Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33362e302f32332d3332203d3e20323632373038.roa
File:                     3138362e3139332e33362e302f32332d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          HVdm0B4ed9b0X8hrYNc4e82xFtZTzdIySI1pv5Iu7Q0=
Subject key identifier:   D2:85:DA:49:4A:9A:B1:3B:66:EC:67:07:2B:2A:33:4B:21:5C:31:3E
Certificate issuer:       /CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
Certificate serial:       09ED260ADCA4969CE83DABCA2C2FDB1DAD99412A
Authority key identifier: 26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33362e302f32332d3332203d3e20323632373038.roa
Signing time:             Sat 26 Apr 2025 11:41:59 +0000
ROA not before:           Sat 26 Apr 2025 11:36:59 +0000
ROA not after:            Sat 25 Apr 2026 11:41:59 +0000
asID:                     262708
IP address blocks:        186.193.36.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 10:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ed:26:0a:dc:a4:96:9c:e8:3d:ab:ca:2c:2f:db:1d:ad:99:41:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
        Validity
            Not Before: Apr 26 11:36:59 2025 GMT
            Not After : Apr 25 11:41:59 2026 GMT
        Subject: CN=D285DA494A9AB13B66EC67072B2A334B215C313E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9d:da:fb:cf:a3:1a:e5:30:39:ad:f7:f0:8b:
                    27:9b:b7:61:4a:0a:d8:e6:4b:ab:b8:e0:60:3b:5b:
                    b4:7f:a5:09:0d:f2:88:e1:73:86:9a:93:8d:ca:d2:
                    3d:0c:3d:0c:a0:0b:04:9a:2e:ab:76:d9:71:e4:62:
                    08:f6:74:a6:f1:1f:19:ee:c1:1d:c9:c7:cb:e4:e2:
                    c8:fe:99:81:c3:58:5c:db:50:70:f4:85:2d:e5:2a:
                    d1:bb:69:bd:b6:3b:f9:2c:ba:35:07:89:d8:81:72:
                    a1:00:eb:4e:1c:cf:2f:1e:ec:94:d2:8e:fd:0d:86:
                    cb:90:9e:66:3c:a7:92:1c:51:25:1c:99:58:2b:df:
                    56:97:2e:40:20:05:08:24:48:29:81:b7:39:2d:3a:
                    44:d5:52:8d:7b:a3:bc:cf:31:bd:a5:b2:f4:dd:1f:
                    7e:06:7b:a5:a8:6f:27:64:48:37:d0:43:5e:3b:41:
                    9a:03:43:f1:d5:c3:e3:03:7d:32:fd:51:b7:aa:9a:
                    e6:17:4d:89:12:03:7f:4a:58:e7:e6:05:3c:0f:f4:
                    8b:83:d4:5d:1c:5c:74:a5:9f:80:6d:7f:b3:d8:f4:
                    7a:37:a8:9e:a5:85:4e:54:42:a5:68:8e:25:20:26:
                    a5:96:ad:df:51:86:c6:79:df:d7:a8:45:2b:f2:e2:
                    c9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:85:DA:49:4A:9A:B1:3B:66:EC:67:07:2B:2A:33:4B:21:5C:31:3E
            X509v3 Authority Key Identifier:
                keyid:26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33362e302f32332d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e1:0c:34:a9:f1:e4:f7:c9:c1:2d:55:f6:c6:fe:76:36:6a:f0:
         49:9b:a9:c7:9d:df:14:0a:99:f3:49:f9:51:e4:e5:84:c2:de:
         e9:34:ca:9d:db:94:f6:17:5b:50:05:1a:9a:24:d0:92:f2:81:
         0f:c5:49:57:63:60:b7:dd:55:81:89:a6:8c:9e:e9:ed:4a:f0:
         2d:74:0e:07:13:8a:07:5d:af:3e:96:c6:c4:58:4a:f0:67:02:
         89:98:60:43:8f:b0:82:72:c4:97:8d:15:63:51:38:d8:43:0e:
         ca:a5:35:be:10:79:98:81:c7:db:ea:a0:e8:59:12:9f:c5:f7:
         ac:05:30:09:fd:b6:08:b1:9b:30:42:60:13:ea:f9:d7:a3:de:
         7c:75:57:49:be:ef:56:de:87:ed:01:29:b7:c7:43:49:42:7b:
         c3:1a:99:9c:69:d3:9c:13:44:3d:af:9b:5c:61:82:41:1b:bb:
         62:d3:be:e5:71:f4:53:cc:9e:11:9f:05:66:98:46:31:f8:ee:
         8f:ba:0e:4e:d2:d7:5b:10:92:6a:a9:01:a9:c0:c9:2f:74:54:
         e9:16:a3:58:2e:2c:96:1d:13:fb:b0:cf:32:92:b7:47:98:27:
         69:71:c4:91:a1:c2:79:64:69:40:56:3f:f9:dd:70:56:2f:a0:
         51:e2:4b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:34:49 2025 by rpki-client