Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/3138372e36322e36342e302f32322d3234203d3e20323639373139.roa
File:                     3138372e36322e36342e302f32322d3234203d3e20323639373139.roa (raw, json)
Hash identifier:          hxttyOBwAR3JxAwrCUF0oBvIG6xYzXoGGXyWvlXXwdg=
Subject key identifier:   52:85:73:01:54:A6:C1:3B:FE:B9:74:2D:88:AE:46:92:77:03:9C:3D
Certificate issuer:       /CN=6406916BA6E1429BDEEABD8625CAE0A34B2C6ED4
Certificate serial:       7541CB9AB348E5EB3E634E6977839F789316768A
Authority key identifier: 64:06:91:6B:A6:E1:42:9B:DE:EA:BD:86:25:CA:E0:A3:4B:2C:6E:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6406916BA6E1429BDEEABD8625CAE0A34B2C6ED4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/3138372e36322e36342e302f32322d3234203d3e20323639373139.roa
Signing time:             Thu 28 May 2026 19:46:35 +0000
ROA not before:           Thu 28 May 2026 19:41:35 +0000
ROA not after:            Thu 27 May 2027 19:46:35 +0000
asID:                     269719
IP address blocks:        187.62.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/6406916BA6E1429BDEEABD8625CAE0A34B2C6ED4.crl
                          rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/6406916BA6E1429BDEEABD8625CAE0A34B2C6ED4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6406916BA6E1429BDEEABD8625CAE0A34B2C6ED4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:41:cb:9a:b3:48:e5:eb:3e:63:4e:69:77:83:9f:78:93:16:76:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6406916BA6E1429BDEEABD8625CAE0A34B2C6ED4
        Validity
            Not Before: May 28 19:41:35 2026 GMT
            Not After : May 27 19:46:35 2027 GMT
        Subject: CN=5285730154A6C13BFEB9742D88AE469277039C3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3d:26:cc:b8:bb:1e:e6:30:91:24:f5:f0:c3:
                    e7:27:7b:8c:44:6c:02:93:de:b6:35:9e:72:39:ac:
                    ea:87:40:d0:1f:fe:08:29:71:ef:32:8a:df:2b:ca:
                    f1:3c:4c:91:42:8e:49:2c:73:38:a6:3b:2f:e2:79:
                    f6:cd:ac:f6:61:3d:6e:c0:8f:8c:9a:6e:57:ad:9f:
                    2a:20:b9:28:c0:7e:ad:c4:71:5f:3d:68:c4:f3:60:
                    5a:95:6d:86:96:91:e0:d4:7e:16:51:68:c7:62:9d:
                    49:6c:62:5f:b3:e8:3c:6a:71:84:2c:93:49:ad:db:
                    97:f1:ac:73:4f:e5:dd:2e:be:24:8f:7f:1f:d3:73:
                    e0:90:ff:86:c0:a2:05:e0:8e:0b:3d:34:b0:e8:f6:
                    cf:20:b7:87:09:3f:37:2a:18:6d:46:0c:ae:e6:4b:
                    9d:fe:b4:8d:6b:7a:35:93:18:df:7e:ed:14:ee:3a:
                    d8:45:45:41:53:8c:6a:ed:c7:ae:b5:f4:f7:84:8e:
                    99:5b:1f:a2:0c:0b:04:5a:06:3e:91:3a:dd:58:73:
                    1b:82:c6:e5:fc:bd:cd:1c:65:70:1c:2c:ba:20:eb:
                    95:fd:91:8d:2b:59:1f:3d:54:3a:85:b1:8e:e0:c8:
                    b7:0a:48:5c:aa:b3:ef:c1:c7:90:1f:69:18:8f:a4:
                    4f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:85:73:01:54:A6:C1:3B:FE:B9:74:2D:88:AE:46:92:77:03:9C:3D
            X509v3 Authority Key Identifier:
                keyid:64:06:91:6B:A6:E1:42:9B:DE:EA:BD:86:25:CA:E0:A3:4B:2C:6E:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/6406916BA6E1429BDEEABD8625CAE0A34B2C6ED4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6406916BA6E1429BDEEABD8625CAE0A34B2C6ED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/3138372e36322e36342e302f32322d3234203d3e20323639373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:2f:7c:6f:70:74:af:47:b3:25:97:39:4f:6d:c5:e4:e4:5e:
         76:f5:c1:9d:51:8d:59:14:5b:87:c2:3d:5b:00:17:2c:41:44:
         84:e3:b7:ce:31:34:f9:ee:ec:6c:9b:6d:5a:14:41:6d:d8:f1:
         3e:9d:87:04:ea:e4:62:d7:e2:fb:6d:58:9a:f8:55:01:53:5d:
         38:8b:47:2f:6d:b6:4d:29:4f:74:b7:0a:ae:86:a0:d6:2b:75:
         37:30:5f:50:2b:c2:26:b5:c4:04:0c:12:69:3d:3f:d1:7a:0a:
         78:fc:25:ac:71:19:88:f1:98:e1:64:c5:34:ac:3b:df:25:ec:
         2c:60:ca:ea:48:6f:87:fe:10:45:bf:ed:0c:b3:86:4f:31:71:
         fc:39:a8:e2:16:89:64:e6:37:7f:07:fe:9a:61:16:65:40:55:
         94:57:03:09:44:4a:9f:bf:5c:f7:f3:8c:38:a3:f8:1b:f0:73:
         ad:af:e1:cc:35:f3:5e:dc:0b:3d:39:cd:90:e8:df:73:26:8e:
         ca:6e:1e:c4:80:a2:44:6c:db:2e:fb:db:1b:de:ac:bd:91:c2:
         7d:24:8e:74:b2:f8:34:72:fd:75:c1:3a:6b:b6:93:53:19:c4:
         8b:10:93:5f:2b:a0:5d:2e:6f:47:c5:5f:91:5e:8b:14:e6:f6:
         b7:24:61:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:53:09 2026 by rpki-client