Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e302e302f32332d3233203d3e203533313536.roa
File:                     3138362e3231312e302e302f32332d3233203d3e203533313536.roa (raw, json)
Hash identifier:          xICYGXrjJtweyjpE/CmKCOLNmaqYivCQ4Rs7/CWpTdE=
Subject key identifier:   57:B6:6B:1C:50:ED:BF:58:4F:FB:3D:7A:F8:E8:CD:F6:9F:F3:B0:CE
Certificate issuer:       /CN=2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1
Certificate serial:       5C7B5FDB2321F1FDFB001DEBEA96BCBC4B87E6F2
Authority key identifier: 2A:B3:5A:CD:D4:03:E3:46:BD:D5:B7:C6:86:CF:CF:92:18:AB:B2:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e302e302f32332d3233203d3e203533313536.roa
Signing time:             Sat 12 Jul 2025 14:27:40 +0000
ROA not before:           Sat 12 Jul 2025 14:22:40 +0000
ROA not after:            Sat 11 Jul 2026 14:27:40 +0000
asID:                     53156
IP address blocks:        186.211.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 12:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7b:5f:db:23:21:f1:fd:fb:00:1d:eb:ea:96:bc:bc:4b:87:e6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1
        Validity
            Not Before: Jul 12 14:22:40 2025 GMT
            Not After : Jul 11 14:27:40 2026 GMT
        Subject: CN=57B66B1C50EDBF584FFB3D7AF8E8CDF69FF3B0CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ea:9f:8a:44:5b:af:b0:91:76:71:d9:11:90:
                    48:83:30:e4:0a:8a:37:eb:19:19:04:16:49:d0:27:
                    75:30:d7:22:61:3d:7a:3d:9d:92:4b:4e:80:da:eb:
                    f5:8d:c4:9e:17:0f:d2:8a:7d:b3:6d:da:ae:75:f1:
                    89:c9:61:18:7f:b1:e6:59:4b:b7:f9:0e:2b:c2:ab:
                    29:0d:da:59:90:4c:d0:c8:38:4e:2c:4d:38:80:05:
                    65:34:55:62:f3:0f:ce:0d:58:3c:9f:73:0b:c2:c2:
                    f5:c2:1f:aa:29:95:7e:16:27:04:37:f7:9a:d6:72:
                    2f:b7:7b:5b:2e:dd:d2:b2:55:c0:eb:af:0d:93:c9:
                    af:4c:67:51:2f:b3:90:c4:89:06:c0:1f:5a:3d:ce:
                    89:78:96:a6:e0:60:84:6d:01:4d:8b:da:68:bc:fd:
                    a5:85:4f:cb:41:f9:9f:69:80:db:25:f9:88:51:fc:
                    b3:00:38:87:b4:63:20:4e:b9:5a:3d:08:ff:43:3e:
                    16:4e:0e:ec:a9:0e:33:c4:aa:1b:b2:8e:ce:79:d3:
                    1a:c6:d4:f1:3e:1c:6a:b7:6d:ea:66:d6:d6:7f:f9:
                    f5:6a:6d:b7:24:e6:5c:3e:14:fe:25:58:f4:f7:59:
                    9e:fd:e5:4b:42:88:0e:00:31:be:a4:fa:3a:72:e9:
                    22:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B6:6B:1C:50:ED:BF:58:4F:FB:3D:7A:F8:E8:CD:F6:9F:F3:B0:CE
            X509v3 Authority Key Identifier:
                keyid:2A:B3:5A:CD:D4:03:E3:46:BD:D5:B7:C6:86:CF:CF:92:18:AB:B2:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e302e302f32332d3233203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:ed:69:01:a2:f5:46:ad:34:e2:02:3b:0d:8a:b9:32:b0:65:
         59:5e:ea:31:d0:e3:eb:81:b2:ad:8f:5b:b1:9f:a1:41:bb:4b:
         ea:89:33:1c:d4:c6:d1:d0:05:83:7f:1d:2e:e8:c4:84:0d:26:
         67:1e:97:db:a7:3a:9b:2f:a7:a6:ab:45:c7:df:11:e3:b9:e0:
         f7:88:f4:5f:4b:9c:99:b4:5d:fc:2e:5a:17:01:24:2a:7b:cd:
         2a:01:5a:6e:19:e0:c8:12:aa:92:84:3b:df:e2:7b:20:c6:07:
         64:2d:0f:a2:83:fd:c5:4c:68:d9:69:a0:44:50:2c:ae:49:fb:
         36:4c:6f:1a:dd:38:fe:3c:01:01:62:82:01:04:76:23:b6:ec:
         49:49:00:f0:c9:96:16:7a:1d:8d:c4:f6:f9:48:d4:1b:70:a8:
         d3:1b:4c:00:b1:3e:de:4d:e9:80:99:a8:d9:1b:ed:40:0d:39:
         85:19:53:8e:8c:35:19:94:1d:37:65:a6:27:0a:25:4a:34:0c:
         a2:0e:2d:f3:f4:cd:46:08:5e:95:08:c7:96:b1:d4:da:32:02:
         51:cc:68:1c:cf:c9:02:6d:8f:60:42:c4:1a:2a:8e:1c:7b:2d:
         fd:34:63:cf:2a:e3:3f:08:91:ce:e7:0f:11:42:e1:fa:b5:a8:
         d5:16:6f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:49:38 2025 by rpki-client