Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138362e3232362e3132382e302f32302d3234203d3e203238323934.roa
File:                     3138362e3232362e3132382e302f32302d3234203d3e203238323934.roa (raw, json)
Hash identifier:          N6EskrIADxP912AMHv/TKrAlLJIMsXR/6MgOUGfvLnU=
Subject key identifier:   38:CE:68:53:6B:C3:65:C7:B1:CD:48:E3:57:9F:B4:E8:FD:B3:91:AF
Certificate issuer:       /CN=77F99B6CA31CA48560A700A53D4385030C475345
Certificate serial:       16D20C0935184443757FAF456C8F263CCEAE7CE3
Authority key identifier: 77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138362e3232362e3132382e302f32302d3234203d3e203238323934.roa
Signing time:             Thu 12 Jun 2025 11:59:38 +0000
ROA not before:           Thu 12 Jun 2025 11:54:38 +0000
ROA not after:            Thu 11 Jun 2026 11:59:38 +0000
asID:                     28294
IP address blocks:        186.226.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl
                          rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 17:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d2:0c:09:35:18:44:43:75:7f:af:45:6c:8f:26:3c:ce:ae:7c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F99B6CA31CA48560A700A53D4385030C475345
        Validity
            Not Before: Jun 12 11:54:38 2025 GMT
            Not After : Jun 11 11:59:38 2026 GMT
        Subject: CN=38CE68536BC365C7B1CD48E3579FB4E8FDB391AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8c:22:92:c6:68:dd:aa:ea:e8:73:73:e3:e6:
                    ef:84:ac:38:a7:b2:70:e5:32:06:4e:b8:d7:5c:30:
                    02:a5:22:00:04:95:4f:88:8f:e6:11:ab:d3:0d:a0:
                    98:a3:e8:45:78:4b:98:6a:72:3e:0e:40:2d:5c:d8:
                    e5:fc:32:7d:1b:3a:af:df:aa:8a:6b:7c:bb:28:ee:
                    49:cb:cb:f1:7b:a3:43:61:12:7b:20:a8:ff:b0:47:
                    94:8a:49:d5:74:4f:41:76:1c:aa:2f:be:bd:96:14:
                    b7:6c:84:9b:1d:3c:57:18:ee:63:37:8f:82:e5:59:
                    de:9a:49:73:60:5e:09:48:78:96:1a:cd:8b:74:e6:
                    f9:a2:3a:e0:00:b4:5e:c1:7f:f8:46:a1:ce:31:15:
                    d9:3c:d8:6b:d0:2a:d7:be:5d:5b:8d:34:56:ce:f5:
                    e1:c6:8b:9e:97:36:36:69:38:76:02:67:a3:fa:e4:
                    8e:12:30:67:b8:66:e3:c6:5d:fa:7f:41:5a:73:5b:
                    df:97:b8:d9:3a:c7:5e:b6:a2:f6:52:5a:93:a6:e9:
                    38:50:e0:af:73:0d:5e:37:90:8d:8b:80:5b:35:a3:
                    01:a7:37:fc:89:7f:ad:43:00:a9:d8:d7:65:6e:0a:
                    b9:68:ae:75:ef:f2:8f:95:27:6b:9d:5a:5f:c2:15:
                    78:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CE:68:53:6B:C3:65:C7:B1:CD:48:E3:57:9F:B4:E8:FD:B3:91:AF
            X509v3 Authority Key Identifier:
                keyid:77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138362e3232362e3132382e302f32302d3234203d3e203238323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:df:7e:bd:a6:c3:e3:f0:08:ec:39:c0:25:1f:2a:ee:ba:42:
         96:65:d6:99:c2:a8:c2:3a:2e:ef:eb:c1:b5:c7:a0:95:7f:26:
         87:ac:f8:b1:e7:2b:93:f9:f1:27:8f:40:2b:e9:b8:b2:a9:07:
         9f:45:d7:84:1b:e3:a0:44:4d:3b:c0:7f:71:9e:08:17:cc:f3:
         cf:a1:d7:a4:e5:dd:96:99:d9:52:8d:ee:66:7e:a5:9e:43:5e:
         94:99:13:6f:7f:6d:ea:c8:bf:46:bc:ee:2b:73:2c:a8:5c:15:
         ae:0a:7c:3d:57:27:9f:05:48:90:23:45:25:5d:41:94:c2:d5:
         d2:34:a3:d3:80:9a:9b:7f:bf:8a:6a:31:ed:a5:79:41:50:cd:
         24:4b:ec:45:80:2e:f1:05:80:a6:d1:3a:c2:a4:53:26:97:52:
         ae:7a:75:49:42:7f:4d:51:7d:f5:10:a0:b2:3e:81:72:43:f4:
         7a:1d:7d:ea:10:9e:3b:ec:95:7d:15:7b:fc:55:cf:22:72:b0:
         99:15:b4:fa:0d:5e:bb:bf:b0:f2:bf:fb:be:6d:ef:fd:95:60:
         0a:5b:dd:e9:8e:68:05:24:01:5e:be:b0:6f:90:27:b5:3a:79:
         5a:19:b3:b0:10:90:5f:8b:e1:01:f7:5d:33:a8:f0:47:e6:b9:
         98:04:b7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:38:35 2025 by rpki-client