Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3137352e302f32342d3234203d3e20323632373834.roa
File:                     3138362e3233352e3137352e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          79DIX7RtP5ls/VEw/7upZDmrF2v7LqrCEBTOSkX/sH0=
Subject key identifier:   B7:FC:83:0E:60:7B:23:A2:CD:0D:49:B7:A1:74:B2:1E:BF:7F:2C:CA
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       7D884834593F4E3E4A78596E505812EE01D9A99C
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3137352e302f32342d3234203d3e20323632373834.roa
Signing time:             Thu 25 Jun 2026 12:00:02 +0000
ROA not before:           Thu 25 Jun 2026 11:55:02 +0000
ROA not after:            Thu 24 Jun 2027 12:00:02 +0000
asID:                     262784
IP address blocks:        186.235.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:88:48:34:59:3f:4e:3e:4a:78:59:6e:50:58:12:ee:01:d9:a9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Jun 25 11:55:02 2026 GMT
            Not After : Jun 24 12:00:02 2027 GMT
        Subject: CN=B7FC830E607B23A2CD0D49B7A174B21EBF7F2CCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:a5:1b:b8:ce:88:a6:6f:02:59:8b:9b:bc:
                    9c:7d:34:35:95:f5:76:98:00:6c:ea:f5:3f:3d:37:
                    41:c1:7b:c0:26:2d:a5:08:b6:79:11:b7:9e:d9:91:
                    98:61:7f:8c:67:c6:07:46:ee:9a:80:ca:35:e1:36:
                    06:85:f3:f1:28:8d:9a:9b:8e:a0:10:20:4d:0c:a4:
                    0d:09:cc:87:8c:ff:c0:ba:a8:7b:ae:97:f3:eb:74:
                    69:bc:aa:fd:94:b7:3a:90:85:ae:a3:6a:91:45:c1:
                    02:98:fc:0e:46:9d:d7:e2:d2:63:e4:d6:b1:40:86:
                    e3:72:df:23:b4:ad:ad:a3:ac:fd:7c:ff:75:aa:8d:
                    bc:1e:b0:b3:d6:25:ac:a8:e4:43:a6:88:62:b8:cd:
                    ff:ec:c7:3e:89:d3:75:65:e7:8f:46:e6:15:be:50:
                    9f:83:f9:ce:17:0d:ba:49:e0:9a:5a:da:a8:07:d6:
                    dd:b3:8b:d6:f5:68:1b:20:e6:b5:64:6a:35:5e:71:
                    98:55:77:4e:8e:1d:6a:75:ba:d7:fd:e3:c9:62:10:
                    ea:5f:66:e8:54:40:72:4a:1b:ed:b2:a9:a1:63:09:
                    25:51:e2:d4:82:bc:17:43:b7:00:45:e4:8b:6c:e9:
                    98:3f:83:23:43:74:50:5d:c6:ed:4c:fd:d9:9a:44:
                    fe:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FC:83:0E:60:7B:23:A2:CD:0D:49:B7:A1:74:B2:1E:BF:7F:2C:CA
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3137352e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:a3:85:b2:b6:8d:96:76:5a:a8:e0:00:f9:a8:a2:7b:5d:f6:
         0d:d9:a0:24:d7:f7:ef:33:f8:f4:e8:e0:a9:4b:7b:77:2a:2b:
         27:5a:35:d0:a1:18:9d:91:e0:17:d9:ea:eb:b8:b5:99:22:bf:
         9d:b0:d8:9b:ca:26:45:dc:91:45:c8:10:55:7a:62:43:cf:d1:
         ab:48:db:ee:2a:51:32:60:e1:65:95:53:3a:e5:e3:8a:80:bf:
         58:77:0c:6c:5c:d1:b6:6e:cd:af:41:db:db:65:d8:d8:db:41:
         89:1d:39:2e:a2:12:4f:dc:6e:e6:ce:ae:95:1f:3b:58:9f:0f:
         9e:dd:fa:f3:ad:e4:4e:1c:4f:08:b5:17:05:41:16:bd:73:35:
         71:57:fe:94:c6:40:94:6f:93:e5:b9:d0:ec:5f:fa:65:3c:f2:
         a3:8a:a2:c7:5d:52:50:36:7e:0a:10:a8:22:2e:9f:42:05:90:
         52:df:61:e6:c9:72:4e:d5:c8:a9:64:0b:1c:ab:c7:30:30:c0:
         1d:43:53:78:66:14:3b:0c:ff:ca:e8:f8:50:d7:ee:57:89:8f:
         42:1d:9a:78:71:06:78:ea:9a:8b:60:70:16:86:1e:29:e5:88:
         ca:78:bd:8e:57:aa:42:ad:22:ae:ab:ba:c4:1e:bf:c8:30:a1:
         14:7f:19:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:21:02 2026 by rpki-client