Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33382e302f32332d3332203d3e20323632373038.roa
File:                     3138362e3139332e33382e302f32332d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          HnnUYNpkK586EfsTYOJT5Mc/BvpmPTKgKMKjmyYMw7Q=
Subject key identifier:   5C:4E:4B:59:7F:FB:21:7D:5A:18:E7:55:A5:DE:F9:32:1A:84:D4:C1
Certificate issuer:       /CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
Certificate serial:       19F380E90115DF2C4DB759A656B2D3DEEE3DCF37
Authority key identifier: 26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33382e302f32332d3332203d3e20323632373038.roa
Signing time:             Sat 26 Apr 2025 11:48:49 +0000
ROA not before:           Sat 26 Apr 2025 11:43:49 +0000
ROA not after:            Sat 25 Apr 2026 11:48:49 +0000
asID:                     262708
IP address blocks:        186.193.38.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 23:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f3:80:e9:01:15:df:2c:4d:b7:59:a6:56:b2:d3:de:ee:3d:cf:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
        Validity
            Not Before: Apr 26 11:43:49 2025 GMT
            Not After : Apr 25 11:48:49 2026 GMT
        Subject: CN=5C4E4B597FFB217D5A18E755A5DEF9321A84D4C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:d4:6a:f0:b8:71:97:c0:1f:22:4e:8d:a6:
                    14:32:87:ee:0e:e7:2d:6d:af:28:b1:a9:d6:d8:72:
                    16:d4:d2:70:ad:4d:ea:81:72:db:e0:ad:f0:e1:41:
                    b3:a4:d6:17:42:e8:e2:f0:1d:78:04:6f:8f:72:f9:
                    7c:cd:1f:6f:d6:36:3a:80:0d:0d:72:e3:22:f2:9b:
                    04:2a:f3:45:85:53:ab:23:3d:80:64:7e:81:2e:35:
                    f5:63:85:e9:f6:90:c3:cc:45:cc:cf:c8:30:2d:33:
                    9d:1d:ea:05:4e:d3:94:f3:d9:c9:bc:de:b7:5d:87:
                    0d:48:f3:a3:ac:96:f3:f1:3c:8a:86:f5:a6:a4:cb:
                    e6:7e:5a:b3:fe:0c:b2:d8:ad:69:d0:d7:b7:2e:da:
                    35:e0:8b:97:70:ce:3c:54:99:f8:56:0d:7c:87:3e:
                    ed:5f:ca:70:2b:13:73:65:ba:2c:57:fa:81:a0:a5:
                    e5:c2:89:ee:fe:87:73:03:13:2b:8a:ce:4a:c3:9f:
                    69:e1:4d:bc:a8:98:ba:fe:49:7c:31:e4:a7:d4:dc:
                    1d:3a:f6:d1:e3:2d:52:8f:5e:2d:6c:47:0b:e2:94:
                    ea:9a:f4:68:79:c2:24:f0:9f:8a:ff:da:f8:3f:fd:
                    92:73:82:18:f4:11:f3:64:1b:c6:07:0d:da:4f:1b:
                    1b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4E:4B:59:7F:FB:21:7D:5A:18:E7:55:A5:DE:F9:32:1A:84:D4:C1
            X509v3 Authority Key Identifier:
                keyid:26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33382e302f32332d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:08:d0:55:e5:c7:4d:0c:83:6e:62:e2:ff:f1:e9:41:63:a1:
         eb:3a:b4:98:69:52:46:75:9e:79:91:28:b9:1b:82:91:6c:18:
         93:14:c6:da:df:d1:80:b0:2d:86:a8:93:c3:af:15:ae:63:8f:
         3e:e9:b3:13:15:34:eb:47:a0:c2:fb:47:5a:a9:cd:1d:a2:dd:
         d0:fb:c5:d0:92:f0:08:5e:1a:40:7b:c6:57:f7:42:51:be:29:
         16:e9:b3:c9:49:7d:bf:0c:43:b4:93:cf:ef:90:76:62:c8:66:
         2d:a3:32:36:68:36:4b:c1:b4:86:81:01:ee:71:46:c2:81:3b:
         9f:19:c8:75:e8:29:34:db:b5:2a:14:ca:8f:70:c2:d0:ee:7a:
         13:f8:cc:2b:0a:47:2a:e4:9e:3d:b7:84:0c:ca:39:ff:13:94:
         a0:a1:f1:42:84:94:ba:14:7c:01:54:5d:3f:4a:8c:fb:63:58:
         dc:9a:24:c3:61:f2:a5:f3:eb:73:1e:9e:11:b4:59:0a:95:88:
         fc:ee:40:26:71:3a:31:ac:5d:13:52:85:43:3f:28:23:a7:5d:
         44:bc:11:0a:5c:3b:8c:e8:8f:77:c9:31:ad:5b:cd:d6:ac:89:
         a7:40:72:3c:dd:01:7e:66:c5:4d:1b:2b:c9:5e:5f:72:d9:9e:
         ef:50:c9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 06:04:26 2025 by rpki-client