Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EoVk95HP229CMB9tgW8iCV3qwP7gKFg7DmLEWXNKyxUy/0/3231362e3234352e3133332e302f32342d3234203d3e20323635303538.roa
File:                     3231362e3234352e3133332e302f32342d3234203d3e20323635303538.roa (raw, json)
Hash identifier:          mcYWZ5LJv6pmfE6sLEbNAljZfH8q97NgE36YmV1VzZo=
Subject key identifier:   FF:B3:E0:6E:AE:C5:3F:83:14:F4:63:EF:BC:9E:57:CE:ED:4A:AF:5C
Certificate issuer:       /CN=08DCDB7348E7743E8AACA6C10E1DA610BDC6A362
Certificate serial:       211288F568032DBBAA4382595D77D3BC73373B87
Authority key identifier: 08:DC:DB:73:48:E7:74:3E:8A:AC:A6:C1:0E:1D:A6:10:BD:C6:A3:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08DCDB7348E7743E8AACA6C10E1DA610BDC6A362.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EoVk95HP229CMB9tgW8iCV3qwP7gKFg7DmLEWXNKyxUy/0/3231362e3234352e3133332e302f32342d3234203d3e20323635303538.roa
Signing time:             Thu 16 Jul 2026 14:38:01 +0000
ROA not before:           Thu 16 Jul 2026 14:33:01 +0000
ROA not after:            Thu 15 Jul 2027 14:38:01 +0000
asID:                     265058
IP address blocks:        216.245.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EoVk95HP229CMB9tgW8iCV3qwP7gKFg7DmLEWXNKyxUy/0/08DCDB7348E7743E8AACA6C10E1DA610BDC6A362.crl
                          rsync://rpki-repo.registro.br/repo/EoVk95HP229CMB9tgW8iCV3qwP7gKFg7DmLEWXNKyxUy/0/08DCDB7348E7743E8AACA6C10E1DA610BDC6A362.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08DCDB7348E7743E8AACA6C10E1DA610BDC6A362.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:12:88:f5:68:03:2d:bb:aa:43:82:59:5d:77:d3:bc:73:37:3b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08DCDB7348E7743E8AACA6C10E1DA610BDC6A362
        Validity
            Not Before: Jul 16 14:33:01 2026 GMT
            Not After : Jul 15 14:38:01 2027 GMT
        Subject: CN=FFB3E06EAEC53F8314F463EFBC9E57CEED4AAF5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:37:b6:13:78:c0:b0:3a:eb:8e:a5:07:bf:4f:
                    c7:e3:e3:80:14:ce:30:7b:b1:eb:37:e9:48:53:af:
                    f9:12:53:0f:8e:29:6f:42:f5:eb:43:0a:ad:ed:5d:
                    39:91:d8:3b:bb:b4:e0:d0:6e:db:47:56:ab:00:d5:
                    3a:ad:33:b2:20:8c:a5:09:30:a7:ea:b3:09:eb:eb:
                    60:aa:f9:39:1a:a8:81:65:ad:4d:0f:5f:b4:90:56:
                    18:6b:d0:20:df:5b:33:41:9a:f2:ac:f3:7d:ff:46:
                    48:3f:78:4d:10:30:c2:f1:9d:b8:2b:af:69:b5:74:
                    68:b6:8f:0a:cb:f6:2c:23:c9:2f:d7:f5:1b:10:6a:
                    64:9e:8e:e3:b3:a3:86:60:0d:c2:0f:a9:b4:83:a9:
                    8f:13:fc:ec:60:4d:86:57:65:95:24:20:4f:1a:a4:
                    25:78:94:98:d3:c9:89:83:a8:94:b9:1b:0c:44:e1:
                    0a:0e:50:ce:1b:77:80:17:df:0e:66:0d:3a:1d:0e:
                    ac:b9:57:0a:41:ca:7a:a9:ff:c4:4b:c2:36:c8:4c:
                    b8:e8:4e:b4:ea:77:45:13:29:7e:cc:6f:15:44:9a:
                    59:a9:1a:48:f6:8c:5c:8a:a9:e2:aa:3f:24:f2:8f:
                    e8:1f:06:de:22:36:ac:08:1c:46:82:b9:37:5b:10:
                    99:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B3:E0:6E:AE:C5:3F:83:14:F4:63:EF:BC:9E:57:CE:ED:4A:AF:5C
            X509v3 Authority Key Identifier:
                keyid:08:DC:DB:73:48:E7:74:3E:8A:AC:A6:C1:0E:1D:A6:10:BD:C6:A3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EoVk95HP229CMB9tgW8iCV3qwP7gKFg7DmLEWXNKyxUy/0/08DCDB7348E7743E8AACA6C10E1DA610BDC6A362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08DCDB7348E7743E8AACA6C10E1DA610BDC6A362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EoVk95HP229CMB9tgW8iCV3qwP7gKFg7DmLEWXNKyxUy/0/3231362e3234352e3133332e302f32342d3234203d3e20323635303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.245.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:46:e6:67:f6:d1:97:56:0b:be:a6:39:9f:56:26:3a:ae:6d:
         78:7f:9d:58:58:cb:ad:9d:af:a3:3d:24:28:6e:ac:77:7e:69:
         c5:db:de:4b:3d:3f:88:6b:d8:7e:55:d2:01:0a:92:fa:6d:52:
         7b:8c:0d:50:8f:ee:0c:cb:af:d4:c0:39:c9:b5:4a:e1:0b:88:
         b5:f4:28:54:d1:c3:21:ab:ff:ee:b8:ad:af:b3:b2:6c:17:f7:
         51:d3:64:27:16:e8:75:f9:49:10:e5:f4:36:d7:84:a5:78:71:
         08:c5:57:88:9d:9a:1e:18:52:e3:93:72:0a:dc:73:a4:60:c1:
         4f:53:15:3a:d4:c8:05:f1:f4:e3:69:85:93:15:56:04:00:28:
         47:95:db:e4:b3:09:47:75:a9:dd:72:c7:bb:2b:09:61:b3:ca:
         93:72:5e:82:c5:c6:91:02:df:99:4d:6f:06:71:01:04:89:38:
         2a:a1:97:a8:d8:b1:52:6c:02:83:b3:c5:8f:84:4d:14:52:a1:
         4a:62:da:2a:c1:3f:a2:b5:4e:99:e4:a7:0b:51:e5:84:8b:ff:
         94:62:ee:f3:9f:5f:c0:55:7f:3e:05:31:97:e8:67:60:5b:b3:
         4a:a2:9c:d8:30:be:ce:84:3d:d5:52:12:85:94:54:6d:54:98:
         9f:c7:6a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:36:52 2026 by rpki-client