Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131342e302f32342d3234203d3e20323632383132.roa
File:                     3138362e3235302e3131342e302f32342d3234203d3e20323632383132.roa (raw, json)
Hash identifier:          7qj55JksgJfeW+Ctc2dthvSU71wWvVncg6w4LE5ymZc=
Subject key identifier:   D2:AD:21:42:0D:14:83:85:FA:10:47:9D:D3:3C:11:43:88:C3:F8:A3
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       5BE8270223C0B56D50C8700C83F7BC77D875B32D
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131342e302f32342d3234203d3e20323632383132.roa
Signing time:             Mon 14 Jul 2025 15:31:14 +0000
ROA not before:           Mon 14 Jul 2025 15:26:14 +0000
ROA not after:            Mon 13 Jul 2026 15:31:14 +0000
asID:                     262812
IP address blocks:        186.250.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
                          rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 10:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e8:27:02:23:c0:b5:6d:50:c8:70:0c:83:f7:bc:77:d8:75:b3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Jul 14 15:26:14 2025 GMT
            Not After : Jul 13 15:31:14 2026 GMT
        Subject: CN=D2AD21420D148385FA10479DD33C114388C3F8A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:d0:dd:4e:02:92:7b:a4:f2:3e:f2:ae:50:
                    f3:10:4f:c5:79:f3:42:66:a7:02:50:6c:80:63:fe:
                    27:7b:35:aa:ad:8b:8b:96:3e:6e:a7:7b:eb:57:91:
                    93:da:80:a2:3a:0d:6a:8d:42:ba:2a:bf:a3:f1:89:
                    32:ea:5b:33:91:67:6b:ce:af:4a:43:df:56:00:a2:
                    02:8c:6d:d5:f3:00:cd:96:0e:3f:6d:ad:82:84:54:
                    8d:84:80:1f:9d:e1:d4:db:5f:85:c7:69:16:3a:4d:
                    54:f7:fa:bb:dd:8c:88:9e:f8:32:60:18:86:48:b1:
                    09:61:24:8b:54:7b:ba:8e:12:1d:c4:6b:b2:f0:48:
                    05:92:06:4e:4f:13:7a:ae:dc:09:7e:b8:ee:c9:2f:
                    e3:3c:0d:19:04:d7:68:c9:3d:7d:80:35:e2:8e:74:
                    86:0a:d4:37:79:5c:e4:87:18:58:88:2f:c4:5f:57:
                    f3:fd:9a:d8:25:16:fd:52:51:5a:cb:61:d3:e0:c9:
                    26:9c:3f:99:4b:05:4e:c7:11:56:c9:3a:a8:b3:33:
                    67:3b:ad:c8:41:fe:60:00:db:1e:ed:21:f7:56:39:
                    1a:6e:9f:33:14:22:92:db:15:18:42:04:7a:c3:8a:
                    f0:48:fa:3c:f6:aa:b9:c5:75:b2:73:23:dc:c1:c4:
                    d9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AD:21:42:0D:14:83:85:FA:10:47:9D:D3:3C:11:43:88:C3:F8:A3
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131342e302f32342d3234203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:48:b1:0e:9c:0e:b1:92:b5:0e:5b:5d:85:bf:30:74:70:b8:
         4f:2e:78:be:8e:88:54:d7:e7:72:5d:3c:0e:e8:a9:68:29:16:
         8a:8e:60:40:8f:5a:60:1c:0c:57:42:21:93:79:e1:ba:8d:28:
         05:e7:4e:bb:77:9f:c7:32:21:09:42:2f:ea:e2:fe:d4:c1:44:
         8b:51:c2:82:ba:f7:53:32:22:02:ec:46:a4:ab:56:5f:a2:4f:
         f7:8c:10:c4:98:0b:9e:6e:7e:fd:0c:82:fd:69:2a:c4:7c:f6:
         1c:0a:c3:f7:29:bd:30:7a:00:d8:20:ca:f0:c6:ed:71:02:f7:
         71:82:52:3b:78:68:3c:ca:52:db:f6:2d:03:d5:c4:78:98:9e:
         3f:28:8a:90:33:2c:17:93:5f:59:be:90:b1:59:84:18:a0:e2:
         6f:b7:10:ea:03:83:15:02:54:55:2f:37:1b:a4:5e:ac:c4:fb:
         05:92:3d:fa:7a:86:0c:53:95:fd:54:95:9c:bb:e5:e1:e3:74:
         99:27:94:3c:3f:88:3a:07:3c:27:ab:0d:65:ee:43:b5:99:0e:
         d7:84:9a:f5:c5:e5:20:c9:8b:af:2c:44:d3:d7:8a:2e:ea:e3:
         2b:54:62:ce:62:a4:ac:96:07:9c:e4:96:f2:17:19:c0:74:2d:
         8b:dd:bf:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:15:48 2025 by rpki-client