Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/2/3138362e3235312e3138382e302f32332d3234203d3e20323633353638.roa
File:                     3138362e3235312e3138382e302f32332d3234203d3e20323633353638.roa (raw, json)
Hash identifier:          gXD0+/uRGnP/1wstq4Ggeu58zT3AfXU29gN5s7xS+o8=
Subject key identifier:   C3:AA:8E:82:84:52:E3:85:3E:DC:5E:68:C0:52:67:0D:2E:B4:F9:74
Certificate issuer:       /CN=FE286004D24FF2372D205BD41556AFCE53BFE25B
Certificate serial:       46A1DD0A16F715B339051278FA838A6FB487F169
Authority key identifier: FE:28:60:04:D2:4F:F2:37:2D:20:5B:D4:15:56:AF:CE:53:BF:E2:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE286004D24FF2372D205BD41556AFCE53BFE25B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/2/3138362e3235312e3138382e302f32332d3234203d3e20323633353638.roa
Signing time:             Wed 22 Oct 2025 13:55:51 +0000
ROA not before:           Wed 22 Oct 2025 13:50:51 +0000
ROA not after:            Wed 21 Oct 2026 13:55:51 +0000
asID:                     263568
IP address blocks:        186.251.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/2/FE286004D24FF2372D205BD41556AFCE53BFE25B.crl
                          rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/2/FE286004D24FF2372D205BD41556AFCE53BFE25B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE286004D24FF2372D205BD41556AFCE53BFE25B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 07:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a1:dd:0a:16:f7:15:b3:39:05:12:78:fa:83:8a:6f:b4:87:f1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE286004D24FF2372D205BD41556AFCE53BFE25B
        Validity
            Not Before: Oct 22 13:50:51 2025 GMT
            Not After : Oct 21 13:55:51 2026 GMT
        Subject: CN=C3AA8E828452E3853EDC5E68C052670D2EB4F974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:75:40:01:53:0a:d9:40:4b:30:09:f2:62:
                    29:9d:4b:33:78:02:f3:cb:69:b2:f7:f7:f4:d7:05:
                    79:e3:46:ee:b1:8d:f8:87:4b:b9:88:ac:b7:ab:3d:
                    f5:4c:bd:d6:08:84:1b:5e:1b:f5:b2:6b:0f:6e:f2:
                    b9:38:49:06:e2:14:47:d1:7a:0f:cc:01:dd:58:65:
                    09:69:54:fe:70:73:d2:04:64:a6:9a:6d:56:cf:09:
                    53:3f:5b:b4:93:40:1c:c1:c9:03:cf:ab:ab:ab:2d:
                    32:bb:41:17:4c:46:74:00:d6:18:58:27:29:32:42:
                    6c:37:3a:7b:00:9d:b7:16:d2:d0:a9:9e:94:ca:fe:
                    24:a3:59:a8:14:ba:9d:a9:60:f2:63:5d:ed:db:5e:
                    60:1e:9a:63:98:df:0e:e6:07:71:18:4b:8a:29:a9:
                    46:ed:a5:fc:db:2b:23:4d:b7:7d:f6:d4:12:4f:66:
                    cd:20:d1:06:59:c6:fd:18:e3:b8:92:4a:43:65:59:
                    ab:e4:38:50:f6:77:29:c8:77:4d:65:60:2f:2f:db:
                    e7:05:b6:9b:2f:53:e6:1f:2a:b7:52:e1:19:b1:11:
                    c7:03:95:6e:25:77:db:52:12:e6:67:d3:2e:e9:85:
                    69:61:27:dc:bb:b3:9b:3b:9c:08:a5:de:fb:26:d3:
                    cc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AA:8E:82:84:52:E3:85:3E:DC:5E:68:C0:52:67:0D:2E:B4:F9:74
            X509v3 Authority Key Identifier:
                keyid:FE:28:60:04:D2:4F:F2:37:2D:20:5B:D4:15:56:AF:CE:53:BF:E2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/2/FE286004D24FF2372D205BD41556AFCE53BFE25B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE286004D24FF2372D205BD41556AFCE53BFE25B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/2/3138362e3235312e3138382e302f32332d3234203d3e20323633353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:63:88:4c:55:1e:ed:c4:d2:bf:61:8f:dc:3c:f5:4e:c7:e4:
         9b:5e:81:91:b9:46:f1:43:fe:f3:f3:1d:ac:7a:31:40:42:71:
         ee:bd:e4:cd:64:15:01:3d:dd:82:ff:b9:ce:e9:be:70:eb:64:
         1d:5a:f4:74:7a:de:d4:90:2a:6f:92:23:ea:5d:8f:82:d1:60:
         94:28:32:99:41:ae:13:c4:6a:54:5b:29:49:ab:97:57:d9:2f:
         ea:54:2e:66:b5:23:ea:20:9f:37:8f:d7:d5:ba:ee:6a:c5:02:
         4a:97:7d:cb:53:53:4e:42:27:15:11:11:25:5d:3b:32:da:b5:
         00:d5:a7:cc:5a:d1:19:b5:5b:1d:6d:26:4d:7e:00:5c:79:41:
         14:37:e6:03:37:6e:fa:7e:22:48:60:b6:de:fe:d3:58:24:31:
         98:a1:69:9d:83:45:f8:f7:d9:36:d1:ff:e3:56:4b:59:cf:52:
         dc:3b:6b:e7:b0:6f:f1:b0:f3:95:b7:81:d7:00:29:0a:7b:9d:
         d2:eb:19:1e:e3:10:b8:db:90:c2:1f:5d:6f:fd:80:3b:bc:0f:
         0c:c4:2d:45:48:1e:e2:42:6c:54:5d:a3:9a:d4:84:55:fb:cf:
         af:66:60:1a:cf:a9:c8:6d:08:d9:00:81:f6:95:9b:3e:79:62:
         fc:e5:18:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:21:17 2025 by rpki-client