Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AnujZMv6u1zoTXgU5mPEgUBKEZqHpdVUgSCcnCG7NTKM/0/3138362e3235312e3230382e302f32322d3234203d3e20323632383337.roa
File:                     3138362e3235312e3230382e302f32322d3234203d3e20323632383337.roa (raw, json)
Hash identifier:          tiFxnPtG5mn4i6uYMqW5+Y5KOPTBlBcwj8G+MJOo8cI=
Subject key identifier:   4B:98:61:B9:29:01:F3:BB:24:11:A7:43:85:5B:45:02:A9:CE:78:8C
Certificate issuer:       /CN=8141E7C75D3371F4891856DDE87486ECDF37AC3B
Certificate serial:       6BB84C9860655DB0E6A35F7DD2C7E089334326F1
Authority key identifier: 81:41:E7:C7:5D:33:71:F4:89:18:56:DD:E8:74:86:EC:DF:37:AC:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8141E7C75D3371F4891856DDE87486ECDF37AC3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AnujZMv6u1zoTXgU5mPEgUBKEZqHpdVUgSCcnCG7NTKM/0/3138362e3235312e3230382e302f32322d3234203d3e20323632383337.roa
Signing time:             Wed 01 Oct 2025 17:28:22 +0000
ROA not before:           Wed 01 Oct 2025 17:23:22 +0000
ROA not after:            Wed 30 Sep 2026 17:28:22 +0000
asID:                     262837
IP address blocks:        186.251.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AnujZMv6u1zoTXgU5mPEgUBKEZqHpdVUgSCcnCG7NTKM/0/8141E7C75D3371F4891856DDE87486ECDF37AC3B.crl
                          rsync://rpki-repo.registro.br/repo/AnujZMv6u1zoTXgU5mPEgUBKEZqHpdVUgSCcnCG7NTKM/0/8141E7C75D3371F4891856DDE87486ECDF37AC3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8141E7C75D3371F4891856DDE87486ECDF37AC3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 21:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b8:4c:98:60:65:5d:b0:e6:a3:5f:7d:d2:c7:e0:89:33:43:26:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8141E7C75D3371F4891856DDE87486ECDF37AC3B
        Validity
            Not Before: Oct  1 17:23:22 2025 GMT
            Not After : Sep 30 17:28:22 2026 GMT
        Subject: CN=4B9861B92901F3BB2411A743855B4502A9CE788C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1c:b9:21:85:d9:77:a0:21:dc:a0:22:50:f0:
                    95:e2:0b:7c:89:8f:e1:3b:e8:ee:4f:67:fd:3d:da:
                    cb:14:61:94:e1:db:04:58:ae:21:3f:31:8a:9c:99:
                    43:ff:38:ca:dc:2f:9b:ba:a9:13:46:b3:9d:34:6d:
                    26:22:61:c5:2e:b1:18:26:f5:33:3c:e6:62:be:64:
                    bb:e3:1c:8b:e3:6f:0b:19:be:9f:09:52:a7:6d:fa:
                    a3:14:45:8c:df:a3:5b:59:8f:ee:2b:05:fa:fc:b6:
                    a6:53:67:74:4b:08:9e:77:ae:c3:37:d9:de:88:99:
                    73:f9:4a:26:bb:53:f6:95:47:e2:a3:23:df:37:0e:
                    bd:f8:b3:85:96:b3:81:4c:9b:cc:fc:56:5e:ca:89:
                    d6:fc:43:97:a9:71:85:8a:40:b0:5d:9b:90:22:3c:
                    e1:ca:1b:2f:9a:18:30:f3:5c:b9:79:b4:ea:ae:aa:
                    c5:0c:d9:c8:0c:3a:5e:e7:0c:a2:41:92:f1:fe:a5:
                    9e:1d:4c:5d:c6:ab:b4:21:d6:97:b3:1b:ca:3c:ad:
                    2a:52:a6:7d:56:71:36:75:97:17:92:91:23:ad:b9:
                    4e:55:d8:e3:3c:c0:2a:8b:40:a0:7d:32:94:54:59:
                    b3:5e:37:da:75:a1:0e:72:18:1a:e6:a7:e0:be:a7:
                    0f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:98:61:B9:29:01:F3:BB:24:11:A7:43:85:5B:45:02:A9:CE:78:8C
            X509v3 Authority Key Identifier:
                keyid:81:41:E7:C7:5D:33:71:F4:89:18:56:DD:E8:74:86:EC:DF:37:AC:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AnujZMv6u1zoTXgU5mPEgUBKEZqHpdVUgSCcnCG7NTKM/0/8141E7C75D3371F4891856DDE87486ECDF37AC3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8141E7C75D3371F4891856DDE87486ECDF37AC3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AnujZMv6u1zoTXgU5mPEgUBKEZqHpdVUgSCcnCG7NTKM/0/3138362e3235312e3230382e302f32322d3234203d3e20323632383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:0d:fb:32:cb:8a:fe:62:e0:40:6f:c4:c9:51:f2:a3:06:1b:
         9f:c9:67:78:b2:8d:e4:75:52:9d:66:af:8b:f5:6c:4e:e7:53:
         3f:51:fc:1d:eb:cf:07:09:ac:e2:63:c3:4c:24:3e:2a:82:0e:
         9c:49:ae:63:60:34:eb:9b:16:73:41:b1:41:d8:de:1d:75:3d:
         43:d8:cd:e8:d1:f4:ac:f5:ad:96:e8:1d:13:b4:9b:a5:ed:31:
         1e:30:e2:b1:c4:f8:2e:92:d9:6a:0b:34:f5:6f:ab:b8:1e:f4:
         1d:0e:e7:22:6a:93:ea:04:49:9f:99:df:c7:d5:dd:80:94:5c:
         59:c4:1f:90:62:0f:4e:c3:f6:aa:28:f6:f9:03:81:6e:97:d3:
         5a:8f:a7:48:16:36:dc:b6:eb:15:2c:2e:65:73:67:32:82:58:
         03:0c:f0:e5:c0:e7:85:3c:be:c0:f7:b5:7f:a5:90:5d:17:2a:
         68:09:fc:38:ff:86:d1:a9:8e:5a:64:da:ea:c7:31:f2:4a:d0:
         ae:5a:26:62:f3:df:74:db:f2:1d:54:c6:56:6a:b3:2d:87:5c:
         68:cd:a3:7f:1e:8c:04:49:dc:b1:c6:d4:31:f9:a4:a9:cd:cf:
         ee:a5:1e:64:ab:85:a9:fd:22:22:be:b8:de:4d:39:21:19:af:
         36:55:de:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:31:42 2025 by rpki-client