Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/3138362e3231362e3139322e302f32302d3332203d3e203532393733.roa
File:                     3138362e3231362e3139322e302f32302d3332203d3e203532393733.roa (raw, json)
Hash identifier:          gTL3UmjgvimxKbrJMy6AMDQtMmuWqTLYXEUuC4wqSmo=
Subject key identifier:   FD:15:A8:34:E5:8F:AD:24:94:F1:CA:96:16:CA:DF:F4:78:BF:02:90
Certificate issuer:       /CN=960B59E054F187A995D7F6038A0BA2336525F190
Certificate serial:       2FDE7DECE6A185CC0C8970AF3A43FCEDFC922FA3
Authority key identifier: 96:0B:59:E0:54:F1:87:A9:95:D7:F6:03:8A:0B:A2:33:65:25:F1:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960B59E054F187A995D7F6038A0BA2336525F190.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/3138362e3231362e3139322e302f32302d3332203d3e203532393733.roa
Signing time:             Wed 05 Nov 2025 03:00:22 +0000
ROA not before:           Wed 05 Nov 2025 02:55:22 +0000
ROA not after:            Wed 04 Nov 2026 03:00:22 +0000
asID:                     52973
IP address blocks:        186.216.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/960B59E054F187A995D7F6038A0BA2336525F190.crl
                          rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/960B59E054F187A995D7F6038A0BA2336525F190.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960B59E054F187A995D7F6038A0BA2336525F190.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 05:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:de:7d:ec:e6:a1:85:cc:0c:89:70:af:3a:43:fc:ed:fc:92:2f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960B59E054F187A995D7F6038A0BA2336525F190
        Validity
            Not Before: Nov  5 02:55:22 2025 GMT
            Not After : Nov  4 03:00:22 2026 GMT
        Subject: CN=FD15A834E58FAD2494F1CA9616CADFF478BF0290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:4c:68:2c:49:1b:bd:a2:a7:50:e8:90:55:
                    2d:29:19:77:2d:ba:e6:62:d2:82:86:5d:4e:55:bf:
                    33:09:b0:37:ce:f7:85:1e:b4:75:8b:1c:b8:94:03:
                    e6:55:bc:b2:23:be:d6:9f:ce:66:c0:d7:3e:53:10:
                    5c:27:ed:fb:8c:7f:0d:da:8a:c7:12:b5:2c:13:42:
                    39:93:22:eb:e1:01:4b:dc:72:65:66:21:e2:42:09:
                    ed:fe:2a:52:fb:4e:5b:67:d3:6b:8c:24:34:13:8d:
                    57:cf:2e:25:78:8f:28:2d:43:e9:4e:a4:8d:5d:a6:
                    92:dc:87:3a:de:d2:df:59:b8:44:20:33:a3:2e:07:
                    40:14:e7:3e:f4:1d:1a:6a:df:8d:6c:19:d2:50:ae:
                    ca:ec:51:8b:f8:38:01:aa:e3:fb:9c:02:d9:6c:f6:
                    83:e5:70:bf:b5:cc:79:0a:fe:fe:00:81:b2:9c:2a:
                    3c:ab:ec:71:63:a7:1c:d7:73:25:66:75:f7:9f:60:
                    0c:38:d4:69:cb:48:47:f6:c6:d9:f8:c1:52:a8:ff:
                    9e:d7:50:bf:45:fb:8d:88:ba:69:3b:49:1c:9d:0a:
                    42:cf:e7:7f:a3:17:b6:4e:8a:d7:8e:fd:25:54:7d:
                    eb:99:6d:74:bc:59:fb:3c:05:88:a7:24:c9:71:ef:
                    8a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:15:A8:34:E5:8F:AD:24:94:F1:CA:96:16:CA:DF:F4:78:BF:02:90
            X509v3 Authority Key Identifier:
                keyid:96:0B:59:E0:54:F1:87:A9:95:D7:F6:03:8A:0B:A2:33:65:25:F1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/960B59E054F187A995D7F6038A0BA2336525F190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960B59E054F187A995D7F6038A0BA2336525F190.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/3138362e3231362e3139322e302f32302d3332203d3e203532393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:b8:33:7c:62:c1:ed:25:a7:dc:3c:e8:16:d3:85:1c:24:26:
         eb:d9:8b:30:82:a5:3f:18:98:86:fc:14:32:29:c7:59:8f:38:
         a0:b1:d1:fb:fd:25:d7:aa:42:ba:ea:99:db:ff:48:c6:81:16:
         54:f6:5b:48:d1:27:22:19:e3:37:94:cb:d2:50:9c:7b:47:ce:
         b8:1b:1d:3a:82:95:ea:cb:a0:ce:a6:86:cc:1f:73:6c:14:6e:
         3d:bb:35:69:43:e4:ff:dc:fe:de:88:5c:7f:e1:2c:35:af:3f:
         6d:db:9c:ed:ff:f5:50:46:af:87:f6:0c:07:af:8f:5c:5b:ee:
         2d:de:1a:fc:5f:94:90:9b:b7:27:6b:9f:2a:26:02:3c:06:21:
         1d:da:44:ae:57:61:51:f7:dd:c0:0c:b3:0a:22:55:c3:6c:10:
         5d:09:cf:41:3c:bb:4a:35:67:26:8c:90:e5:e1:7e:19:8b:c9:
         92:ef:aa:1f:ee:2b:e3:18:4c:33:71:90:ab:32:0f:e4:ed:0b:
         9a:f3:f1:8c:69:a4:9c:00:ae:95:33:1c:70:f1:1d:b8:66:44:
         49:d1:07:96:c1:71:37:1f:8f:b1:4a:83:9a:19:d9:45:6e:25:
         23:5d:87:55:18:60:72:0b:ae:1f:b3:3d:6e:d3:c1:ee:af:34:
         bc:ef:bd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:45:52 2025 by rpki-client