Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/3138362e3235302e3136302e302f32322d3232203d3e20323632383138.roa
File:                     3138362e3235302e3136302e302f32322d3232203d3e20323632383138.roa (raw, json)
Hash identifier:          VKfmss/RLI6UDlqgEr0NgoeZSvQWQ6QOLPZDe/6lMfg=
Subject key identifier:   1A:7F:FA:DA:48:55:31:0A:18:6D:58:2B:E7:77:C2:62:24:63:4B:A3
Certificate issuer:       /CN=F8A5885612DC8F082016099D6959B32B90C3706E
Certificate serial:       566A4FB0825C9E7D0B186C014B4A452A5707B9D0
Authority key identifier: F8:A5:88:56:12:DC:8F:08:20:16:09:9D:69:59:B3:2B:90:C3:70:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/3138362e3235302e3136302e302f32322d3232203d3e20323632383138.roa
Signing time:             Fri 08 Aug 2025 11:47:42 +0000
ROA not before:           Fri 08 Aug 2025 11:42:42 +0000
ROA not after:            Fri 07 Aug 2026 11:47:42 +0000
asID:                     262818
IP address blocks:        186.250.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.crl
                          rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 06:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6a:4f:b0:82:5c:9e:7d:0b:18:6c:01:4b:4a:45:2a:57:07:b9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A5885612DC8F082016099D6959B32B90C3706E
        Validity
            Not Before: Aug  8 11:42:42 2025 GMT
            Not After : Aug  7 11:47:42 2026 GMT
        Subject: CN=1A7FFADA4855310A186D582BE777C26224634BA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:84:b8:15:69:23:02:db:14:9a:ed:9f:0a:
                    94:34:ec:04:22:cf:82:c5:7d:7a:fb:1f:8b:48:66:
                    00:8d:1d:3b:83:eb:53:f6:73:51:b8:04:23:d0:03:
                    23:75:fc:d3:81:7c:ac:d0:30:53:9c:20:f0:59:b7:
                    20:ea:b2:06:b7:d0:5a:36:83:2e:dc:8a:5b:7d:c6:
                    49:77:17:82:9b:e6:6e:44:78:87:53:cf:53:d8:7f:
                    7e:5b:0a:bc:2e:05:e0:06:c1:7f:e3:8f:57:f6:a2:
                    22:a2:8c:ab:34:5a:79:59:62:bc:21:35:27:1c:59:
                    eb:1f:95:ce:ff:77:7e:a7:29:35:08:47:bf:5c:65:
                    57:c7:c8:6e:cc:23:9b:af:a9:75:d5:dc:f3:98:72:
                    2e:54:f2:7a:d6:db:83:6f:a3:c1:23:47:90:4c:3f:
                    a9:89:54:83:b4:1d:44:41:22:ea:2e:a2:ec:d7:b2:
                    92:7e:19:f1:3f:f2:0c:06:51:c6:27:cd:72:14:94:
                    20:92:61:d3:0d:ea:a4:7b:aa:bc:fc:e9:09:cd:21:
                    24:3f:75:f3:a0:06:6d:76:34:d6:89:ea:99:94:44:
                    1f:71:da:2f:83:f8:85:e8:ca:a0:9e:f0:44:2c:81:
                    0e:9d:03:44:95:a5:97:49:44:f6:ea:4a:8f:c6:45:
                    cc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7F:FA:DA:48:55:31:0A:18:6D:58:2B:E7:77:C2:62:24:63:4B:A3
            X509v3 Authority Key Identifier:
                keyid:F8:A5:88:56:12:DC:8F:08:20:16:09:9D:69:59:B3:2B:90:C3:70:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/3138362e3235302e3136302e302f32322d3232203d3e20323632383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:9c:ab:94:60:d6:00:02:b4:09:a2:37:d3:7c:1b:8c:0c:2c:
         b9:b1:95:c5:ac:df:c5:0a:aa:9c:39:c6:7f:e3:05:e4:48:13:
         dd:b4:a2:29:75:8c:2f:3b:be:df:c0:ef:1b:bf:d0:55:9a:88:
         0c:8f:e1:43:79:ab:87:23:41:aa:2d:5c:a1:66:cf:48:15:04:
         b2:bc:b0:c9:e9:d0:5b:00:e6:df:74:ed:c2:52:2f:98:82:8c:
         9b:cb:12:2b:a1:a7:c5:7e:5c:e8:e3:03:35:59:b5:d9:a1:9d:
         e4:9b:09:53:da:b9:f5:a5:10:e5:6a:41:39:9e:2b:59:d3:78:
         d8:9a:9a:36:c1:22:92:9c:b5:67:b8:67:a6:41:66:73:c8:ec:
         9b:55:13:99:07:77:94:eb:cb:81:ab:00:86:b4:c0:1e:46:84:
         1b:86:00:38:9a:fa:6e:90:dc:05:0b:11:0d:ca:23:90:be:d9:
         0f:08:f4:68:2d:1b:f6:70:5e:07:b4:d1:da:75:dc:a7:10:db:
         a6:02:65:00:36:8d:74:37:de:ed:78:98:0f:e0:5c:fd:b7:b1:
         9b:50:4e:ed:b0:bb:9d:93:cd:12:57:5d:2a:79:02:96:5a:8f:
         4c:15:97:38:87:ef:a2:61:03:8b:43:cd:cf:50:06:e0:75:55:
         fa:74:33:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 13:12:49 2025 by rpki-client