Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EoVk95HP229CMB9tgW8iCV3qwP7gKFg7DmLEWXNKyxUy/0/3231362e3234352e3133332e302f32342d3234203d3e20313938393439.roa
File:                     3231362e3234352e3133332e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          aZctir+NPN5nlu4WDoNvBcUN/Qcoo0+keqJdxx5uaI4=
Subject key identifier:   AA:80:7D:32:91:09:C9:7E:AF:F1:AA:AF:B9:11:1F:03:AF:67:34:7A
Certificate issuer:       /CN=08DCDB7348E7743E8AACA6C10E1DA610BDC6A362
Certificate serial:       69202DA20C9EEF377878165DFD6B37FFC58298C4
Authority key identifier: 08:DC:DB:73:48:E7:74:3E:8A:AC:A6:C1:0E:1D:A6:10:BD:C6:A3:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08DCDB7348E7743E8AACA6C10E1DA610BDC6A362.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EoVk95HP229CMB9tgW8iCV3qwP7gKFg7DmLEWXNKyxUy/0/3231362e3234352e3133332e302f32342d3234203d3e20313938393439.roa
Signing time:             Thu 11 Jun 2026 13:51:25 +0000
ROA not before:           Thu 11 Jun 2026 13:46:25 +0000
ROA not after:            Thu 10 Jun 2027 13:51:25 +0000
asID:                     198949
IP address blocks:        216.245.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EoVk95HP229CMB9tgW8iCV3qwP7gKFg7DmLEWXNKyxUy/0/08DCDB7348E7743E8AACA6C10E1DA610BDC6A362.crl
                          rsync://rpki-repo.registro.br/repo/EoVk95HP229CMB9tgW8iCV3qwP7gKFg7DmLEWXNKyxUy/0/08DCDB7348E7743E8AACA6C10E1DA610BDC6A362.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08DCDB7348E7743E8AACA6C10E1DA610BDC6A362.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:20:2d:a2:0c:9e:ef:37:78:78:16:5d:fd:6b:37:ff:c5:82:98:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08DCDB7348E7743E8AACA6C10E1DA610BDC6A362
        Validity
            Not Before: Jun 11 13:46:25 2026 GMT
            Not After : Jun 10 13:51:25 2027 GMT
        Subject: CN=AA807D329109C97EAFF1AAAFB9111F03AF67347A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2b:19:ab:47:c7:2b:5c:11:29:26:b9:85:75:
                    6b:62:6b:b1:3d:71:3d:ed:4a:21:2c:15:61:98:11:
                    86:16:96:69:78:15:92:59:cf:16:e7:2f:3e:bc:60:
                    a5:9a:ce:5f:c3:d7:56:4b:1a:02:09:3f:23:b3:4e:
                    d1:d0:b6:52:9f:9b:1d:c3:08:7a:1b:2f:27:ca:d7:
                    61:ac:ac:f4:8a:4c:15:ee:d3:6f:7f:d5:d4:8f:02:
                    f7:bf:ab:ae:bf:86:16:72:1f:51:98:c8:24:7f:4c:
                    44:60:d7:05:b3:b2:b8:c7:04:d3:2a:60:f2:a6:8f:
                    a3:46:0c:78:ee:12:69:5f:0a:9d:fe:a6:65:b8:8d:
                    b4:ac:c9:3b:9e:d3:89:d4:7d:7a:97:2b:e5:ee:16:
                    b3:23:d7:3d:06:64:eb:42:61:02:3e:c0:83:7d:1c:
                    02:2e:06:b8:f5:3c:1f:d5:5a:ed:bf:4b:58:6f:4e:
                    27:f9:e3:d6:ed:fa:bd:da:1b:f1:1f:84:4f:b2:46:
                    c1:78:42:8e:1e:7c:57:0a:d4:67:34:8a:23:38:e6:
                    0c:0e:6b:03:ea:d5:6c:b3:ab:51:74:93:60:ab:b2:
                    5b:65:8a:08:ea:e7:81:d1:de:ab:cc:aa:ac:a3:46:
                    84:fc:ee:78:fb:04:d9:a0:f9:09:d3:6b:63:b8:e5:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:80:7D:32:91:09:C9:7E:AF:F1:AA:AF:B9:11:1F:03:AF:67:34:7A
            X509v3 Authority Key Identifier:
                keyid:08:DC:DB:73:48:E7:74:3E:8A:AC:A6:C1:0E:1D:A6:10:BD:C6:A3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EoVk95HP229CMB9tgW8iCV3qwP7gKFg7DmLEWXNKyxUy/0/08DCDB7348E7743E8AACA6C10E1DA610BDC6A362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08DCDB7348E7743E8AACA6C10E1DA610BDC6A362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EoVk95HP229CMB9tgW8iCV3qwP7gKFg7DmLEWXNKyxUy/0/3231362e3234352e3133332e302f32342d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.245.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:3a:03:2d:4c:de:24:62:6f:55:01:97:6e:06:48:58:fb:3d:
         3b:52:25:c4:df:f8:16:20:17:46:7d:c3:d5:ef:da:e8:41:4d:
         5f:bf:fd:6c:1d:96:65:cb:ee:93:25:91:7d:d0:8f:3e:41:bc:
         a4:0a:8e:e0:c3:52:5b:09:b0:d6:3c:ac:16:f9:20:79:14:d6:
         1c:8f:9b:be:a4:78:b3:14:3e:ef:a5:fb:67:09:6c:15:77:18:
         09:cc:84:9c:97:b4:1d:a3:91:db:73:8a:b3:29:37:a1:af:9b:
         a6:b4:fd:d2:6d:84:e5:cd:66:90:1f:fb:1f:c8:61:4a:e4:cc:
         be:d0:a3:7e:0d:a9:cd:2b:27:8f:23:c2:67:5c:03:f6:59:c8:
         a3:c2:70:c3:ce:c1:c7:92:7c:70:8a:63:94:6a:bb:01:65:c5:
         e5:45:79:f1:7d:1b:57:15:14:f8:cb:67:f4:26:58:a2:71:c1:
         12:b2:e2:8a:24:84:06:83:d2:5a:56:47:4f:88:d8:cb:4b:74:
         09:e3:5e:02:49:ba:27:6a:f4:f4:f3:f5:c7:b3:d5:5a:d7:15:
         ba:ff:0a:31:81:91:98:48:5a:1a:03:a4:76:5f:24:2b:d2:3f:
         43:c1:ae:f8:bb:7a:70:f8:29:1b:00:18:0e:37:96:97:79:d9:
         86:92:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:49:26 2026 by rpki-client