Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3134302e302f32342d3234203d3e203533323235.roa
File:                     3138362e3235312e3134302e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          R4LN4i2RhNDQeiYuFFyQK77SGT36x1wZN0aOo6ohhI0=
Subject key identifier:   E8:B9:79:FA:CE:30:91:DE:32:CF:9A:AD:6C:49:90:AE:01:E6:F2:4C
Certificate issuer:       /CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
Certificate serial:       147163F842BD785B78213E0846C24BCDC53E18D9
Authority key identifier: 3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3134302e302f32342d3234203d3e203533323235.roa
Signing time:             Wed 13 May 2026 12:40:43 +0000
ROA not before:           Wed 13 May 2026 12:35:43 +0000
ROA not after:            Wed 12 May 2027 12:40:43 +0000
asID:                     53225
IP address blocks:        186.251.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:71:63:f8:42:bd:78:5b:78:21:3e:08:46:c2:4b:cd:c5:3e:18:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
        Validity
            Not Before: May 13 12:35:43 2026 GMT
            Not After : May 12 12:40:43 2027 GMT
        Subject: CN=E8B979FACE3091DE32CF9AAD6C4990AE01E6F24C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:3f:05:61:04:43:a8:18:8b:8b:60:d7:0a:
                    c1:2d:ea:4f:71:c9:8f:7d:bc:e4:7c:75:2e:7e:b1:
                    58:34:52:69:ba:ae:34:9f:54:29:bd:a0:c8:2c:f0:
                    64:85:b5:c9:c8:e6:d5:b0:95:23:46:7b:13:b6:d9:
                    1e:ae:b5:08:ef:1b:cb:ba:26:1f:3c:c4:b9:e4:8f:
                    28:27:3b:08:0e:ce:3f:92:7d:ce:19:fa:98:37:ac:
                    17:02:1d:a6:c1:08:bb:e4:c4:8a:1a:79:dc:bf:29:
                    31:ba:db:b2:81:a4:54:13:8a:87:7c:14:9e:f3:35:
                    61:a5:65:be:08:5e:c4:4b:2a:5f:89:5d:ee:87:3b:
                    01:3b:c5:68:25:d4:03:26:08:3b:35:f9:67:53:32:
                    72:76:ce:da:b8:9a:02:25:e5:5b:82:a6:33:b0:22:
                    ba:5f:a5:56:eb:13:bb:2b:bc:19:c4:05:eb:c1:58:
                    e8:c2:c8:da:c2:d5:c6:ea:3f:9f:02:7d:83:1b:b8:
                    9a:47:50:3e:0f:24:cb:02:c7:fa:8f:bd:aa:69:ec:
                    57:55:2b:ad:ef:f3:ba:76:7e:c6:5a:70:75:8b:04:
                    16:6f:2c:ff:ae:13:2c:f8:7e:e2:8a:78:4a:6e:bd:
                    53:40:4d:5a:21:a1:44:3b:3a:60:48:26:fa:c3:53:
                    c3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B9:79:FA:CE:30:91:DE:32:CF:9A:AD:6C:49:90:AE:01:E6:F2:4C
            X509v3 Authority Key Identifier:
                keyid:3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3134302e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:7a:a8:b8:4a:e0:8b:a0:eb:65:18:7d:5c:33:48:e8:f4:c8:
         d8:c0:97:3f:32:ed:ce:4c:81:71:77:a0:01:f2:79:5c:a6:15:
         03:27:71:cf:72:00:b9:90:59:ea:47:3d:04:21:7a:cc:8e:ea:
         6e:a4:73:b8:48:79:d3:34:2e:1a:a9:72:14:7d:05:9c:be:e5:
         7b:fb:9a:6d:7d:24:09:2e:24:1c:69:be:7d:30:d9:0c:43:5b:
         f4:39:95:64:48:19:b7:d3:5e:f6:10:13:ea:1c:15:32:cc:57:
         f6:83:10:9e:fe:0a:74:fb:4f:c1:32:de:c5:b3:5e:0f:05:aa:
         9d:6e:ba:a0:e9:0b:f6:fc:af:ed:44:5d:3f:3f:f7:42:e3:be:
         c5:14:04:ce:9d:cf:be:e8:40:75:9c:4b:88:79:46:55:21:45:
         75:9b:5c:08:ae:43:19:4a:72:bb:ab:7d:37:3c:90:a7:4b:72:
         6d:e9:b8:8e:ec:de:e5:fe:69:76:b7:f5:1d:79:81:ce:9b:d5:
         27:5b:24:b4:52:75:47:a6:ce:6f:b8:71:df:bd:f1:3d:e3:0d:
         e4:24:55:01:6a:38:f9:e0:7c:5c:9f:34:fe:b1:cc:fd:06:a5:
         69:20:25:f3:5d:f9:cd:ea:6c:a0:a8:95:43:c0:e8:dc:fd:59:
         52:67:ac:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:41 2026 by rpki-client