Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131322e302f32332d3233203d3e20323632383132.roa
File:                     3138362e3235302e3131322e302f32332d3233203d3e20323632383132.roa (raw, json)
Hash identifier:          9Sb1AoEk/XXV5rufPY8d10wmdaSpHw0IO/aiuZ8S0jQ=
Subject key identifier:   9F:1C:2C:85:86:15:22:8E:1C:CE:E7:A9:6C:19:E4:38:EE:F8:A8:CC
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       5B7231DFB4EE002D6AB8126CCC94258E3CADC197
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131322e302f32332d3233203d3e20323632383132.roa
Signing time:             Mon 14 Jul 2025 15:31:17 +0000
ROA not before:           Mon 14 Jul 2025 15:26:17 +0000
ROA not after:            Mon 13 Jul 2026 15:31:17 +0000
asID:                     262812
IP address blocks:        186.250.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
                          rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 04:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:72:31:df:b4:ee:00:2d:6a:b8:12:6c:cc:94:25:8e:3c:ad:c1:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Jul 14 15:26:17 2025 GMT
            Not After : Jul 13 15:31:17 2026 GMT
        Subject: CN=9F1C2C858615228E1CCEE7A96C19E438EEF8A8CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:63:4e:d2:19:e5:ac:bc:7e:25:cb:be:94:59:
                    c2:46:a0:65:66:04:d2:82:88:d6:ba:82:3a:c1:52:
                    a6:b8:77:2d:4b:e7:10:fe:af:84:0c:77:b7:a1:c1:
                    5c:50:58:6f:cc:60:da:e4:f5:10:ba:d1:8e:2c:d7:
                    4a:13:7d:29:aa:a7:d2:3d:0d:ab:08:10:e6:d4:35:
                    2d:2a:75:c6:d9:89:0d:cd:9e:1b:0e:73:19:c4:18:
                    3e:f9:be:f3:db:cb:65:9c:d2:c6:74:24:b3:02:c0:
                    85:d7:7d:65:0d:82:27:e2:38:0d:02:5d:ba:dd:2a:
                    33:3d:a4:f1:9d:10:a2:57:85:7d:2f:dc:83:4a:92:
                    a2:59:83:e9:41:7b:c1:ca:ce:56:ac:89:a7:cd:d8:
                    74:a1:f8:bc:0b:92:5b:26:2c:86:8b:e8:d6:8c:01:
                    4a:65:fe:30:41:56:07:6a:75:7d:e7:df:19:4b:cf:
                    49:fa:fd:58:22:45:56:77:1f:bc:92:5b:31:bd:95:
                    f0:4c:44:e9:e3:6e:7d:e6:3c:7d:89:16:4d:72:4f:
                    33:59:6f:1c:ab:60:73:59:a9:b8:9c:7a:d8:a1:03:
                    87:44:14:84:0e:31:12:43:9f:25:78:30:58:cd:e3:
                    71:40:8e:84:5d:f3:e5:b5:99:83:07:3d:73:0e:df:
                    79:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1C:2C:85:86:15:22:8E:1C:CE:E7:A9:6C:19:E4:38:EE:F8:A8:CC
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131322e302f32332d3233203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:80:6a:be:a8:66:25:09:6f:21:40:e5:d7:03:3e:4a:ad:e6:
         b7:80:4a:06:52:d8:b6:42:95:5a:e1:b3:18:4d:e1:54:48:83:
         36:da:6c:16:ef:ce:40:1d:1d:8d:1b:25:58:c3:b0:ad:8c:2a:
         eb:e9:71:4e:5f:f4:aa:b8:23:36:10:ae:2f:3e:2b:7d:54:13:
         63:d1:bc:b5:56:fe:1b:d3:bb:a8:5a:9b:bc:ee:e5:f8:bf:67:
         3e:c4:8e:ee:75:e9:b4:f5:7d:68:71:93:67:bd:cb:27:a8:40:
         9f:d6:2e:3f:a9:99:8a:09:f2:7b:bf:61:38:39:7a:7f:af:07:
         10:46:b9:08:88:65:23:01:08:39:6d:19:30:38:62:09:db:da:
         d2:f5:45:33:1a:14:42:f4:29:c4:b9:cf:77:96:4f:03:c2:52:
         b1:fb:ae:e5:83:61:b7:75:6f:16:7b:8c:19:af:b1:cc:ed:26:
         5b:38:16:03:09:1a:3c:a9:d1:4d:91:14:f5:cf:b8:dc:fb:bd:
         02:fb:b0:52:d7:11:88:2c:0e:94:a4:ef:13:8c:78:7f:17:83:
         29:6e:5a:ac:d1:ed:df:13:8a:dc:ed:f0:44:b9:72:c2:48:00:
         78:30:3f:b8:04:a9:04:bd:3d:b0:30:cd:6e:a7:78:d8:64:37:
         be:a1:39:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:16:25 2025 by rpki-client