Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3232362e302e302f32302d3332203d3e20323632373733.roa
File:                     3138362e3232362e302e302f32302d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          ViJRNTrckO3zNZ8yCbTNrijnDaaxgKxdH8M3RB2KQTs=
Subject key identifier:   16:6F:98:F6:9D:2C:42:FB:3F:21:A6:A0:EF:4A:EF:F8:DD:AB:45:79
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       1629735C17DDA7126A04C844014F92C8691700A6
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3232362e302e302f32302d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 15:47:00 +0000
ROA not before:           Mon 11 Aug 2025 15:42:00 +0000
ROA not after:            Mon 10 Aug 2026 15:47:00 +0000
asID:                     262773
IP address blocks:        186.226.0.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:29:73:5c:17:dd:a7:12:6a:04:c8:44:01:4f:92:c8:69:17:00:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 15:42:00 2025 GMT
            Not After : Aug 10 15:47:00 2026 GMT
        Subject: CN=166F98F69D2C42FB3F21A6A0EF4AEFF8DDAB4579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:16:99:c6:79:3c:9a:dd:c0:bc:49:3c:9f:
                    e4:4c:72:d2:bf:d5:d0:fb:57:77:4e:aa:26:22:e6:
                    b8:a7:fe:4e:11:37:8d:97:11:6c:a8:7a:9c:3c:c5:
                    a2:38:78:87:c7:77:89:c5:e7:5d:a7:22:40:a2:eb:
                    af:5c:b0:e4:04:ea:79:4e:fa:3d:4c:43:05:5f:b1:
                    9a:37:39:69:30:f3:3c:d1:cd:a1:ca:b9:bb:bb:26:
                    78:c1:01:e8:11:0c:c5:f9:47:e6:75:aa:b1:7b:4e:
                    71:cc:13:56:84:97:ba:5c:a1:b3:f2:4a:73:cb:99:
                    6c:60:25:68:b6:b3:16:26:41:91:5e:7d:af:95:d4:
                    55:4c:16:a6:97:ba:4c:60:eb:b6:c3:49:75:8f:85:
                    07:ac:44:d9:1a:a9:3a:61:fc:74:26:5f:a5:4f:bb:
                    5c:2b:8f:0a:f1:63:6e:b2:dd:81:17:f0:a6:48:f2:
                    fc:9e:38:54:b6:19:50:16:6e:d8:32:5a:13:5a:73:
                    c3:18:67:cb:d7:6d:98:22:36:b5:f0:0a:70:a4:50:
                    3e:69:b9:03:5c:3a:ef:b0:02:44:86:ae:47:ce:ff:
                    7d:58:df:16:4a:09:c6:47:ed:61:ca:74:e8:01:f4:
                    d2:49:d2:e3:1d:83:5d:07:df:0c:09:cd:b9:38:4d:
                    7c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6F:98:F6:9D:2C:42:FB:3F:21:A6:A0:EF:4A:EF:F8:DD:AB:45:79
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3232362e302e302f32302d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:ba:74:93:51:00:81:f6:55:54:23:b7:87:5c:74:da:de:cb:
         00:1d:89:7a:a8:b3:54:03:73:3c:30:7a:ba:50:4d:c5:a0:fa:
         37:bd:12:d1:3d:c9:29:e8:3d:4c:c9:f5:83:5c:f4:c4:3e:6d:
         18:04:52:08:15:49:4e:9c:53:56:8a:fe:fc:2c:9d:63:b3:2e:
         d7:e3:7f:db:4a:15:d7:ab:61:5f:bf:28:1d:d8:4f:30:c6:2e:
         cb:28:a1:75:93:30:b2:5b:ce:21:97:49:59:ee:21:67:12:c1:
         38:f6:fd:00:63:3b:75:14:c6:cc:45:e1:b1:e3:58:b4:cc:da:
         5c:4d:fd:64:29:a3:dd:24:57:00:fd:b5:c4:ff:b5:cb:9b:c9:
         9e:6d:e6:ae:9b:d3:1c:fa:c8:4d:c3:5b:27:57:6b:c7:6e:93:
         a3:77:11:a7:c4:6d:4b:a1:50:1b:25:6e:e6:43:81:17:0d:9b:
         7e:1b:60:5d:48:90:a0:b0:38:48:b2:7b:00:2d:01:41:20:45:
         4e:9a:f7:08:a1:b4:65:3b:1a:c3:95:1c:db:18:2e:b7:a7:50:
         5e:75:bb:3b:b9:1f:03:17:76:87:61:6f:36:ca:e3:41:ab:ca:
         c4:93:d2:b3:3f:c0:b7:60:c2:34:b4:60:38:a3:47:68:10:c7:
         c2:86:79:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:09 2025 by rpki-client