Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131342e302f32332d3233203d3e20323632383132.roa
File:                     3138362e3235302e3131342e302f32332d3233203d3e20323632383132.roa (raw, json)
Hash identifier:          xrdvJIYhK1FCNf4q0rXtRbFFxMkw7Ap+vZeH7n20Jn0=
Subject key identifier:   D4:2E:A1:0C:D3:89:29:E1:DB:D9:2C:5A:58:D8:51:A6:8E:6F:FE:E8
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       676FA88BCFB85D9E6651E8490BC9F6D984FDD4AE
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131342e302f32332d3233203d3e20323632383132.roa
Signing time:             Mon 14 Jul 2025 15:31:04 +0000
ROA not before:           Mon 14 Jul 2025 15:26:04 +0000
ROA not after:            Mon 13 Jul 2026 15:31:04 +0000
asID:                     262812
IP address blocks:        186.250.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
                          rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 10:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6f:a8:8b:cf:b8:5d:9e:66:51:e8:49:0b:c9:f6:d9:84:fd:d4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Jul 14 15:26:04 2025 GMT
            Not After : Jul 13 15:31:04 2026 GMT
        Subject: CN=D42EA10CD38929E1DBD92C5A58D851A68E6FFEE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b1:3f:8a:10:fe:b8:89:56:9f:26:ca:2d:5c:
                    9f:86:1d:32:db:de:18:2c:a1:42:9f:65:f8:d0:3d:
                    4a:d5:4b:1c:9e:ab:89:cd:30:6c:50:d1:ed:90:88:
                    c3:a6:1d:9b:a8:bb:65:8d:3d:de:2e:2c:05:7d:77:
                    cc:ae:58:9b:0b:e3:ce:3d:09:3b:56:ad:be:ab:3b:
                    d3:d8:6d:37:19:7f:16:99:ef:ee:22:4d:a1:88:c2:
                    ef:77:80:5f:0b:16:24:ee:ea:9f:b9:e2:33:d7:c5:
                    ec:1b:73:e3:59:86:44:5f:9c:9b:03:a5:57:49:07:
                    de:df:33:39:cd:ca:da:13:cd:2c:06:8c:26:24:9b:
                    b2:9a:74:79:c8:0e:51:3c:81:d4:1a:38:12:69:7e:
                    79:41:6b:16:f4:28:f5:df:f3:4f:da:15:7c:97:83:
                    ef:09:f7:b6:d4:70:34:68:b2:f1:f8:23:8e:e9:8e:
                    4a:88:c8:eb:12:4c:dc:f6:54:98:4d:15:61:33:43:
                    9e:e4:79:a8:a3:1d:45:3b:5c:63:c4:a9:8c:aa:01:
                    ef:e8:10:58:7d:d3:39:2a:26:c5:02:ca:90:b8:2b:
                    b5:36:83:79:52:49:b8:70:07:6b:15:b2:5a:46:c3:
                    b3:f0:95:64:ea:df:15:f1:1b:6d:a6:03:e0:91:a6:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2E:A1:0C:D3:89:29:E1:DB:D9:2C:5A:58:D8:51:A6:8E:6F:FE:E8
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131342e302f32332d3233203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:af:9c:9f:22:90:3b:0d:bc:1a:98:dd:68:38:12:55:ba:2d:
         be:54:d4:42:20:9e:39:b9:9e:23:a3:b8:48:ca:87:ed:c9:03:
         bd:4e:c0:45:fd:a4:67:ef:45:46:e4:f0:85:6b:4e:1d:ad:14:
         1c:ae:90:d6:93:c7:b4:50:0b:fd:b5:00:86:92:8b:fd:de:c3:
         aa:d0:b2:66:75:11:0f:bb:9c:39:7a:e9:8f:5d:6b:69:78:18:
         4b:80:2b:b1:e1:7f:7e:11:c3:ee:1f:e3:f8:0d:38:f5:74:62:
         02:65:c7:cb:0a:6d:dc:41:4b:ac:9e:41:01:23:0c:d2:7d:fe:
         4d:94:2e:dc:43:91:6a:e1:2d:70:22:ae:c4:bf:24:50:44:2b:
         22:7d:54:05:5f:10:d4:75:28:dd:9b:c6:76:70:0a:e4:50:67:
         1f:90:64:61:62:bb:de:24:aa:d5:06:bb:32:8a:3d:0d:c9:34:
         3a:b2:cf:d6:20:af:af:e5:8a:6e:1d:5a:a2:87:46:b1:eb:56:
         99:ce:bc:23:0f:5d:6c:cb:73:a5:3b:f7:03:bd:c5:39:49:ea:
         1a:59:59:be:8a:45:bb:c6:99:8e:15:a5:75:bb:98:0e:88:fb:
         98:6f:98:e0:4f:83:2f:11:37:f4:9d:60:40:ce:e4:e5:bd:40:
         78:c4:a4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:50:04 2025 by rpki-client