Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3135362e302f32322d3234203d3e20323632343539.roa
File:                     3138362e3230382e3135362e302f32322d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          7E+p+wAy4a/K4f1N8C5T3GjiBEQIPL4ap6zttq0S98Q=
Subject key identifier:   C8:BF:E0:C4:37:F6:1D:03:AB:A2:48:3F:C6:DE:CF:EE:8C:E5:74:A1
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       45372EAC8AEFAE7212502E1275FBA4D2755B6907
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3135362e302f32322d3234203d3e20323632343539.roa
Signing time:             Fri 16 May 2025 21:00:24 +0000
ROA not before:           Fri 16 May 2025 20:55:24 +0000
ROA not after:            Fri 15 May 2026 21:00:24 +0000
asID:                     262459
IP address blocks:        186.208.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 22:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:37:2e:ac:8a:ef:ae:72:12:50:2e:12:75:fb:a4:d2:75:5b:69:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: May 16 20:55:24 2025 GMT
            Not After : May 15 21:00:24 2026 GMT
        Subject: CN=C8BFE0C437F61D03ABA2483FC6DECFEE8CE574A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:da:d1:14:ef:7d:ff:be:43:78:3e:a3:69:
                    53:74:2b:ea:b4:a5:c1:e6:3f:1a:bd:ff:79:db:65:
                    b4:12:ca:83:78:2d:f9:df:c7:dc:0d:45:42:78:25:
                    7b:54:8c:cd:74:d4:5a:8a:ee:d2:be:58:75:2a:4f:
                    6b:1e:4e:fc:fb:e7:25:ba:05:9a:fb:6a:15:9e:6b:
                    82:5d:95:5c:2d:28:ef:0b:ef:7b:e6:61:e2:ca:b2:
                    3c:8b:b2:f1:6e:fc:10:e8:d7:04:b6:4e:2c:ad:94:
                    0b:a2:45:24:e8:55:ba:28:e8:55:49:5b:18:ec:af:
                    78:4d:bc:04:2e:9e:db:5e:0c:06:2e:3a:d0:91:95:
                    6e:1f:f0:b7:b6:66:d5:c7:fb:46:79:a3:2e:89:30:
                    bd:79:4a:cb:20:b7:f7:ce:9a:44:ed:70:91:d4:71:
                    7d:2f:be:6b:73:47:e0:c4:77:f0:23:ec:99:45:26:
                    9b:42:91:23:3f:ff:91:90:e0:ea:b6:86:53:60:ab:
                    7e:1d:c6:48:a5:da:3c:d1:ab:a3:62:79:62:fa:53:
                    17:92:c8:be:34:18:5e:87:51:c1:72:14:2f:df:cd:
                    26:19:ce:89:9b:3b:e7:95:89:bf:ea:69:1a:30:c8:
                    2d:0f:22:f1:3e:94:47:35:32:d3:c5:99:f0:17:6a:
                    e7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BF:E0:C4:37:F6:1D:03:AB:A2:48:3F:C6:DE:CF:EE:8C:E5:74:A1
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3135362e302f32322d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:98:b0:f6:29:9e:29:db:fd:f2:1c:8e:a8:7f:16:1a:5a:a1:
         32:0c:ca:ae:b3:f5:c3:d4:97:f6:5c:38:53:3a:8d:07:8e:14:
         48:99:c7:bc:58:4d:6d:92:3f:55:42:17:25:3e:5c:4d:48:83:
         8c:81:cc:3b:a0:d6:7f:47:50:e5:80:24:7f:85:c5:0d:fc:2d:
         43:ec:10:07:1c:7d:8d:41:b2:a4:f7:ae:d4:23:b4:a6:af:a2:
         f6:55:a9:d5:f0:98:eb:2f:39:95:e0:e9:d1:34:ac:c7:b3:d4:
         0f:05:a6:40:67:9c:52:95:f0:2a:6c:eb:97:20:3f:6f:8d:56:
         ca:2d:8d:d1:bb:19:8e:57:f5:25:66:61:73:92:24:9c:a1:2b:
         2b:c1:43:41:3c:b8:d7:c4:f9:94:ea:b8:7a:89:63:aa:39:e6:
         5f:3a:22:fb:a5:ba:6f:d0:7b:6a:41:03:45:f0:92:1b:30:4a:
         a2:c9:50:ca:89:29:1d:31:72:b8:b1:65:19:a7:23:d2:d3:aa:
         a2:7a:6b:0f:98:f7:ea:5e:df:96:5d:0c:19:28:fc:a4:ba:35:
         84:82:cd:2e:2d:d6:01:48:59:0c:5f:e2:67:cb:50:1b:8f:0e:
         eb:2f:70:c0:3e:0a:dc:27:8a:66:fb:74:37:16:35:b3:fc:b3:
         44:1c:f1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 09:53:04 2025 by rpki-client