Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32332e302f32342d3234203d3e20323633303232.roa
File:                     3138362e3234392e32332e302f32342d3234203d3e20323633303232.roa (raw, json)
Hash identifier:          ZHcSsPHwL5ZX7qruQ3rXf/tt9lu5yYVniAqvmX8xZM0=
Subject key identifier:   BC:94:71:0A:9B:7A:CE:96:93:79:49:F1:78:0A:92:7C:1F:74:0B:AC
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       0C60B0D51F9FB3F188930DD16148061FEC41A45C
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32332e302f32342d3234203d3e20323633303232.roa
Signing time:             Mon 14 Jul 2025 14:27:51 +0000
ROA not before:           Mon 14 Jul 2025 14:22:51 +0000
ROA not after:            Mon 13 Jul 2026 14:27:51 +0000
asID:                     263022
IP address blocks:        186.249.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 00:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:60:b0:d5:1f:9f:b3:f1:88:93:0d:d1:61:48:06:1f:ec:41:a4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: Jul 14 14:22:51 2025 GMT
            Not After : Jul 13 14:27:51 2026 GMT
        Subject: CN=BC94710A9B7ACE96937949F1780A927C1F740BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:90:4f:d7:9f:a3:00:0d:21:5e:5b:49:b1:
                    a9:9e:90:ec:be:e5:dd:9a:88:97:41:c5:c3:7b:44:
                    42:4f:9a:7f:51:08:0b:86:41:de:10:87:29:30:63:
                    b2:77:3c:48:d9:b4:86:56:81:6d:e0:ac:e1:95:ea:
                    05:6b:0b:de:db:eb:35:af:d0:97:b1:73:be:d2:d8:
                    f6:1a:56:5b:05:13:95:dd:33:ee:1c:42:ab:b7:20:
                    f0:85:78:e1:de:4b:78:72:8f:3e:4f:13:7b:94:63:
                    52:d9:e9:59:c9:3a:23:e2:f3:1e:14:62:f0:a8:ea:
                    e3:4c:52:cc:1b:28:83:ef:69:35:b5:a8:0d:e7:4f:
                    64:25:e8:6e:9f:d9:ed:c3:d6:dc:40:b8:31:87:3c:
                    b2:a2:33:7b:23:52:5c:0d:c8:bc:bf:9a:cb:e2:ff:
                    0b:6b:35:31:9d:7f:8f:5b:72:06:db:f4:0a:f9:a1:
                    22:68:81:28:a1:98:00:9f:8c:70:a9:6c:eb:ed:44:
                    cd:04:e5:cc:00:3d:7d:b3:4f:d2:3a:94:51:b8:b3:
                    0c:6f:4a:39:a0:c3:45:73:f1:9a:19:37:a9:33:3f:
                    40:28:b6:af:05:61:d8:64:de:0e:ff:0a:97:76:f7:
                    bc:37:10:b0:d9:49:8a:fc:d7:21:ac:7e:07:ac:dd:
                    90:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:94:71:0A:9B:7A:CE:96:93:79:49:F1:78:0A:92:7C:1F:74:0B:AC
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32332e302f32342d3234203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:62:a7:8a:94:76:c7:80:b9:47:12:8d:31:22:b4:a1:64:ed:
         07:4b:09:86:c3:d7:64:43:d3:84:d7:25:a5:78:50:57:f2:ea:
         9a:c0:30:2a:5b:86:fe:38:b8:00:97:38:95:4f:88:73:ea:8c:
         31:38:d8:83:2a:a6:91:89:e5:02:61:28:31:a3:93:83:c0:6c:
         f5:fd:a1:fc:bf:a2:1b:bb:7b:15:77:fe:1e:a4:bd:64:47:12:
         88:7a:42:a6:a0:df:81:67:d3:3f:7b:a8:8c:5a:50:27:dd:ad:
         87:32:f5:50:50:79:b8:d8:9a:3f:85:7c:1d:86:71:03:fa:22:
         35:98:d4:7b:94:4d:bd:51:04:ec:43:62:dd:37:cb:87:b6:ab:
         32:00:5b:ce:2f:88:d7:97:09:7b:cf:92:37:69:9c:ad:99:88:
         04:70:92:5c:40:44:4f:ff:dd:51:ca:55:54:13:9c:ef:0f:02:
         e6:71:cc:7e:5b:8f:a8:75:db:74:43:6c:0c:c8:36:9e:12:fc:
         04:8b:41:10:cb:f5:3e:4e:b9:9b:41:49:fc:65:89:93:4a:e3:
         41:34:1f:e5:38:68:5b:ad:e1:1a:06:66:54:92:f7:89:12:b9:
         20:f3:ff:88:d1:76:18:90:81:be:85:41:ff:22:73:71:8b:e9:
         c4:37:5e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:02:59 2025 by rpki-client