Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e31332e302f32342d3234203d3e203533313536.roa
File:                     3138362e3231312e31332e302f32342d3234203d3e203533313536.roa (raw, json)
Hash identifier:          mFKsV7s1B246LUAvPQ7Sgf5ywIbDNPiSVzDPxTPT/6o=
Subject key identifier:   88:E4:02:C0:36:F3:52:3B:F1:65:E6:A4:CF:00:68:74:52:95:00:08
Certificate issuer:       /CN=2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1
Certificate serial:       6FDBD12A11869DFA8B3271D10C30AEBAD4942661
Authority key identifier: 2A:B3:5A:CD:D4:03:E3:46:BD:D5:B7:C6:86:CF:CF:92:18:AB:B2:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e31332e302f32342d3234203d3e203533313536.roa
Signing time:             Sat 12 Jul 2025 14:28:29 +0000
ROA not before:           Sat 12 Jul 2025 14:23:29 +0000
ROA not after:            Sat 11 Jul 2026 14:28:29 +0000
asID:                     53156
IP address blocks:        186.211.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 12:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:db:d1:2a:11:86:9d:fa:8b:32:71:d1:0c:30:ae:ba:d4:94:26:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1
        Validity
            Not Before: Jul 12 14:23:29 2025 GMT
            Not After : Jul 11 14:28:29 2026 GMT
        Subject: CN=88E402C036F3523BF165E6A4CF00687452950008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:78:4a:fd:31:35:67:1a:41:90:73:2f:03:81:
                    fd:5c:9d:2a:38:ee:98:d4:ef:d7:45:b4:2f:84:c6:
                    10:a0:a3:8e:24:eb:ef:cd:a6:3f:bd:47:20:db:32:
                    d5:74:f6:14:cb:a1:1f:e2:a9:3f:1c:65:62:91:a1:
                    d4:a6:df:92:40:60:d0:d4:05:af:b4:44:bc:03:77:
                    59:ab:63:b7:81:7c:77:11:28:e1:fe:e6:7e:25:b9:
                    0c:c3:7f:2c:0d:73:4d:8a:9f:50:fd:58:48:9f:a2:
                    a8:cd:30:24:73:ec:aa:29:00:fe:52:f6:c5:37:79:
                    6a:b8:f8:81:de:ad:f4:e2:ea:7a:55:bf:81:44:fa:
                    de:58:e4:12:28:8e:81:36:7d:47:a1:ae:61:e3:9d:
                    9d:d4:4a:39:a9:9d:f1:30:45:5b:69:22:11:e7:87:
                    41:78:77:51:74:fd:98:49:92:c3:1c:37:8d:3d:fd:
                    c7:3f:ff:05:b8:4e:ea:87:d0:5c:20:62:5b:8d:9a:
                    08:85:e4:da:b1:01:e3:8f:08:1e:ab:42:f6:4f:31:
                    1d:b9:f0:64:b7:33:18:7f:6e:7b:9c:42:59:62:e3:
                    fe:75:90:6f:9e:fc:e7:56:8b:3f:65:36:8c:c1:c8:
                    de:42:0f:b5:6c:f5:72:87:47:e2:10:3f:88:b1:fb:
                    db:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E4:02:C0:36:F3:52:3B:F1:65:E6:A4:CF:00:68:74:52:95:00:08
            X509v3 Authority Key Identifier:
                keyid:2A:B3:5A:CD:D4:03:E3:46:BD:D5:B7:C6:86:CF:CF:92:18:AB:B2:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e31332e302f32342d3234203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:90:64:07:ae:86:45:19:e2:4f:ce:94:6f:00:7e:b1:5e:99:
         cd:00:c7:c9:a2:19:ff:59:a3:88:40:f9:fa:be:81:1c:af:30:
         93:e7:54:04:86:36:e3:a4:f3:ec:86:c4:76:e3:d8:59:52:58:
         fb:53:ea:b9:42:cd:4b:9a:73:30:9d:4f:ae:e9:e3:c5:13:ff:
         92:c8:26:c2:93:2c:85:5b:e7:10:f8:3c:a7:35:77:20:75:6e:
         31:28:09:3a:23:64:b6:9a:08:8d:cb:e0:b7:fb:c5:08:9e:90:
         81:50:93:c5:50:1b:e0:94:eb:bd:6f:d7:ca:e2:bf:08:b6:de:
         e9:87:90:17:93:00:bd:a2:11:37:b2:16:6a:00:40:ee:33:8a:
         6d:3e:8b:29:14:7d:af:83:97:cc:59:c2:9e:51:c5:2f:6b:76:
         34:e4:25:9a:fd:5b:9f:61:94:86:1c:44:7b:fb:5d:e6:c7:2b:
         5d:de:a0:9b:6d:7a:96:45:7b:be:4b:de:20:74:be:9a:57:71:
         2d:d1:58:45:c6:74:f1:1f:47:33:c5:42:6e:59:6c:ea:42:87:
         5c:d0:b8:4f:66:70:64:2c:d2:f1:da:1f:4b:b6:43:68:ad:e1:
         5e:87:b3:52:05:46:7c:57:7b:e7:35:28:29:a8:1b:c7:10:7e:
         4e:ce:e0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:49:40 2025 by rpki-client