Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3232362e3231362e302f32342d3234203d3e20323733343433.roa
File:                     3138362e3232362e3231362e302f32342d3234203d3e20323733343433.roa (raw, json)
Hash identifier:          +nm0ReNKP/zu+sp8i2K1uY69D+ymeCWgi5YmQU5rKno=
Subject key identifier:   8C:3E:1E:20:67:DE:2B:BC:21:68:2D:41:77:89:62:2A:19:AE:69:BF
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       63F2AF95D096AF6CCE4BB32CD922E777B5A06D74
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3232362e3231362e302f32342d3234203d3e20323733343433.roa
Signing time:             Mon 08 Jun 2026 14:55:41 +0000
ROA not before:           Mon 08 Jun 2026 14:50:41 +0000
ROA not after:            Mon 07 Jun 2027 14:55:41 +0000
asID:                     273443
IP address blocks:        186.226.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f2:af:95:d0:96:af:6c:ce:4b:b3:2c:d9:22:e7:77:b5:a0:6d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: Jun  8 14:50:41 2026 GMT
            Not After : Jun  7 14:55:41 2027 GMT
        Subject: CN=8C3E1E2067DE2BBC21682D417789622A19AE69BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:df:92:e0:cd:12:05:31:c7:eb:28:9e:56:41:
                    62:e5:1c:35:a2:28:4b:3c:6d:20:4c:7e:2d:03:f7:
                    19:99:e3:dc:84:a7:7f:36:1a:9b:b3:7a:59:e8:48:
                    f8:8c:25:58:2e:a2:f6:57:30:bd:d6:fd:58:95:cd:
                    24:f2:a4:8c:b0:e1:b1:2d:2c:85:55:bb:96:34:6d:
                    34:ac:e2:d8:63:6c:24:1f:4c:14:9c:a0:61:4f:a3:
                    09:d3:95:f5:95:7d:64:42:b8:76:69:ba:3f:bd:8b:
                    db:5e:ca:cd:ac:40:92:12:a0:74:d5:b9:9e:9c:2c:
                    36:fd:ca:e6:91:a7:74:32:e6:e0:61:13:a2:15:93:
                    f2:01:97:4c:ef:4d:d0:94:39:22:f1:29:a2:73:d2:
                    1f:46:f2:fd:41:69:95:bd:da:ec:4a:38:36:0c:1e:
                    56:f6:03:cd:20:d3:0c:9b:d0:5f:60:63:d1:9a:e0:
                    34:32:0a:7f:32:54:73:b0:97:e0:bd:0f:e1:55:36:
                    6c:f1:5e:88:22:d4:c0:48:5a:92:be:c9:58:cf:d8:
                    88:0c:5a:d8:d6:8c:f2:f7:a2:ae:d5:19:c2:ae:a3:
                    bd:49:15:66:08:e7:fd:16:57:51:36:4f:94:12:0a:
                    fd:25:16:eb:7d:8f:01:fc:30:20:cd:2d:a0:ab:b4:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3E:1E:20:67:DE:2B:BC:21:68:2D:41:77:89:62:2A:19:AE:69:BF
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3232362e3231362e302f32342d3234203d3e20323733343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:74:d5:12:0e:7f:26:66:e6:8f:00:ce:c4:2d:5c:a4:0a:b2:
         ab:fa:b4:87:d9:02:58:c4:69:51:80:ee:01:a1:ad:e0:3f:c2:
         11:cc:72:76:65:75:ff:38:12:8e:e7:c1:79:ce:3c:d7:cb:02:
         b5:5b:9f:87:22:59:00:0e:38:f5:18:c1:4d:d1:ae:57:6c:7f:
         52:a7:64:f7:df:ca:f4:41:e0:8d:58:a8:eb:b3:ab:03:c7:89:
         34:a9:ef:b5:f6:eb:d5:69:9e:0f:80:19:cb:79:0d:4a:a4:2e:
         ea:f5:b8:da:52:f9:19:ec:99:30:6e:42:79:76:14:04:14:73:
         f9:60:dd:7c:43:a0:cd:f4:37:2c:3d:4a:58:e0:b5:75:0c:1c:
         e5:9c:9e:e5:f1:26:76:16:b6:76:53:7d:ee:f1:77:f7:57:93:
         21:cf:00:7f:20:02:d7:0a:7e:9b:b8:c6:cf:d7:92:84:de:55:
         79:3c:82:48:d7:d3:06:04:6d:ba:1c:91:4c:d3:ac:82:c4:7c:
         6f:27:7f:22:79:e8:a7:2b:8c:7d:0a:20:8c:2a:56:2a:05:e9:
         21:91:34:dc:c8:19:40:ee:2b:b1:19:31:83:4c:c9:06:3b:79:
         45:e5:d3:cb:40:9f:de:9b:61:04:aa:c1:06:33:7d:a5:1d:c0:
         a0:e6:83:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:33:42 2026 by rpki-client