Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133322e302f32342d3234203d3e203533323235.roa
File:                     3138362e3235312e3133322e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          IxOXfb8FFyUaeyS30PKRqr2yjuEl0XwB4k6dTfTn3sY=
Subject key identifier:   B6:00:27:A9:7A:39:52:75:1F:C7:88:AD:00:73:FB:19:B7:1E:48:AE
Certificate issuer:       /CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
Certificate serial:       2A824671ED8E1B7F1B05C8E11D053DA3654661A5
Authority key identifier: 3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133322e302f32342d3234203d3e203533323235.roa
Signing time:             Wed 13 May 2026 12:39:26 +0000
ROA not before:           Wed 13 May 2026 12:34:26 +0000
ROA not after:            Wed 12 May 2027 12:39:26 +0000
asID:                     53225
IP address blocks:        186.251.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:82:46:71:ed:8e:1b:7f:1b:05:c8:e1:1d:05:3d:a3:65:46:61:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
        Validity
            Not Before: May 13 12:34:26 2026 GMT
            Not After : May 12 12:39:26 2027 GMT
        Subject: CN=B60027A97A3952751FC788AD0073FB19B71E48AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:97:4e:a3:5c:f2:29:fd:12:b5:0b:a6:b6:
                    ad:23:3f:fe:59:51:c5:7b:d1:3f:bd:9a:e9:6e:23:
                    d7:64:e6:1a:bc:b8:c1:58:14:3b:6b:3a:a3:36:ea:
                    78:fe:79:69:fd:a2:ab:3c:fa:08:75:05:3f:a7:2b:
                    d2:32:e6:90:48:3c:ec:af:46:88:5c:0f:c9:22:19:
                    2a:c7:c1:c9:59:51:1d:10:ad:e3:51:a4:35:81:34:
                    08:59:82:84:b7:85:ec:9e:3e:da:f4:7b:30:30:5a:
                    d2:ba:bc:a0:25:4d:0e:bc:26:7b:20:ce:3e:9e:56:
                    cb:f4:4f:9e:2f:03:79:60:02:e6:fa:c7:79:79:5b:
                    03:72:77:14:64:82:f2:f0:44:5b:24:94:fa:0e:de:
                    73:05:2a:71:f7:cb:bb:d6:47:48:02:be:62:3b:4c:
                    96:e9:b0:4b:5a:45:c2:fc:d7:35:3b:43:10:b7:c1:
                    71:80:cb:76:39:be:98:c2:66:ea:b4:dc:18:58:d6:
                    7f:43:e0:9c:b3:79:36:e8:a0:34:e7:e3:e0:7c:3a:
                    4d:13:c2:21:2c:40:e6:0f:03:73:9c:ef:e7:50:56:
                    aa:6a:8d:b5:f4:1f:5b:5a:c3:2a:f7:cc:61:4f:a5:
                    3c:9b:92:b0:7e:83:10:e0:9e:55:18:e9:44:91:7e:
                    52:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:00:27:A9:7A:39:52:75:1F:C7:88:AD:00:73:FB:19:B7:1E:48:AE
            X509v3 Authority Key Identifier:
                keyid:3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133322e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:39:0f:7d:1b:de:b9:b8:66:55:e7:8b:0c:89:2f:e6:0d:14:
         53:af:76:fc:d0:29:47:4f:25:c9:04:52:79:9a:c8:ea:b8:70:
         ec:0a:37:4d:dd:25:72:2c:79:ac:11:dc:7e:c6:cd:f7:76:04:
         16:60:69:97:a7:7e:85:fb:20:25:c3:a3:f5:a2:b6:d6:07:16:
         e1:84:0e:c6:72:dd:dd:33:61:ca:07:fb:29:c1:db:d7:b5:a3:
         66:33:60:ee:64:75:6d:17:c3:bd:dd:37:03:19:42:94:a0:fa:
         aa:f0:77:0d:89:9e:f7:dd:6b:9b:7f:fc:64:b4:7a:f7:67:ea:
         a1:91:07:2a:ed:16:46:34:43:3d:bb:8e:46:e4:47:ca:f3:af:
         1f:c4:cb:ac:db:2f:67:c7:b6:79:ff:36:9c:1f:0a:3d:ff:7d:
         11:e5:dc:ef:52:c3:da:75:1d:b2:cd:0d:e0:94:3b:54:41:0c:
         05:d3:c6:6f:3b:ea:9b:3e:c2:ee:f7:4a:b3:cb:ee:d7:c7:a8:
         52:de:3a:c9:9d:36:60:a2:15:fc:69:7b:68:49:bc:4f:3e:d6:
         f0:62:51:70:48:9c:9b:ae:b4:10:79:ae:2a:3c:a6:1a:8e:bd:
         4f:c3:47:b9:a1:7a:c6:bc:18:e7:aa:8b:40:e4:97:4b:bd:cf:
         32:78:d6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:43 2026 by rpki-client