Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3135322e302f32312d3231203d3e20323632343539.roa
File:                     3138362e3230382e3135322e302f32312d3231203d3e20323632343539.roa (raw, json)
Hash identifier:          y3sRPTD6Y4d0HL/Z5xaAsvnlY7pFHBTYtmhR1USzIfc=
Subject key identifier:   54:97:2F:5E:FD:C3:CF:0D:52:C9:FE:E9:CE:B7:95:87:09:CB:31:C5
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       092C280D70B3EE7DC60C6E74B10007AFFE802FFB
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3135322e302f32312d3231203d3e20323632343539.roa
Signing time:             Fri 16 May 2025 21:00:25 +0000
ROA not before:           Fri 16 May 2025 20:55:25 +0000
ROA not after:            Fri 15 May 2026 21:00:25 +0000
asID:                     262459
IP address blocks:        186.208.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 22:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2c:28:0d:70:b3:ee:7d:c6:0c:6e:74:b1:00:07:af:fe:80:2f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: May 16 20:55:25 2025 GMT
            Not After : May 15 21:00:25 2026 GMT
        Subject: CN=54972F5EFDC3CF0D52C9FEE9CEB7958709CB31C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:30:cf:af:83:50:f5:d3:0b:b3:34:53:74:ef:
                    ee:e3:56:4c:d5:c8:7f:11:3c:5e:9f:cf:b9:4a:ed:
                    2a:d5:59:cd:df:00:98:ea:c5:23:ee:1f:1a:a6:b6:
                    e4:56:c6:80:bf:71:af:28:68:10:c1:5a:a7:17:a6:
                    0e:85:13:44:b4:b1:65:4d:d1:40:48:c8:a0:54:19:
                    c0:c5:f8:85:c6:fc:25:f6:a5:5a:d8:4a:e6:23:23:
                    78:3d:68:d1:6e:fc:d6:41:fb:12:28:e9:13:70:37:
                    70:af:90:96:77:60:a0:15:e0:27:d8:ca:09:41:bf:
                    62:da:1d:5c:b8:e5:51:65:5a:6d:68:4a:42:87:f7:
                    66:a2:83:ed:eb:fd:ad:27:59:54:97:b9:60:00:54:
                    82:a7:2a:2e:d0:e5:02:ec:e0:69:a6:8d:a9:2d:0e:
                    ac:e0:08:23:2b:95:1c:56:e4:14:ec:25:78:94:0b:
                    eb:10:a7:97:fe:c5:d5:9f:8a:21:c2:13:40:8b:fd:
                    a1:95:9b:f7:8b:54:78:cd:81:79:f2:65:ac:41:d2:
                    28:0f:8e:a1:6d:74:0e:17:55:bb:c8:0f:ff:de:1a:
                    bc:f4:87:90:08:92:53:2d:3a:67:7e:16:c1:bb:e4:
                    a5:7a:87:3d:ca:96:34:2f:5a:d8:4b:aa:34:88:f2:
                    52:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:97:2F:5E:FD:C3:CF:0D:52:C9:FE:E9:CE:B7:95:87:09:CB:31:C5
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3135322e302f32312d3231203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:fd:a1:25:b1:13:06:2c:7f:97:a2:eb:38:37:38:02:10:d8:
         9a:54:5f:e9:30:2c:6c:0a:bf:64:b1:30:06:46:7e:23:2b:c3:
         d4:43:48:2d:eb:89:cd:1f:c6:68:b8:e8:34:d6:b5:04:2e:f0:
         a2:f4:08:70:44:f7:d1:1e:7c:d4:83:96:39:92:7a:4c:e8:19:
         64:0e:1b:b8:84:e8:0a:50:74:ae:2e:0e:59:f2:bc:f9:62:3d:
         b5:80:07:fa:14:48:68:89:89:e4:52:b8:e7:4c:a3:02:0b:83:
         20:27:8c:61:ce:b7:32:85:0b:2b:23:ef:ca:11:92:b2:c1:a8:
         4e:27:74:f5:3d:db:14:71:f2:ac:a8:f0:dd:94:dc:fb:7a:c9:
         58:45:00:2e:67:fd:de:57:0a:ac:5a:b2:23:02:cd:41:87:86:
         da:a0:fa:f4:13:70:92:c8:92:61:71:44:c1:bb:de:88:0d:df:
         db:14:3d:84:46:19:8d:1c:da:cd:d5:7b:0d:d6:55:91:4a:56:
         1c:09:8f:bd:79:92:c8:19:9b:40:11:f7:0b:ac:fa:63:66:1c:
         2b:cc:80:c8:d1:74:67:d1:99:0c:60:3a:f1:45:a3:f9:1f:7c:
         7b:9c:83:78:ae:65:4b:54:d8:25:7b:2d:36:d9:7e:65:7e:fa:
         12:99:bc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 09:51:38 2025 by rpki-client