Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/3138362e3235312e3136302e302f32322d3232203d3e203533323237.roa
File:                     3138362e3235312e3136302e302f32322d3232203d3e203533323237.roa (raw, json)
Hash identifier:          Es/8bHl3jFSgHejn+hXstXZvpRtBRP+YR52qU58Mrew=
Subject key identifier:   45:2B:4D:F4:01:C4:FF:52:9C:E0:9A:A8:41:E4:39:0A:43:B1:3F:1E
Certificate issuer:       /CN=658D66B1BD26D1C90CD3EB7ECF5740198F13027A
Certificate serial:       3B74177E811A270271EF461321884EA043CD07CC
Authority key identifier: 65:8D:66:B1:BD:26:D1:C9:0C:D3:EB:7E:CF:57:40:19:8F:13:02:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/3138362e3235312e3136302e302f32322d3232203d3e203533323237.roa
Signing time:             Thu 16 Jul 2026 15:46:14 +0000
ROA not before:           Thu 16 Jul 2026 15:41:14 +0000
ROA not after:            Thu 15 Jul 2027 15:46:14 +0000
asID:                     53227
IP address blocks:        186.251.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.crl
                          rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:74:17:7e:81:1a:27:02:71:ef:46:13:21:88:4e:a0:43:cd:07:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658D66B1BD26D1C90CD3EB7ECF5740198F13027A
        Validity
            Not Before: Jul 16 15:41:14 2026 GMT
            Not After : Jul 15 15:46:14 2027 GMT
        Subject: CN=452B4DF401C4FF529CE09AA841E4390A43B13F1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:b6:19:2c:3a:a0:fa:d7:a9:6c:02:22:fd:
                    ea:f4:3a:6f:32:50:7f:6f:30:b6:41:78:aa:ab:75:
                    d6:a7:b5:46:7d:e0:cb:e4:2b:95:dc:38:b9:b8:7f:
                    8f:9f:fa:a9:15:d7:e8:cc:5d:87:86:70:04:b8:8a:
                    01:43:06:e0:e8:a3:cc:a0:bd:a6:a7:8e:fe:dd:75:
                    11:e4:ac:e4:0a:19:60:26:e9:4b:49:21:6b:6b:af:
                    3b:bc:d4:70:63:84:42:35:f5:72:87:2f:aa:02:dd:
                    c3:6f:e2:0a:66:91:fd:2e:f9:06:8c:f9:09:9c:6c:
                    c4:ff:27:79:9f:75:f4:1c:d3:f3:18:71:8e:70:50:
                    5a:ee:fa:c0:7e:a8:78:6d:76:80:bf:5f:2b:6d:fe:
                    65:17:b6:0f:0f:4e:d1:cd:8f:20:c1:e4:3c:29:f0:
                    10:12:7b:ed:99:6b:41:5e:5e:ce:17:b7:c1:43:9e:
                    b9:a4:27:0d:16:6c:15:c7:b9:a6:3f:47:1f:d5:88:
                    4e:c1:02:d4:7b:d5:73:25:81:c1:b9:a9:68:16:08:
                    b4:69:cd:b5:b2:6f:1b:a6:39:8f:33:82:a9:c3:cd:
                    ad:25:ad:5f:0f:f5:7a:71:84:4d:28:1d:97:4b:e2:
                    d5:39:5a:55:18:5f:0d:ca:8e:84:37:c6:4b:89:5a:
                    0c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2B:4D:F4:01:C4:FF:52:9C:E0:9A:A8:41:E4:39:0A:43:B1:3F:1E
            X509v3 Authority Key Identifier:
                keyid:65:8D:66:B1:BD:26:D1:C9:0C:D3:EB:7E:CF:57:40:19:8F:13:02:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/3138362e3235312e3136302e302f32322d3232203d3e203533323237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:7d:d7:23:9a:cb:7f:e1:21:0f:3f:23:a5:9c:48:34:49:be:
         9d:e9:82:54:97:ab:3c:30:75:fe:38:45:a2:5d:2f:89:67:c3:
         1b:48:70:26:d3:70:89:4d:e7:57:13:7c:92:cf:1f:ed:fb:ff:
         8f:ef:0a:0c:79:e4:92:a8:5e:89:62:2c:d1:89:79:36:bf:fe:
         71:3d:c0:34:d7:42:cd:2b:33:16:1e:d4:81:76:10:49:f7:b8:
         28:e3:62:84:38:44:50:51:5e:56:67:aa:1e:29:9d:30:77:03:
         e4:e6:6d:a3:3c:85:f2:2e:c0:bd:ad:53:04:b8:72:13:a3:e1:
         bd:08:08:ec:14:88:c5:6a:f2:e4:07:af:bb:3b:bf:4e:3a:60:
         4a:f0:09:46:05:1c:cc:fc:06:84:0f:88:c5:57:26:b7:79:72:
         01:de:de:db:f4:6c:29:f0:9d:e8:86:84:03:c2:79:dc:1d:b1:
         b7:24:99:c6:63:1a:71:7a:3e:33:7d:50:0f:4c:28:5f:f0:d4:
         4f:42:0d:f5:97:bf:3c:86:aa:9d:a1:a3:12:2f:09:28:e0:f3:
         fb:43:c3:fc:fd:55:fb:da:de:c3:ce:bd:5b:bb:73:ec:b4:9f:
         58:fa:58:a1:39:93:68:7e:e4:80:c0:ce:e6:ac:5b:fb:9a:69:
         f8:53:d8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:51:29 2026 by rpki-client