Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e31342e302f32332d3233203d3e203533313536.roa
File:                     3138362e3231312e31342e302f32332d3233203d3e203533313536.roa (raw, json)
Hash identifier:          HoL5zaCnjCQbWZSA8nRRnHWSseb2PqaNLr0TDQPRm4Y=
Subject key identifier:   1E:E3:02:6D:26:CE:BB:3B:B5:AA:84:79:01:17:1C:93:5E:FD:E1:8F
Certificate issuer:       /CN=2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1
Certificate serial:       2D4A8E931DB2C2A0C176A358770A93D23243A7F3
Authority key identifier: 2A:B3:5A:CD:D4:03:E3:46:BD:D5:B7:C6:86:CF:CF:92:18:AB:B2:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e31342e302f32332d3233203d3e203533313536.roa
Signing time:             Sat 12 Jul 2025 14:28:35 +0000
ROA not before:           Sat 12 Jul 2025 14:23:35 +0000
ROA not after:            Sat 11 Jul 2026 14:28:35 +0000
asID:                     53156
IP address blocks:        186.211.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 12:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4a:8e:93:1d:b2:c2:a0:c1:76:a3:58:77:0a:93:d2:32:43:a7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1
        Validity
            Not Before: Jul 12 14:23:35 2025 GMT
            Not After : Jul 11 14:28:35 2026 GMT
        Subject: CN=1EE3026D26CEBB3BB5AA847901171C935EFDE18F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1a:38:11:54:17:89:3b:4f:92:23:95:2e:16:
                    a9:94:5e:72:cf:0f:89:de:eb:ab:73:3a:39:5a:49:
                    c6:da:c2:bf:b4:54:3c:dd:bb:c8:12:b4:d7:59:ae:
                    9a:a2:7f:de:a4:f4:17:70:cf:16:49:c1:ca:9e:90:
                    74:ee:47:02:d3:1f:2a:d9:fb:7a:34:f2:38:49:54:
                    4a:6c:8c:ea:18:0a:8e:73:95:0e:b3:4d:c1:ee:58:
                    3d:8e:e4:31:b1:a1:f2:41:c1:07:24:1f:95:9f:2e:
                    7f:e8:2c:97:40:23:ff:df:eb:3b:cf:fd:94:f9:2c:
                    03:44:5b:71:84:96:f2:f6:70:4a:49:7a:7f:0e:1a:
                    87:d2:81:34:69:b1:a9:aa:f6:85:26:6f:38:81:25:
                    cd:98:9a:ab:4a:05:04:2c:1a:fb:96:3b:d6:92:89:
                    93:45:1e:75:7b:1a:5d:57:20:94:d5:5e:27:77:1a:
                    2d:54:6c:c6:87:4b:7d:77:34:c8:8a:2d:f5:e2:c4:
                    cf:13:b1:32:d5:95:37:ad:91:8d:9e:d3:cf:ad:ff:
                    94:f1:16:a4:b0:48:ed:fe:e9:e4:7d:b7:d1:56:57:
                    ab:99:37:04:ea:3c:a4:8c:07:14:18:02:11:6a:9c:
                    fa:44:2a:59:32:b0:c8:06:24:87:30:73:1b:27:34:
                    af:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E3:02:6D:26:CE:BB:3B:B5:AA:84:79:01:17:1C:93:5E:FD:E1:8F
            X509v3 Authority Key Identifier:
                keyid:2A:B3:5A:CD:D4:03:E3:46:BD:D5:B7:C6:86:CF:CF:92:18:AB:B2:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e31342e302f32332d3233203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:fd:b5:d8:d7:c3:0b:e9:33:9a:62:2e:4a:24:02:fb:1d:29:
         b9:f2:7f:43:1c:72:1e:3d:86:4e:73:a8:b8:3d:1b:bd:94:eb:
         9d:84:d3:f6:e6:85:7c:34:07:d1:2c:80:6e:58:d3:08:ac:56:
         c0:82:01:24:ed:0d:d0:94:d1:f8:a2:30:2e:bf:8a:7d:0b:eb:
         19:c0:10:6c:bf:3b:d2:50:f7:48:fc:86:6a:03:62:0e:36:44:
         16:86:91:ab:6f:de:be:6d:87:53:bd:fa:52:62:e1:2c:c9:20:
         c5:f3:4f:be:f4:f1:7b:17:89:c3:fb:ad:47:0e:fd:99:8d:9a:
         bb:eb:de:cb:fd:b7:9c:cd:dc:c1:19:30:31:26:46:6d:c5:9e:
         b9:67:e4:1f:ba:35:8e:eb:b0:f9:5c:4a:47:04:13:b9:34:6e:
         d7:4c:c8:4a:f7:f5:a6:30:14:59:56:86:56:4a:bf:1d:5e:2c:
         b5:2f:42:97:17:84:a5:0e:53:83:d5:ee:74:12:9b:0f:46:ba:
         30:48:23:9a:fc:64:ce:60:5a:47:95:cc:9f:d6:f2:e7:4f:fc:
         95:8b:ae:e6:47:dd:e6:93:2a:1d:68:f8:52:02:cc:2f:73:52:
         74:de:47:b7:00:86:38:9e:15:41:57:72:ec:c3:5c:3e:3e:8e:
         69:21:8d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:12:13 2025 by rpki-client