Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138352e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3138352e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          DZkEiak8iTzBw3fogV5deGYD8bZ+kXJPzClYAeleuwU=
Subject key identifier:   29:59:D5:7A:67:85:EC:40:F0:73:55:9E:22:92:EA:C3:C5:6D:1E:33
Certificate issuer:       /CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
Certificate serial:       3869D09DF133ECCDAD1DAED9A56599E35AD432C2
Authority key identifier: CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138352e302f32342d3234203d3e203238313931.roa
Signing time:             Mon 15 Jun 2026 11:22:18 +0000
ROA not before:           Mon 15 Jun 2026 11:17:18 +0000
ROA not after:            Mon 14 Jun 2027 11:22:18 +0000
asID:                     28191
IP address blocks:        186.193.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl
                          rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:69:d0:9d:f1:33:ec:cd:ad:1d:ae:d9:a5:65:99:e3:5a:d4:32:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
        Validity
            Not Before: Jun 15 11:17:18 2026 GMT
            Not After : Jun 14 11:22:18 2027 GMT
        Subject: CN=2959D57A6785EC40F073559E2292EAC3C56D1E33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9b:3d:8a:a8:40:ca:f0:e9:8d:21:c8:b1:b7:
                    f3:ab:ac:fa:63:73:2a:b3:52:34:8a:1b:f4:a9:d0:
                    c5:3f:b0:34:ab:a3:69:ff:93:26:82:6b:d4:c5:d7:
                    c6:25:f2:ce:7b:8a:ca:d6:13:9a:61:13:69:31:4b:
                    0c:05:bf:1f:8b:56:6a:c9:42:e8:8b:f0:37:25:b2:
                    a0:f9:74:19:38:6e:a1:a6:91:41:43:7b:f3:64:5b:
                    fd:dd:75:80:4f:95:e9:87:d6:30:2a:3b:d1:37:15:
                    9a:7b:57:52:0b:b6:24:66:f7:ba:c5:fd:4a:d0:52:
                    78:ce:a7:1c:ae:5d:49:1e:21:29:43:2b:61:9f:6a:
                    7d:bb:18:5e:f3:a8:f3:4f:38:0c:9c:06:5f:1a:dc:
                    9c:7d:dd:cb:a7:c0:38:04:32:22:88:b8:51:b3:18:
                    ed:fe:4c:ff:1f:b0:54:5e:ed:24:dc:c5:59:35:85:
                    0a:2e:b7:87:24:a9:74:4f:c9:6d:f3:71:5e:53:98:
                    f4:9b:19:7e:74:bb:8a:25:c9:88:44:d4:1e:00:a0:
                    23:68:4e:40:bf:a8:7c:bd:8c:d2:b5:1f:b0:4f:b1:
                    07:3b:0e:78:b3:42:83:98:a7:e8:84:9d:23:d0:35:
                    6f:7c:b1:07:75:4b:5f:8f:e7:04:52:01:fc:a6:44:
                    ae:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:59:D5:7A:67:85:EC:40:F0:73:55:9E:22:92:EA:C3:C5:6D:1E:33
            X509v3 Authority Key Identifier:
                keyid:CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138352e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:b9:d0:63:00:d8:75:2f:75:0a:fa:73:6a:60:d1:c5:35:c6:
         aa:20:9c:86:0d:6a:3e:38:97:70:b3:00:e5:ce:cc:11:0e:ed:
         e3:c1:54:6e:d3:9b:2f:ad:3b:2a:45:3d:b6:eb:28:d4:f7:13:
         08:de:5e:a9:12:30:e0:dc:e9:9b:18:6b:99:96:1b:61:80:37:
         b2:ce:56:d2:06:f9:9d:84:ff:f3:5a:cd:16:6d:0e:1c:b1:ab:
         66:72:cc:0a:29:76:b4:9d:d6:14:2a:8e:06:44:65:c8:c2:eb:
         9e:95:78:79:49:bd:2e:c8:3e:36:5b:ed:64:f2:ac:85:61:27:
         94:7a:60:92:fd:70:9a:81:d7:b1:ba:a8:38:e8:87:45:79:e5:
         73:5e:50:31:bf:ff:83:df:3a:76:8e:1c:a7:2a:4f:ad:8c:e4:
         eb:1b:29:0a:64:db:35:37:fe:41:d2:13:4b:2e:07:71:a6:85:
         22:09:05:39:70:40:25:d9:b9:f3:7a:22:b1:8b:5d:e2:c4:38:
         ba:3b:9a:47:f4:eb:04:8b:6e:06:09:f1:a9:f9:0c:13:df:cb:
         69:67:94:a8:1d:57:60:95:5b:00:b1:97:f0:88:7a:ac:40:f5:
         4e:a9:21:34:87:fc:6e:51:4a:5b:f8:3f:eb:a7:92:52:39:a0:
         02:3f:0f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:38:41 2026 by rpki-client