Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3138362e3233332e3231362e302f32322d3332203d3e20323633303835.roa
File:                     3138362e3233332e3231362e302f32322d3332203d3e20323633303835.roa (raw, json)
Hash identifier:          PmbAUkUTs5Q/iqhBLo3baohkXrtjqFpyLdaX9yDXwCU=
Subject key identifier:   62:D8:EA:28:CC:AD:4E:74:FC:1E:AF:EC:EB:81:31:0E:D2:05:07:33
Certificate issuer:       /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
Certificate serial:       617FBFE82592ABF8062E2677E91CA048DF6749E6
Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3138362e3233332e3231362e302f32322d3332203d3e20323633303835.roa
Signing time:             Sun 13 Jul 2025 18:16:45 +0000
ROA not before:           Sun 13 Jul 2025 18:11:45 +0000
ROA not after:            Sun 12 Jul 2026 18:16:45 +0000
asID:                     263085
IP address blocks:        186.233.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl
                          rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7f:bf:e8:25:92:ab:f8:06:2e:26:77:e9:1c:a0:48:df:67:49:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
        Validity
            Not Before: Jul 13 18:11:45 2025 GMT
            Not After : Jul 12 18:16:45 2026 GMT
        Subject: CN=62D8EA28CCAD4E74FC1EAFECEB81310ED2050733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8d:37:e1:b1:5b:de:d1:5b:59:cd:82:be:0d:
                    3e:f4:60:8b:2f:d2:be:7f:06:38:34:c5:55:e6:eb:
                    4c:78:39:dc:42:8d:da:aa:5f:40:9b:ec:97:1c:ac:
                    ac:d3:b5:31:24:24:ce:4d:d8:ec:de:a2:b4:38:20:
                    38:87:37:23:d9:67:2b:cf:91:45:6c:4f:0f:46:48:
                    cf:97:76:b0:a1:c1:ce:a7:eb:6b:4b:b5:de:bb:52:
                    e6:9b:d4:e8:3b:e3:d0:17:01:ca:d1:46:c4:8b:3e:
                    d7:62:20:a3:38:fc:85:5b:99:d7:bf:52:2e:e0:b5:
                    19:75:7b:c9:61:fe:53:23:8a:de:10:ad:24:2c:f6:
                    5a:60:a7:b7:e8:57:27:95:e7:62:8e:ff:b6:40:ce:
                    55:15:fe:1d:eb:fa:d8:75:de:89:18:97:fa:2e:36:
                    80:a7:c5:fa:a6:50:5e:24:5b:b3:37:37:93:d3:18:
                    e3:cf:78:f8:3a:95:cc:c5:20:29:34:6d:67:e5:09:
                    8d:94:18:9c:4c:64:89:78:2b:ed:6d:14:83:39:03:
                    a7:7f:f3:82:08:18:a4:58:0a:6c:b7:96:4b:51:74:
                    2c:9f:6a:03:3e:2e:d0:db:88:cb:63:43:7b:5d:b7:
                    b2:68:e8:64:6c:5c:75:7e:52:a0:6e:be:54:4d:5f:
                    49:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D8:EA:28:CC:AD:4E:74:FC:1E:AF:EC:EB:81:31:0E:D2:05:07:33
            X509v3 Authority Key Identifier:
                keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3138362e3233332e3231362e302f32322d3332203d3e20323633303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:45:83:ab:3b:05:c2:d4:4d:51:22:f4:06:25:a6:b5:0f:e7:
         a2:8a:12:1f:b4:2c:13:5b:dd:5e:8e:18:cb:b0:b6:75:a9:53:
         eb:52:58:04:d5:7f:bc:e5:6c:39:b0:cf:f6:25:2e:5d:a9:5e:
         b0:b1:42:84:6a:9b:84:a2:93:48:a7:25:0c:92:d3:9a:14:74:
         9f:1c:e5:d7:b1:ce:f8:57:9d:32:04:04:ff:f1:3a:c0:13:71:
         35:45:d0:18:ef:98:7b:8a:a6:8e:59:f3:11:57:a2:8f:50:3b:
         5b:bb:e8:4b:e0:dc:c5:e7:ea:63:01:54:c0:a8:3b:d6:6e:80:
         94:9e:21:de:f2:cc:c2:91:61:9c:f5:fe:3d:92:15:36:4b:cc:
         48:b3:db:ff:e9:11:c5:c7:c9:00:de:42:e0:aa:cb:18:33:b3:
         08:02:97:bf:93:93:92:02:25:2c:23:d2:78:ba:10:e8:f6:05:
         52:e6:2f:bb:ff:64:c5:b9:ff:6e:da:70:6d:9f:95:5d:ea:ca:
         7c:47:26:02:5d:83:ab:4f:ef:08:1c:5b:0a:6d:42:55:d8:b8:
         06:c6:d9:a2:1e:fb:f2:e3:02:4a:15:87:ac:07:ce:96:c1:a6:
         2b:09:58:64:5e:ca:19:f0:64:12:95:1b:4c:a6:af:94:23:55:
         f3:93:fb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:45:01 2025 by rpki-client