Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31382e302f32332d3233203d3e20323633303232.roa
File:                     3138362e3234392e31382e302f32332d3233203d3e20323633303232.roa (raw, json)
Hash identifier:          3H1aCpYk9qqE/f2uYTuwylEIN4Xvokgzv/dcTtzgv2Q=
Subject key identifier:   3D:81:E1:10:33:47:26:AA:D0:77:13:C2:36:E9:5B:65:91:D3:68:C5
Certificate issuer:       /CN=E6A54FF71E395BA75DF9DE63D180369AF8715EB1
Certificate serial:       29CE17A47C8587E5D70D5E01C1A0696C9A71CEFD
Authority key identifier: E6:A5:4F:F7:1E:39:5B:A7:5D:F9:DE:63:D1:80:36:9A:F8:71:5E:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31382e302f32332d3233203d3e20323633303232.roa
Signing time:             Thu 12 Mar 2026 17:19:24 +0000
ROA not before:           Thu 12 Mar 2026 17:14:24 +0000
ROA not after:            Thu 11 Mar 2027 17:19:24 +0000
asID:                     263022
IP address blocks:        186.249.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 18:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ce:17:a4:7c:85:87:e5:d7:0d:5e:01:c1:a0:69:6c:9a:71:ce:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A54FF71E395BA75DF9DE63D180369AF8715EB1
        Validity
            Not Before: Mar 12 17:14:24 2026 GMT
            Not After : Mar 11 17:19:24 2027 GMT
        Subject: CN=3D81E110334726AAD07713C236E95B6591D368C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d9:a7:de:d9:84:2a:e8:f0:50:a2:43:62:ca:
                    55:8d:90:9d:4d:70:b0:c6:98:1c:50:e4:47:c3:82:
                    bb:c0:2b:d1:b8:70:d5:fb:a4:84:c5:e4:08:20:2d:
                    4d:25:42:8b:ca:49:5a:4b:23:a8:87:a9:6a:8a:80:
                    c5:ae:0c:d3:b2:72:8b:7c:b2:73:38:c1:a7:53:ec:
                    97:3c:c4:f5:2e:1d:37:ea:66:4e:d8:9d:2d:d9:27:
                    02:6a:20:c4:3d:5a:8a:1d:35:d7:a0:55:bc:22:ba:
                    f5:ed:f0:a6:a1:7d:18:79:b9:85:17:19:5e:de:27:
                    35:c1:5e:6a:71:28:06:aa:0a:10:e2:ea:a5:cd:b4:
                    7d:14:2b:c4:a7:a6:07:06:b1:17:f5:a0:4b:a0:6c:
                    64:59:3a:f6:40:9d:80:d4:88:33:fe:fe:bc:2f:86:
                    f2:de:63:ac:f7:00:6d:c4:2d:18:13:a5:17:99:bf:
                    cb:56:0b:6d:1c:75:1a:70:6e:42:44:68:52:36:3a:
                    03:7d:45:89:c2:de:fc:2f:c4:d0:4c:10:2c:fb:21:
                    2f:c7:79:bd:57:90:ab:03:ae:be:3b:5b:b0:c0:12:
                    dd:f3:b6:30:19:18:a1:64:5a:d6:e8:80:4c:94:d1:
                    04:10:c1:e9:d5:7b:81:f8:8f:92:bf:50:57:7e:36:
                    75:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:81:E1:10:33:47:26:AA:D0:77:13:C2:36:E9:5B:65:91:D3:68:C5
            X509v3 Authority Key Identifier:
                keyid:E6:A5:4F:F7:1E:39:5B:A7:5D:F9:DE:63:D1:80:36:9A:F8:71:5E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31382e302f32332d3233203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:f0:2f:82:59:cf:65:60:e7:5d:ce:2d:e7:85:e6:d7:63:46:
         44:22:1d:76:e6:c8:36:9e:c7:1e:60:18:8a:0f:a1:fd:e1:ab:
         73:a1:f2:2f:2d:73:4b:84:77:a7:c1:a5:7f:1d:84:98:00:19:
         33:f6:70:46:16:9c:64:90:fc:05:f3:92:c4:cb:94:a8:85:9f:
         2e:da:7c:af:ec:67:9f:3b:df:69:53:02:14:19:d6:57:16:1a:
         0d:ff:17:5f:c3:38:18:6d:78:93:2c:ef:60:63:2c:09:c1:ae:
         ad:55:70:b3:7b:db:ae:0f:cc:6b:cc:fe:37:4d:9b:4a:4e:24:
         ba:0a:81:0b:5d:da:24:a9:5a:3b:f9:b2:8f:b8:f8:b6:d2:14:
         f0:b1:cb:05:2a:7f:50:28:3c:b5:0f:24:64:14:53:61:09:79:
         86:02:6c:5c:49:86:c2:95:e0:13:7c:28:4a:f6:99:53:8c:52:
         37:19:d7:d9:f8:f9:ab:2c:72:e8:8f:a5:76:5b:86:5d:c2:7d:
         ea:fa:cc:8b:da:6a:8f:10:98:d6:ac:ab:19:2b:a3:71:c5:94:
         84:de:96:0c:91:07:df:e3:86:39:77:a2:ab:77:d5:97:b8:ed:
         48:56:83:33:5c:f7:1b:e5:65:35:4a:a2:57:6e:a7:1f:89:a0:
         9e:15:d2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:55:33 2026 by rpki-client