Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32322d3234203d3e20323633383636.roa
File:                     3133382e3138362e3131322e302f32322d3234203d3e20323633383636.roa (raw, json)
Hash identifier:          PQfr0TgTiBeE+dZU+ktmqLZKx8zZ/0d9UDDXZYVz2Zc=
Subject key identifier:   0E:C5:9D:E5:EA:96:3C:81:CC:DC:F7:67:CC:6E:E7:87:E0:97:9C:8B
Certificate issuer:       /CN=EF854F36A2B85F7CA74543A1F5518487D375E292
Certificate serial:       406AF8D3CCD84DA6CDA0CA0E7706C17D615C7602
Authority key identifier: EF:85:4F:36:A2:B8:5F:7C:A7:45:43:A1:F5:51:84:87:D3:75:E2:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF854F36A2B85F7CA74543A1F5518487D375E292.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32322d3234203d3e20323633383636.roa
Signing time:             Wed 08 Oct 2025 13:39:53 +0000
ROA not before:           Wed 08 Oct 2025 13:34:53 +0000
ROA not after:            Wed 07 Oct 2026 13:39:53 +0000
asID:                     263866
IP address blocks:        138.186.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/EF854F36A2B85F7CA74543A1F5518487D375E292.crl
                          rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/EF854F36A2B85F7CA74543A1F5518487D375E292.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF854F36A2B85F7CA74543A1F5518487D375E292.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:57:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6a:f8:d3:cc:d8:4d:a6:cd:a0:ca:0e:77:06:c1:7d:61:5c:76:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF854F36A2B85F7CA74543A1F5518487D375E292
        Validity
            Not Before: Oct  8 13:34:53 2025 GMT
            Not After : Oct  7 13:39:53 2026 GMT
        Subject: CN=0EC59DE5EA963C81CCDCF767CC6EE787E0979C8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:f4:81:de:3d:db:e8:5f:c4:a6:0e:f3:b6:
                    d5:8c:be:93:8c:50:fa:f5:5d:e8:18:11:43:26:e7:
                    4b:39:74:7a:3f:53:15:cd:1d:55:63:57:15:98:67:
                    a6:76:7f:d4:3d:ca:13:0d:69:c2:71:78:a0:88:74:
                    ea:ea:c1:3b:12:10:91:78:12:12:ce:dd:43:49:ef:
                    d3:ff:00:c0:0c:40:39:88:6a:3b:13:71:30:8f:30:
                    1c:a2:96:69:6a:78:fb:44:cb:2a:ca:b8:fa:c9:2f:
                    14:f8:50:41:47:a3:65:e7:32:0e:81:ac:26:ac:ad:
                    45:08:08:83:19:ea:70:94:ae:4e:50:a4:68:f1:af:
                    f0:e4:2f:e1:77:38:e5:65:e6:86:eb:3a:01:2f:4f:
                    b0:9e:38:ee:6b:b9:0e:96:44:d9:97:f4:a9:9e:76:
                    72:7c:bd:8d:05:d7:02:ce:90:86:0d:6b:cc:b3:11:
                    57:51:43:83:ae:56:72:38:f0:f8:0b:18:ce:34:08:
                    97:72:83:c4:48:cd:c3:4e:73:8e:ff:25:be:f9:be:
                    fe:6b:2c:3b:6f:b2:c3:8b:96:da:79:18:a1:30:4f:
                    16:40:89:a2:d1:5b:88:91:e9:73:17:e1:b2:bb:a0:
                    d7:02:cc:c5:0f:48:0b:f3:f8:08:cb:69:e0:71:73:
                    8b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C5:9D:E5:EA:96:3C:81:CC:DC:F7:67:CC:6E:E7:87:E0:97:9C:8B
            X509v3 Authority Key Identifier:
                keyid:EF:85:4F:36:A2:B8:5F:7C:A7:45:43:A1:F5:51:84:87:D3:75:E2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/EF854F36A2B85F7CA74543A1F5518487D375E292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF854F36A2B85F7CA74543A1F5518487D375E292.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32322d3234203d3e20323633383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:77:14:9e:33:3e:42:c1:d3:3c:d6:f0:8b:72:5f:20:8d:66:
         67:87:72:01:b1:99:a2:9a:15:1b:1e:5e:69:c6:06:34:85:02:
         a2:fb:88:47:93:30:74:d0:98:d1:44:98:74:0e:ab:87:ba:cb:
         b3:ac:cc:39:36:ec:95:90:f8:50:49:45:b2:8f:3d:c2:e9:f9:
         41:66:fe:d4:72:02:d2:b6:a0:27:e1:c2:d3:d8:93:f2:b9:bf:
         4e:cc:ed:d1:e7:34:83:cc:8e:a9:55:dc:e7:ed:76:a1:c9:cc:
         53:28:fb:c8:cc:5a:b6:04:9d:5a:49:25:3e:08:0f:84:ca:0b:
         c6:b7:b0:12:7a:44:7a:6d:3f:f5:43:e7:21:02:5c:29:e7:12:
         6b:9d:74:6f:19:7d:28:b5:fa:39:26:d0:0a:ad:28:1b:14:9c:
         fa:9a:87:0d:f1:88:bf:b9:73:0e:31:e3:6b:ae:cb:18:fc:ea:
         07:83:88:b5:81:6f:8c:09:86:00:73:c5:3a:bd:93:28:42:99:
         cd:af:a6:95:58:c3:21:20:91:1f:96:32:4b:1b:12:85:e3:39:
         b2:64:33:c5:c9:eb:ff:47:a1:45:d1:15:4d:05:61:af:87:72:
         0d:eb:31:a1:e1:3f:5d:36:3a:3f:6b:9a:9d:f7:51:e0:b3:54:
         76:16:60:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:38:06 2025 by rpki-client