Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/3138362e3235312e33382e302f32342d3234203d3e203532393130.roa
File:                     3138362e3235312e33382e302f32342d3234203d3e203532393130.roa (raw, json)
Hash identifier:          LJ3GvetHQ0kN2c975azp4zzCkBxk+LMzyWa6evxQVAw=
Subject key identifier:   DC:8D:1B:24:F2:14:70:57:10:F3:B8:1B:4C:5F:2E:8C:92:54:BD:2F
Certificate issuer:       /CN=FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894
Certificate serial:       28C1D3D73D7088B37DAB6B07EF3402A58D60E8D0
Authority key identifier: FA:ED:B0:9B:70:5F:EF:6A:6E:14:D8:F6:8D:6E:E4:4B:C2:F1:28:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/3138362e3235312e33382e302f32342d3234203d3e203532393130.roa
Signing time:             Wed 04 Jun 2025 13:08:07 +0000
ROA not before:           Wed 04 Jun 2025 13:03:07 +0000
ROA not after:            Wed 03 Jun 2026 13:08:07 +0000
asID:                     52910
IP address blocks:        186.251.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.crl
                          rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 18:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c1:d3:d7:3d:70:88:b3:7d:ab:6b:07:ef:34:02:a5:8d:60:e8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894
        Validity
            Not Before: Jun  4 13:03:07 2025 GMT
            Not After : Jun  3 13:08:07 2026 GMT
        Subject: CN=DC8D1B24F214705710F3B81B4C5F2E8C9254BD2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:e0:4c:64:11:00:6b:a5:7b:2f:c8:09:a6:
                    d2:b1:26:35:6c:6c:f1:7a:dc:32:f3:f2:36:56:d6:
                    d2:4d:d5:1c:49:ed:46:04:06:2d:0b:c4:28:69:8d:
                    d0:ed:19:a4:3c:56:3c:7e:b5:0f:99:b7:0a:9b:95:
                    f6:8b:71:0f:92:8f:84:4c:9c:7c:d2:bb:b1:29:b9:
                    2d:17:3d:f5:51:7e:5c:c2:cd:e3:b6:d4:41:50:34:
                    0a:d3:10:83:b9:ca:e6:88:9c:1a:7b:65:5b:04:69:
                    69:c7:09:99:b3:fb:30:b5:6a:7b:eb:80:c4:9e:77:
                    f8:ca:b8:75:6c:c8:59:b7:e5:d4:ce:83:1e:9b:6e:
                    cd:fc:51:a5:ca:8a:06:36:3f:0a:ef:25:27:39:d3:
                    cc:7c:f5:70:9d:6c:0b:5b:53:5f:f4:e6:4f:67:91:
                    1a:51:76:5d:d3:5e:b6:00:d6:6b:cd:09:c9:f7:6c:
                    8f:67:b7:0f:dd:cc:78:f6:db:b7:df:d1:45:16:f4:
                    26:27:5b:f2:65:95:8d:79:5f:6b:78:ab:8d:e4:2a:
                    2e:b9:6d:5c:b8:21:c8:ee:2c:54:fc:00:65:d7:a8:
                    48:d9:c1:b2:b5:a2:bc:95:68:76:ff:23:ff:ad:44:
                    9e:70:f3:df:f6:1a:0c:be:b5:63:29:12:ab:79:13:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8D:1B:24:F2:14:70:57:10:F3:B8:1B:4C:5F:2E:8C:92:54:BD:2F
            X509v3 Authority Key Identifier:
                keyid:FA:ED:B0:9B:70:5F:EF:6A:6E:14:D8:F6:8D:6E:E4:4B:C2:F1:28:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/3138362e3235312e33382e302f32342d3234203d3e203532393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:bb:6b:b5:8e:ea:19:4b:13:8a:60:e5:4d:78:ab:81:ab:f7:
         42:5d:bb:58:dc:2a:10:6e:57:6a:d3:93:bc:d1:37:23:46:5d:
         94:9b:00:c1:85:b5:47:e1:f2:6f:ca:8a:f3:05:3d:dc:1d:ea:
         44:94:73:2c:44:d4:fc:57:d3:d6:d2:6a:e4:44:c6:64:6c:ea:
         2a:8e:4a:7b:cd:4a:a9:52:fc:b8:a1:f4:98:33:3d:33:ec:ed:
         8c:67:dc:89:f2:af:ad:c6:10:33:73:ea:78:83:28:5c:3b:ff:
         d5:41:d7:97:63:e5:a2:bb:63:05:28:0d:25:0b:7c:13:c1:b5:
         42:b5:cc:2e:03:d6:df:cf:b7:27:1d:c1:32:41:07:01:ce:91:
         65:60:0d:85:79:b8:0f:22:cd:6f:62:fc:a6:77:80:1b:b9:03:
         0f:56:12:5c:03:18:4d:47:30:c7:e5:11:24:8f:30:47:0c:3c:
         be:b3:f6:ce:61:a8:0c:d4:dc:dc:d3:d7:11:00:1f:ea:56:03:
         ea:a9:cb:39:96:0d:4b:15:30:17:2b:f2:51:fe:e4:98:41:b4:
         6b:bd:d3:ee:b8:4e:77:06:8a:ed:9f:db:73:c7:44:22:1d:2d:
         85:95:47:dd:96:68:98:2b:35:e5:39:8d:45:9a:60:c0:bc:b3:
         2a:ec:bd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 20:04:48 2025 by rpki-client