Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/3138362e3139332e3232342e302f32302d3234203d3e20323632373331.roa
File:                     3138362e3139332e3232342e302f32302d3234203d3e20323632373331.roa (raw, json)
Hash identifier:          rYeW4M28VShyVO92fThz95tD5JpBr2upvoKaY+Qd7mY=
Subject key identifier:   48:74:AD:AB:17:47:D3:89:E8:A3:AD:61:B4:30:5F:21:EB:E6:F2:BC
Certificate issuer:       /CN=5C35DB6CA20F7389ADDD4A37D7726320FB7AD545
Certificate serial:       5F1668E1AF464CB19BC40CA40E3E61AE99120498
Authority key identifier: 5C:35:DB:6C:A2:0F:73:89:AD:DD:4A:37:D7:72:63:20:FB:7A:D5:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/3138362e3139332e3232342e302f32302d3234203d3e20323632373331.roa
Signing time:             Tue 15 Sep 2026 14:11:05 +0000
ROA not before:           Tue 15 Sep 2026 14:06:05 +0000
ROA not after:            Tue 14 Sep 2027 14:11:05 +0000
asID:                     262731
IP address blocks:        186.193.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.crl
                          rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 07:32:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:16:68:e1:af:46:4c:b1:9b:c4:0c:a4:0e:3e:61:ae:99:12:04:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C35DB6CA20F7389ADDD4A37D7726320FB7AD545
        Validity
            Not Before: Sep 15 14:06:05 2026 GMT
            Not After : Sep 14 14:11:05 2027 GMT
        Subject: CN=4874ADAB1747D389E8A3AD61B4305F21EBE6F2BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:3b:82:0f:d7:3c:0a:69:b4:d1:d5:23:68:
                    cb:a1:aa:2a:99:a0:24:cd:ea:3c:ad:9f:75:2c:15:
                    c5:29:8b:44:6d:94:96:76:99:42:ce:5a:f4:d2:3c:
                    b0:80:1c:72:12:d0:a4:03:b0:5b:fa:3a:73:0b:ce:
                    19:15:10:86:85:d1:8a:14:b8:63:e5:59:75:a5:ba:
                    29:78:ce:9a:e9:ca:20:d3:5a:7d:87:99:af:a7:70:
                    12:36:92:f0:f5:1b:19:28:b3:51:70:30:d2:65:7c:
                    0e:fe:c6:98:a1:27:b1:7f:21:35:06:d3:95:4a:92:
                    88:4d:5f:8f:cb:c1:16:bd:a0:fa:df:7f:2f:c4:74:
                    29:41:fe:b3:9e:3c:a0:00:bf:27:e0:1b:6b:e3:dd:
                    95:f4:1b:92:4d:00:54:34:8d:5d:a9:08:b1:38:c3:
                    83:c4:1f:03:a4:f1:44:1b:9e:16:68:5b:77:4f:4a:
                    d4:eb:e7:cc:a0:95:9e:de:90:c0:f4:ef:d9:e0:cd:
                    09:2f:19:6d:f6:d2:af:7c:0d:d0:ec:b1:58:9b:da:
                    c3:6e:ee:21:f7:7f:b7:1b:ef:10:cd:68:c0:36:cd:
                    8b:50:88:8d:23:60:9c:a8:86:2e:2a:71:71:83:9e:
                    24:64:14:d4:73:58:4f:f4:77:33:5b:c4:62:dc:d2:
                    fa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:74:AD:AB:17:47:D3:89:E8:A3:AD:61:B4:30:5F:21:EB:E6:F2:BC
            X509v3 Authority Key Identifier:
                keyid:5C:35:DB:6C:A2:0F:73:89:AD:DD:4A:37:D7:72:63:20:FB:7A:D5:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/3138362e3139332e3232342e302f32302d3234203d3e20323632373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:4e:ba:5f:26:d4:16:63:4c:87:94:10:86:3b:a9:81:7e:be:
         12:a3:46:ff:c8:b2:d5:f7:c9:18:92:e7:2e:82:7d:00:6c:b9:
         1a:92:7f:42:db:64:42:93:e4:7f:fe:b0:93:16:76:0b:ca:e9:
         0d:34:0b:65:5e:48:b4:8f:ae:1b:aa:7f:e4:9b:4b:07:6e:78:
         df:6e:c0:36:5b:3e:5e:12:2b:0e:72:17:21:c4:44:8c:ad:b0:
         9d:18:7e:ed:49:d4:be:d8:b1:46:92:1c:4f:46:cd:f7:23:f7:
         fd:c3:c5:fc:6d:e2:fa:20:01:85:e1:7a:3b:c3:84:b4:9f:0e:
         90:19:b5:8b:ab:06:6e:63:e1:b7:8e:3b:81:f1:55:ed:7f:d0:
         48:a3:a7:37:e8:26:44:c4:cd:ca:43:42:8f:c6:a1:ec:5f:1b:
         01:08:b0:9a:f2:db:40:43:5b:5f:97:de:6a:18:82:77:a9:e0:
         b8:c6:12:b2:c6:ed:13:de:67:2f:8e:d8:1a:73:84:9e:0b:fb:
         58:ef:62:cb:c9:3c:97:c9:24:50:cd:d5:5c:5e:1c:56:b0:d0:
         8c:7e:3d:b6:39:22:13:6a:d7:bb:0d:49:00:99:9c:0d:19:94:
         14:e1:eb:f4:a0:10:54:25:6d:65:ed:76:25:0b:6c:c6:ff:27:
         94:22:a0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:16:42 2026 by rpki-client