Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3133332e302f32342d3332203d3e203533323235.roa
File:                     3138362e3235312e3133332e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          71XMOmN+Hitn88U284mCkqcLCrLTObomEsshut4wQw4=
Subject key identifier:   62:B2:7C:92:90:4C:31:5D:9D:68:01:52:54:9C:EA:36:5E:E3:59:B0
Certificate issuer:       /CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
Certificate serial:       78DE50066E4704D5231AA763782D13FF46162A78
Authority key identifier: 43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3133332e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 02 Jul 2025 12:06:25 +0000
ROA not before:           Wed 02 Jul 2025 12:01:25 +0000
ROA not after:            Wed 01 Jul 2026 12:06:25 +0000
asID:                     53225
IP address blocks:        186.251.133.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:de:50:06:6e:47:04:d5:23:1a:a7:63:78:2d:13:ff:46:16:2a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
        Validity
            Not Before: Jul  2 12:01:25 2025 GMT
            Not After : Jul  1 12:06:25 2026 GMT
        Subject: CN=62B27C92904C315D9D680152549CEA365EE359B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bc:f2:16:f2:6a:1b:c0:54:1f:5b:95:55:c5:
                    48:3f:af:76:50:11:26:c7:94:38:03:3e:a2:c1:de:
                    e7:24:fd:63:a1:50:a0:c3:a9:2d:fb:f7:18:7e:92:
                    4d:36:c9:2b:a4:4e:e5:6f:70:f1:65:1f:83:d3:c9:
                    4c:ae:23:4a:3d:47:3c:f3:81:fa:f8:85:29:48:3c:
                    d7:bb:22:0e:5a:b8:d5:dd:a5:d5:08:14:4d:94:0b:
                    6e:fb:76:5a:9e:09:70:d7:15:3f:e2:0f:23:c3:bd:
                    ed:04:ed:2e:0f:08:02:7e:5f:23:93:47:d9:ba:60:
                    c7:aa:c5:30:e9:25:fa:4b:04:ec:24:de:0d:eb:51:
                    4d:a6:80:a3:37:66:f8:0b:c2:a6:42:e1:74:12:45:
                    f9:e9:ab:3d:d4:a5:2e:8f:70:b7:fa:91:0d:27:b0:
                    6f:6d:f9:3a:13:93:ca:a6:e8:78:86:a1:1c:d9:5b:
                    02:b8:7f:42:bd:cc:48:a0:b4:53:22:77:d8:17:c3:
                    47:61:b4:70:7e:23:4d:46:2f:0c:eb:66:16:f8:ae:
                    1a:0e:1d:96:77:ef:a4:7c:14:27:45:9b:69:91:aa:
                    8f:12:9f:97:46:1f:32:48:5e:1a:09:97:bc:3f:ee:
                    ff:d9:49:98:7c:4d:e1:d6:5f:54:bc:94:3e:7e:0a:
                    2a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B2:7C:92:90:4C:31:5D:9D:68:01:52:54:9C:EA:36:5E:E3:59:B0
            X509v3 Authority Key Identifier:
                keyid:43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3133332e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:42:10:c4:ec:2a:80:97:0c:9b:03:97:39:3e:6d:9c:aa:fd:
         c2:1d:d2:66:9f:cb:d3:09:98:9f:b1:a0:88:07:3c:58:59:7b:
         3f:0c:72:0d:f5:1b:be:df:54:16:7e:a7:bf:68:6a:01:47:5f:
         03:0b:32:0d:c7:8e:9d:48:59:d5:56:58:87:66:a2:86:b0:66:
         0a:e2:3b:52:01:39:55:f4:8e:46:d0:70:bd:5e:e7:66:a5:53:
         92:8c:2f:ee:9d:68:d7:6a:a9:ae:73:df:77:fa:bb:98:8f:df:
         ee:fd:e3:1a:d4:12:e1:2e:00:71:b6:d8:6c:fa:fd:42:ca:08:
         27:15:91:9e:8c:97:11:17:cb:14:ad:ce:69:50:56:62:ee:79:
         5a:fd:fe:b8:9b:39:3c:41:95:35:38:1d:15:02:ca:b5:43:7a:
         5e:a5:2d:31:b6:4c:06:70:e6:92:77:dd:6a:52:76:45:7c:31:
         5e:b8:e6:2a:fe:ce:47:a8:fa:3f:32:b2:07:52:ed:04:16:f7:
         2e:24:7e:b0:78:32:04:aa:f1:ef:8a:c1:49:ac:e1:51:85:7d:
         25:49:b7:cc:78:19:ec:97:73:44:de:34:35:b8:dd:72:7f:d2:
         80:58:b4:8f:d8:54:6d:b1:44:03:ef:c8:ac:63:cc:c7:46:42:
         ca:55:65:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:21:02 2025 by rpki-client