:4f:6d:5e:fa:89:b7:
         75:fb:b9:e8:8d:69:47:67:6d:0e:2d:8e:75:52:2e:25:78:43:
         99:3f:22:d4:58:99:a7:8f:e7:70:2e:ca:5d:d1:f2:a3:96:c4:
         5c:f1:66:a8:91:8f:b6:c1:f2:2d:de:77:aa:36:44:f2:f3:48:
         f3:68:36:cd:ed:e6:95:c9:4d:c3:f3:c8:01:cf:3d:98:55:8b:
         ae:1d:b8:10:6f:d6:fd:4b:98:61:66:91:6b:a4:93:51:36:b3:
         37:08:bf:e9:78:f3:dd:fd:3d:f7:b5:c7:99:59:3e:f7:d9:76:
         bc:cf:a0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:21:29 2026 by rpki-client