Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131322e302f32322d3232203d3e20323632383132.roa
File:                     3138362e3235302e3131322e302f32322d3232203d3e20323632383132.roa (raw, json)
Hash identifier:          G6TsJ05fo5MqJRlfggtds3KndURWJVd8/5Kbztdf/bU=
Subject key identifier:   14:BA:26:14:22:53:19:13:5B:52:5E:92:9A:75:68:19:FF:0E:A0:B9
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       77FBDFAB4DC583C5B6B20108813EC697A8D9F4F7
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131322e302f32322d3232203d3e20323632383132.roa
Signing time:             Mon 14 Jul 2025 15:31:08 +0000
ROA not before:           Mon 14 Jul 2025 15:26:08 +0000
ROA not after:            Mon 13 Jul 2026 15:31:08 +0000
asID:                     262812
IP address blocks:        186.250.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
                          rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fb:df:ab:4d:c5:83:c5:b6:b2:01:08:81:3e:c6:97:a8:d9:f4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Jul 14 15:26:08 2025 GMT
            Not After : Jul 13 15:31:08 2026 GMT
        Subject: CN=14BA2614225319135B525E929A756819FF0EA0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:88:7e:8f:2f:08:dd:89:95:18:cc:6a:fe:bc:
                    72:4b:b3:78:51:32:25:70:37:20:35:b0:2f:79:80:
                    09:7c:d7:39:33:6c:d4:f7:12:4f:11:07:d8:2d:e1:
                    7a:92:91:78:99:ea:4b:1e:23:c8:16:cb:15:37:00:
                    09:11:b4:dc:c2:ac:3a:12:45:11:4d:a0:60:93:aa:
                    37:7a:61:bd:9a:30:48:42:a3:e5:a2:4c:44:6b:78:
                    0d:89:88:94:85:d4:9b:58:99:d3:4b:aa:33:1d:19:
                    ce:ff:c3:87:04:6c:4a:c6:95:4c:d9:b6:5d:29:7b:
                    2f:ac:85:7b:73:e0:36:7f:46:0d:82:d4:ad:ef:7a:
                    28:58:5e:dd:ae:2a:1d:cf:e7:e6:3b:09:9d:e8:8d:
                    15:10:ad:c8:1b:3b:f1:f0:bf:9c:e4:72:2a:c5:38:
                    02:17:51:74:aa:22:8e:bc:59:7c:72:46:7f:e1:7f:
                    aa:3d:e6:34:92:71:5b:1e:62:14:bf:0f:a0:65:f8:
                    47:2a:ab:77:85:53:5b:d4:c5:70:da:fa:80:bc:7d:
                    9d:28:5c:5c:15:05:b7:92:de:c2:e0:3f:05:55:40:
                    a1:ec:e3:03:cb:0b:d5:cb:53:9f:f1:b9:44:d8:a2:
                    35:e2:00:04:17:4b:d6:a2:23:7a:8d:c5:8c:de:82:
                    fd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BA:26:14:22:53:19:13:5B:52:5E:92:9A:75:68:19:FF:0E:A0:B9
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131322e302f32322d3232203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:d2:fa:e8:28:11:0c:38:ad:e9:33:82:f6:cf:71:f0:e6:01:
         22:51:da:3f:a8:b0:7d:07:6d:f6:da:d2:2a:8d:a2:fc:50:e3:
         36:cb:ce:65:46:01:87:79:48:8b:07:b7:7c:d0:c4:5b:18:eb:
         4b:35:fe:fd:98:e5:cd:09:4e:de:c1:08:e5:7d:46:af:75:16:
         47:ed:16:2b:b5:ca:10:35:ae:a5:b2:34:9c:4d:c0:7e:c8:13:
         b1:ed:5b:0b:35:d8:77:05:3a:4f:9d:0c:66:4d:89:54:c0:11:
         b8:f4:cb:81:ce:ca:ab:2e:f4:62:67:3c:64:fc:4f:e5:0f:af:
         05:01:2b:54:c7:04:ee:03:44:4a:77:ac:41:49:03:b8:06:07:
         3a:01:46:31:de:a3:90:c7:fb:50:e4:6e:f4:f4:20:8a:66:6c:
         5a:c5:7f:f0:c3:11:06:d6:f9:b3:bc:b2:b0:75:98:b1:0c:58:
         4b:b7:1b:b8:69:80:24:df:e5:7d:d3:1f:7f:10:79:c6:54:59:
         da:ec:19:51:34:3a:3d:c6:bd:15:df:ca:ca:b3:33:84:55:86:
         82:6c:09:75:3f:4f:bb:db:0c:5c:2b:64:42:85:d1:12:f4:2b:
         5e:3b:86:04:ae:36:7c:5e:79:5f:ad:b0:6a:f1:24:77:33:8a:
         07:e8:cf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:51:11 2025 by rpki-client