Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131322e302f32342d3234203d3e20323632383132.roa
File:                     3138362e3235302e3131322e302f32342d3234203d3e20323632383132.roa (raw, json)
Hash identifier:          VUCBveLJpCX+1/vO+Hn9bMxurfUEKMAtBYb9/GOKvQs=
Subject key identifier:   06:B3:45:A0:87:E6:62:65:7E:18:CD:CB:CD:40:D8:60:9F:C0:A8:8D
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       6CB1FDFF606E45BBE73824798BE0581C5DA8F3FB
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131322e302f32342d3234203d3e20323632383132.roa
Signing time:             Mon 14 Jul 2025 15:31:18 +0000
ROA not before:           Mon 14 Jul 2025 15:26:18 +0000
ROA not after:            Mon 13 Jul 2026 15:31:18 +0000
asID:                     262812
IP address blocks:        186.250.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
                          rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 10:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b1:fd:ff:60:6e:45:bb:e7:38:24:79:8b:e0:58:1c:5d:a8:f3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Jul 14 15:26:18 2025 GMT
            Not After : Jul 13 15:31:18 2026 GMT
        Subject: CN=06B345A087E662657E18CDCBCD40D8609FC0A88D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5b:29:ae:b2:34:8f:ea:e8:bb:5b:57:d5:8b:
                    b1:28:cd:f6:20:e2:7d:82:96:6a:d3:30:5f:cb:96:
                    b1:b3:51:3e:c4:e5:7a:7b:5e:63:59:4f:68:94:23:
                    a7:7b:ad:e4:e6:a0:6e:28:8f:c9:b5:fb:2b:13:8b:
                    e3:6b:ac:6c:da:8a:63:cd:06:df:e7:ea:2c:62:e2:
                    d1:dc:ff:e0:52:5e:80:28:94:bb:6e:ce:a2:95:92:
                    3c:90:d6:de:fe:df:0b:de:3a:c1:aa:43:86:25:ec:
                    dd:e4:06:f5:a4:b0:67:68:16:48:49:1c:28:12:e9:
                    9f:d3:c1:db:5b:27:76:10:57:09:7f:f1:ba:4e:7e:
                    b9:b3:a1:bc:64:85:2b:85:94:04:0f:25:6e:07:6f:
                    b0:e9:f6:2a:f0:ab:bb:43:ec:ae:fe:86:0e:c3:70:
                    04:27:2c:12:f4:75:a8:77:49:bd:91:ee:99:e8:34:
                    61:ac:58:c1:7c:94:a3:8c:01:c6:93:ed:b3:c3:fe:
                    a5:e6:d4:10:8b:cb:1d:5f:4c:b9:f6:3a:a4:eb:f3:
                    53:12:81:f8:2b:ed:5d:fd:63:c3:c2:b3:eb:a6:2a:
                    dc:27:0f:73:1c:35:a4:56:7d:c9:b0:1f:ff:90:d2:
                    68:f2:d1:e6:9b:2c:cc:1b:54:18:04:84:25:52:23:
                    b0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B3:45:A0:87:E6:62:65:7E:18:CD:CB:CD:40:D8:60:9F:C0:A8:8D
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131322e302f32342d3234203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:b2:30:47:21:42:0e:ec:8f:1c:1a:6b:69:67:19:8a:5d:52:
         b9:4a:1d:08:cc:b8:68:09:44:0d:42:c5:e2:74:2d:fc:6b:ae:
         06:8e:98:45:b5:20:81:41:44:91:51:12:85:c6:b8:c3:69:9f:
         21:02:df:4a:99:97:a0:4a:56:fb:46:58:ab:15:8c:99:e1:4e:
         cb:e1:ae:b0:fb:0f:93:61:84:d4:c5:dc:9e:38:00:f2:15:54:
         00:64:81:28:82:41:af:38:6e:53:0a:07:b5:cb:83:a9:b9:eb:
         10:c3:fb:25:bb:6e:1c:c0:90:26:49:4e:08:3e:97:8a:32:ca:
         bf:b4:7a:e8:d4:79:c8:dd:75:79:d6:af:b3:a8:c7:ff:92:31:
         0d:83:c1:62:34:82:04:01:85:50:69:0b:9a:ae:16:af:65:c3:
         48:4d:cf:1d:fd:66:4c:1f:b8:59:3e:9e:7b:88:b9:f5:92:6c:
         9c:ed:9a:76:cb:0e:97:54:23:21:4c:78:96:61:a5:1d:0b:0c:
         93:a1:69:c5:4a:74:ea:b7:b9:44:ef:05:47:63:88:ed:5d:6c:
         25:83:6b:6e:c7:c8:9f:89:2b:67:d1:38:58:bc:6a:c3:aa:c6:
         04:66:80:77:cc:86:be:e4:76:25:92:4e:5f:80:2b:8c:dd:22:
         70:b9:ff:3a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbLH9/2BuRbvnOCR5i+BYHF2o8/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThDNDBEODUxRUUwNkY3NDU0REU5NTg3QkQ4NzEwQ0Ez
RUFCODUzNjAeFw0yNTA3MTQxNTI2MThaFw0yNjA3MTMxNTMxMThaMDMxMTAvBgNV
BAMTKDA2QjM0NUEwODdFNjYyNjU3RTE4Q0RDQkNENDBEODYwOUZDMEE4OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/WymusjSP6ui7W1fVi7EozfYg
4n2ClmrTMF/LlrGzUT7E5Xp7XmNZT2iUI6d7reTmoG4oj8m1+ysTi+NrrGzaimPN
Bt/n6ixi4tHc/+BSXoAolLtuzqKVkjyQ1t7+3wveOsGqQ4Yl7N3kBvWksGdoFkhJ
HCgS6Z/TwdtbJ3YQVwl/8bpOfrmzobxkhSuFlAQPJW4Hb7Dp9irwq7tD7K7+hg7D
cAQnLBL0dah3Sb2R7pnoNGGsWMF8lKOMAcaT7bPD/qXm1BCLyx1fTLn2OqTr81MS
gfgr7V39Y8PCs+umKtwnD3McNaRWfcmwH/+Q0mjy0eabLMwbVBgEhCVSI7CDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUBrNFoIfmYmV+GM3LzUDYYJ/AqI0wHwYDVR0j
BBgwFoAUqMQNhR7gb3RU3pWHvYcQyj6rhTYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3JwZENGNVRqUVVndEI1dmJ5NGRMaU1TbkVFRjFrV0IzOHJyNjN3Nkx3
ZncvMC9BOEM0MEQ4NTFFRTA2Rjc0NTRERTk1ODdCRDg3MTBDQTNFQUI4NTM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4QzQwRDg1MUVFMDZGNzQ1
NERFOTU4N0JEODcxMENBM0VBQjg1MzYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NycGRDRjVUalFVZ3RCNXZieTRkTGlNU25FRUYxa1dCMzhycjYzdzZMd2Z3LzAv
MzEzODM2MmUzMjM1MzAyZTMxMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM4MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALr6cDANBgkqhkiG9w0BAQsFAAOCAQEAe7Iw
RyFCDuyPHBpraWcZil1SuUodCMy4aAlEDULF4nQt/GuuBo6YRbUggUFEkVEShca4
w2mfIQLfSpmXoEpW+0ZYqxWMmeFOy+GusPsPk2GE1MXcnjgA8hVUAGSBKIJBrzhu
UwoHtcuDqbnrEMP7JbtuHMCQJklOCD6XijLKv7R66NR5yN11edavs6jH/5IxDYPB
YjSCBAGFUGkLmq4Wr2XDSE3PHf1mTB+4WT6ee4i59ZJsnO2adssOl1QjIUx4lmGl
HQsMk6FpxUp06re5RO8FR2OI7V1sJYNrbsfIn4krZ9E4WLxqw6rGBGaAd8yGvuR2
JZJOX4ArjN0icLn/Og==
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:17:45 2025 by rpki-client