Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/3138362e3233322e3234322e302f32342d3234203d3e20323731373038.roa
File:                     3138362e3233322e3234322e302f32342d3234203d3e20323731373038.roa (raw, json)
Hash identifier:          cO16ey9RwUeuZE+IfI0B2WMrlMx03Ly4tDErYZ6YuKU=
Subject key identifier:   25:2D:5F:7D:37:67:98:CD:22:34:A3:5B:83:C0:AA:88:4A:92:E2:A1
Certificate issuer:       /CN=7040E70A343ED61D14BF33985442CD6EB7927B4D
Certificate serial:       76D483CC86727BEF8982D9A5C48E1B4E4654B3FC
Authority key identifier: 70:40:E7:0A:34:3E:D6:1D:14:BF:33:98:54:42:CD:6E:B7:92:7B:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/3138362e3233322e3234322e302f32342d3234203d3e20323731373038.roa
Signing time:             Tue 29 Jul 2025 22:39:06 +0000
ROA not before:           Tue 29 Jul 2025 22:34:06 +0000
ROA not after:            Tue 28 Jul 2026 22:39:06 +0000
asID:                     271708
IP address blocks:        186.232.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl
                          rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 04:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d4:83:cc:86:72:7b:ef:89:82:d9:a5:c4:8e:1b:4e:46:54:b3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7040E70A343ED61D14BF33985442CD6EB7927B4D
        Validity
            Not Before: Jul 29 22:34:06 2025 GMT
            Not After : Jul 28 22:39:06 2026 GMT
        Subject: CN=252D5F7D376798CD2234A35B83C0AA884A92E2A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:76:e1:f5:a8:d6:3f:33:ee:de:ee:94:c9:ef:
                    72:7d:83:34:9f:af:c4:74:9d:4a:4b:2c:b9:33:8c:
                    50:c8:f3:f0:5e:2e:3a:89:12:2b:38:df:3c:b1:60:
                    4f:52:25:90:09:e1:67:0d:bd:ef:72:b3:8c:3d:e4:
                    4c:a3:68:6a:a3:48:eb:b3:40:0b:eb:39:07:46:d8:
                    ef:94:b2:a2:15:f4:69:de:06:80:e0:24:5f:5f:7c:
                    a8:f1:d9:74:0f:93:3f:86:85:77:44:fc:59:0d:bc:
                    bb:53:10:bd:98:96:40:78:77:de:cd:b1:80:9c:36:
                    cc:ff:14:ba:b4:4e:c6:cc:06:f9:be:f6:5c:07:f7:
                    62:85:12:ad:ae:63:a4:56:1f:47:cc:40:43:e1:93:
                    80:a9:22:c2:9f:88:39:be:94:3e:26:7a:78:55:c8:
                    51:ac:f4:fe:52:84:06:12:75:6c:49:d6:f8:91:89:
                    fb:77:3b:5f:98:25:1f:82:21:21:25:c0:91:7c:f8:
                    21:86:f6:67:a1:14:67:09:c8:84:ca:df:2c:f2:ca:
                    98:f5:0b:c5:99:8e:99:64:e9:06:fb:33:e2:ef:6c:
                    90:54:bb:a5:c5:0e:c8:4a:53:69:7a:55:30:cd:2e:
                    fe:8c:3a:3d:bb:eb:5a:60:6f:36:3d:54:53:7c:d5:
                    ac:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2D:5F:7D:37:67:98:CD:22:34:A3:5B:83:C0:AA:88:4A:92:E2:A1
            X509v3 Authority Key Identifier:
                keyid:70:40:E7:0A:34:3E:D6:1D:14:BF:33:98:54:42:CD:6E:B7:92:7B:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/3138362e3233322e3234322e302f32342d3234203d3e20323731373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:ef:ea:a3:8a:bb:51:49:b1:cf:f0:60:84:65:59:82:15:d6:
         d0:52:0b:28:5a:8a:be:72:a9:4e:13:fa:90:70:85:81:23:11:
         c3:fb:ef:70:d5:90:8b:b4:b6:65:6f:c1:1c:84:2a:59:2e:46:
         ec:cd:d7:7c:db:24:ad:03:19:a4:47:43:2e:fb:f0:e4:98:37:
         4a:bc:51:9d:bc:b7:bb:a0:d2:7b:d8:31:a3:15:dd:c4:ad:54:
         be:2c:26:c4:47:f1:1c:eb:37:4f:56:b6:15:74:b7:33:5d:52:
         72:79:f0:23:b2:c5:07:64:5f:b5:12:cb:6c:9e:d6:19:27:f1:
         a6:2f:58:40:27:75:f4:ab:3d:14:cf:f1:5d:c2:80:76:c0:1a:
         02:d5:39:37:38:fd:54:8f:e0:69:b1:98:70:3b:0b:9d:cd:14:
         d1:27:19:3a:2e:3e:c2:d8:fb:e3:36:55:8b:2c:fe:78:52:52:
         64:70:d7:b9:10:a7:27:1d:23:86:d1:1d:bf:a1:cb:65:32:8a:
         35:5f:4a:0e:c8:40:33:b1:50:56:f3:09:22:c3:06:e0:83:26:
         bd:4a:e5:d9:cc:75:b8:6f:8c:4e:0e:80:41:01:33:7e:71:01:
         f7:76:0a:45:20:82:ea:fd:76:7a:da:68:80:1c:d9:94:ea:8e:
         43:a3:a5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:54:26 2025 by rpki-client