Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31392e302f32342d3234203d3e20323633303232.roa
File:                     3138362e3234392e31392e302f32342d3234203d3e20323633303232.roa (raw, json)
Hash identifier:          VmmewN/hs3aMe3B9Cbi+288tLf1OvDbNTuMDGywb5bQ=
Subject key identifier:   44:3D:CA:96:96:D0:13:B9:B7:F3:1D:AD:CE:09:2E:5B:CB:3D:28:8B
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       50ADD397DF5C939C08B134E09E0537A75875AE1A
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31392e302f32342d3234203d3e20323633303232.roa
Signing time:             Mon 14 Jul 2025 14:27:02 +0000
ROA not before:           Mon 14 Jul 2025 14:22:02 +0000
ROA not after:            Mon 13 Jul 2026 14:27:02 +0000
asID:                     263022
IP address blocks:        186.249.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 00:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ad:d3:97:df:5c:93:9c:08:b1:34:e0:9e:05:37:a7:58:75:ae:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: Jul 14 14:22:02 2025 GMT
            Not After : Jul 13 14:27:02 2026 GMT
        Subject: CN=443DCA9696D013B9B7F31DADCE092E5BCB3D288B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:e8:61:55:3e:ce:0e:b7:5e:93:2d:a7:3c:
                    c7:f7:dd:23:ce:ac:55:57:6a:24:0e:45:ee:2e:c9:
                    57:58:2d:7c:e6:4c:70:64:cd:fb:bb:4e:73:d5:88:
                    68:75:49:e7:bd:2b:a1:dd:fe:93:5e:00:c1:c7:32:
                    ce:28:2a:b9:c7:8c:eb:ba:9a:86:cc:3f:54:4d:09:
                    8d:ae:18:b0:7b:12:ee:07:c8:c7:7b:3e:8b:0c:87:
                    f0:5a:a5:0d:b3:84:77:0d:42:5e:d8:4b:b2:fc:24:
                    2e:87:c1:a7:a6:d9:13:0f:15:1b:d6:31:89:82:b8:
                    2f:b3:52:84:30:24:aa:d8:54:5f:2b:f3:75:58:80:
                    c1:44:f9:3c:e6:6b:fb:42:ad:4a:10:07:8a:b5:c7:
                    8f:22:f1:91:8b:8f:01:28:a4:3d:3e:d1:ad:52:a3:
                    46:fc:a4:67:d7:0b:d4:59:ee:ba:28:5f:41:ca:96:
                    cb:fd:d6:50:2a:4d:95:d6:82:1b:64:e8:f9:89:b8:
                    54:6d:c4:e5:bd:43:d9:7d:e6:56:25:bd:e0:12:00:
                    85:46:66:df:d5:d0:84:94:b4:e6:3d:a8:79:a0:59:
                    1a:a7:3a:92:90:1c:47:96:8d:1f:ac:89:35:cc:ce:
                    4e:5f:b3:6d:53:a1:5c:a7:ca:a0:17:7e:5a:4f:55:
                    18:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3D:CA:96:96:D0:13:B9:B7:F3:1D:AD:CE:09:2E:5B:CB:3D:28:8B
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31392e302f32342d3234203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:61:ca:eb:67:08:b0:3b:ea:cd:19:83:6e:a5:d5:a1:9d:48:
         ca:44:d2:43:c4:f3:52:82:ae:01:fa:e9:d9:60:4d:f2:5a:1d:
         c1:d2:72:90:6b:ef:81:d0:d9:6e:dd:81:8e:88:f6:dd:c8:e3:
         04:84:93:97:f2:62:d7:76:2d:43:54:5a:fa:bf:22:85:1a:dc:
         f7:87:6d:c2:19:ee:ab:a0:35:0f:d1:63:e4:b6:0d:9e:14:f4:
         fe:02:85:f4:51:f5:ab:a0:57:c4:ae:f8:dd:16:e6:42:fb:ef:
         ff:92:73:e4:1d:c4:85:71:02:9a:e0:ff:78:25:84:9f:1c:63:
         d0:7c:90:9a:7e:2a:b2:2f:c1:4a:c9:8d:c3:3f:4a:68:d5:52:
         4c:64:36:57:b1:dd:32:d2:75:1d:6d:85:a1:30:c6:e7:ec:16:
         cc:a6:b0:2b:db:61:45:71:c6:9f:f2:08:d9:44:48:39:10:d6:
         8b:af:d7:dc:2b:44:0b:35:45:98:c7:5b:c1:48:2f:08:e4:e2:
         36:17:3f:17:32:f0:cc:2f:b6:24:33:3d:30:ed:e3:88:e0:44:
         9d:13:7e:30:a9:1c:f3:7c:8d:43:a6:11:b2:20:52:60:9f:c1:
         e1:ce:f7:25:49:85:9a:37:86:f2:9c:75:2b:03:ff:84:ad:d7:
         83:0f:30:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:36:06 2025 by rpki-client