Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/3138362e3233372e3136302e302f32302d3234203d3e20323632383133.roa
File:                     3138362e3233372e3136302e302f32302d3234203d3e20323632383133.roa (raw, json)
Hash identifier:          2hceiwKA6zpsc2rnWXuqnt38Y+tVDi2MuS7RXaE+bTU=
Subject key identifier:   AD:9E:F7:59:FF:39:C3:CE:DD:58:B0:84:BB:E6:67:B0:EE:08:FD:07
Certificate issuer:       /CN=768C468840EAB0C1EAF4BADFFD473AF4BC4719CD
Certificate serial:       2209CB0ED69C39ADD96A03EC297EE698F3ED36D7
Authority key identifier: 76:8C:46:88:40:EA:B0:C1:EA:F4:BA:DF:FD:47:3A:F4:BC:47:19:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/3138362e3233372e3136302e302f32302d3234203d3e20323632383133.roa
Signing time:             Mon 07 Jul 2025 19:00:00 +0000
ROA not before:           Mon 07 Jul 2025 18:55:00 +0000
ROA not after:            Tue 07 Jul 2026 19:00:00 +0000
asID:                     262813
IP address blocks:        186.237.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.crl
                          rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:09:cb:0e:d6:9c:39:ad:d9:6a:03:ec:29:7e:e6:98:f3:ed:36:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768C468840EAB0C1EAF4BADFFD473AF4BC4719CD
        Validity
            Not Before: Jul  7 18:55:00 2025 GMT
            Not After : Jul  7 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:07:cf:50:be:f4:b6:2f:22:8b:d9:d8:0f:
                    34:4c:16:35:3a:33:76:48:92:c8:75:27:8c:56:28:
                    bf:98:65:2f:5e:d5:a6:db:83:14:8e:db:22:50:d8:
                    ae:66:d8:58:9e:a7:7b:9b:51:31:9d:09:54:16:d1:
                    fe:be:92:54:5c:11:97:b4:03:14:cb:ea:e1:47:32:
                    f7:ba:38:95:6f:d4:75:64:e7:dd:93:ff:8f:c4:71:
                    df:73:61:c7:4a:8f:56:0f:67:56:14:83:51:47:45:
                    7c:ad:ed:c3:b7:fd:46:2f:a2:ac:b8:b1:13:93:9f:
                    a2:5f:92:3b:e8:83:87:4f:13:3a:bf:ff:9c:79:92:
                    26:da:08:5e:a1:2b:d3:3d:66:2c:0b:95:9f:47:77:
                    51:f5:cc:c5:fe:9a:6c:36:65:77:28:36:98:23:0d:
                    50:8f:1c:2c:b3:93:4b:a6:ca:f4:1b:e3:75:16:45:
                    03:29:c3:9f:70:59:9d:b3:6c:2e:11:1e:ff:88:5e:
                    0f:d6:b6:72:4f:6c:89:49:94:af:bf:ae:02:e8:5e:
                    a2:ff:e8:67:69:a2:d0:6b:f9:a8:f6:8b:3f:20:c1:
                    a7:ae:9e:d9:1f:15:3e:75:d2:0d:25:11:07:7d:5e:
                    8c:8d:ae:ad:96:ba:a7:90:db:88:55:97:cf:db:e1:
                    6f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9E:F7:59:FF:39:C3:CE:DD:58:B0:84:BB:E6:67:B0:EE:08:FD:07
            X509v3 Authority Key Identifier:
                keyid:76:8C:46:88:40:EA:B0:C1:EA:F4:BA:DF:FD:47:3A:F4:BC:47:19:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/3138362e3233372e3136302e302f32302d3234203d3e20323632383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:02:09:b1:98:da:14:09:53:52:a6:58:84:4b:d6:21:42:e0:
         d9:6f:f3:37:e8:2a:60:13:d5:b0:cc:5a:43:70:94:30:d2:b9:
         99:95:9b:17:45:a0:3b:09:5b:25:56:19:2a:71:6b:75:e0:b2:
         13:95:3a:c6:96:dc:17:b0:68:e7:17:21:b7:bf:99:eb:d8:98:
         f6:9a:48:5d:69:07:26:cc:a5:4d:3e:81:76:b1:23:dc:e6:2f:
         fc:1c:3a:56:dc:a7:3a:98:68:c3:e1:f9:5a:5e:7b:f8:d2:1c:
         f4:e5:62:e0:79:09:01:ce:c8:4a:dc:c0:91:af:92:b2:3e:2a:
         a9:23:59:a6:96:3b:ba:b2:10:65:21:9e:31:29:97:34:f6:b6:
         9a:26:2a:6c:92:ec:79:04:a0:1f:9b:76:2c:bc:a3:ca:67:cd:
         d8:ce:b6:56:6f:f1:e3:b6:48:8a:30:cd:39:60:e6:60:0e:59:
         94:53:a5:39:45:e6:56:a9:e7:b7:e8:d1:03:2c:35:50:6f:a7:
         35:a8:f0:76:1d:3b:00:7c:24:e7:c9:25:50:c3:d0:d6:11:79:
         e4:e3:94:ea:70:b1:63:00:2e:a3:00:64:6e:81:af:1b:8d:6d:
         bb:8d:cb:19:4c:30:7f:8b:96:87:28:d7:df:c0:b5:4c:ad:b5:
         6f:45:75:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:12:05 2025 by rpki-client