Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133332e302f32342d3234203d3e203533323235.roa
File:                     3138362e3235312e3133332e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          T/OSiMWlk8DL4VL4UygVZsMEiHiXJPltQnidn8y7cvg=
Subject key identifier:   CC:38:E3:95:26:1D:98:95:BB:BE:55:7C:8D:E4:FA:50:83:39:28:B8
Certificate issuer:       /CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
Certificate serial:       390CD337F199D3B326B54419A6D80C600E5FF9B3
Authority key identifier: 3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133332e302f32342d3234203d3e203533323235.roa
Signing time:             Wed 13 May 2026 12:39:42 +0000
ROA not before:           Wed 13 May 2026 12:34:42 +0000
ROA not after:            Wed 12 May 2027 12:39:42 +0000
asID:                     53225
IP address blocks:        186.251.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:0c:d3:37:f1:99:d3:b3:26:b5:44:19:a6:d8:0c:60:0e:5f:f9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
        Validity
            Not Before: May 13 12:34:42 2026 GMT
            Not After : May 12 12:39:42 2027 GMT
        Subject: CN=CC38E395261D9895BBBE557C8DE4FA50833928B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a2:06:3f:27:62:fa:63:b3:d5:8e:f7:c9:b7:
                    cb:07:ce:50:49:60:64:e7:94:84:27:44:02:d4:82:
                    d6:a1:2a:84:3a:ad:a9:1c:b9:d9:30:09:e7:64:68:
                    fa:eb:b2:be:d3:fe:d3:1c:de:bd:fc:d3:89:98:94:
                    66:0a:a4:8f:e9:f5:92:e0:3a:0e:0d:d0:42:d5:b0:
                    89:6d:34:88:fa:73:2f:b1:d2:d5:a5:97:39:c5:4a:
                    9c:99:37:90:13:09:b1:13:76:ec:bc:6d:9d:30:ef:
                    58:3f:90:5b:18:a1:c0:63:e1:b2:2a:c0:df:9b:f3:
                    a8:17:d8:d5:d8:65:90:7b:7e:2c:e4:fa:b5:b2:07:
                    a6:e3:4b:e5:b7:f7:b9:2e:be:0f:2a:18:69:32:a5:
                    c4:ab:0a:fb:fc:e3:30:d0:b1:14:f9:df:bc:f7:2c:
                    e8:a5:87:12:51:99:33:df:a2:b5:c8:8f:a8:f5:2b:
                    0c:7c:a8:23:f8:61:e2:35:c2:c0:cf:2d:84:40:30:
                    1d:d2:55:39:40:3a:ab:e0:20:d8:91:ed:c9:b8:6a:
                    a0:bf:4b:48:d6:1e:23:52:f3:c0:57:69:49:d0:da:
                    de:77:3e:77:84:66:64:cd:2c:65:5e:7a:c7:3e:44:
                    0f:e5:c5:a4:73:b8:8f:2d:4a:1b:b5:53:2d:1e:f7:
                    c3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:38:E3:95:26:1D:98:95:BB:BE:55:7C:8D:E4:FA:50:83:39:28:B8
            X509v3 Authority Key Identifier:
                keyid:3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133332e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:b0:30:42:f9:09:4f:f8:72:8c:91:46:24:90:ec:e7:94:9f:
         ac:5b:1c:4f:d8:01:56:fb:d0:11:53:68:b9:e4:49:82:7c:4d:
         7f:a0:5f:6e:e3:93:20:9a:f6:28:9e:97:9e:06:fe:e9:fc:2a:
         41:be:c1:f1:5f:0e:b0:dd:a3:c6:bf:29:1d:64:1c:70:75:82:
         46:27:39:ff:6e:78:18:37:02:1a:dd:ff:2c:34:b1:13:33:36:
         68:88:59:60:f5:fd:d5:fe:bc:90:29:36:da:f9:a3:47:3e:68:
         5b:c0:53:0a:df:3f:7b:55:63:26:c7:15:67:a0:35:8c:0d:dd:
         bd:ed:e0:62:84:dc:4b:d7:5d:5a:95:a4:7e:f4:ad:eb:bc:55:
         7d:73:60:4f:f6:ac:c8:a5:b4:a6:82:20:79:13:be:94:c4:b9:
         3f:ad:7c:d8:e5:8c:f6:06:f4:19:65:40:31:b3:b1:c6:1e:82:
         4c:0d:ff:6a:14:80:f6:7f:b5:b3:24:96:f0:55:e8:fd:d8:7d:
         a0:0b:83:13:b2:02:a5:bc:2b:5c:01:00:d3:49:0e:8a:8c:71:
         e1:02:3b:ea:19:90:02:cc:eb:2e:12:2c:ab:ec:63:b0:09:55:
         2e:6e:fb:99:b7:4b:c7:d4:5c:74:52:a5:eb:f3:15:9a:b3:4d:
         fd:66:52:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:39 2026 by rpki-client