Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e362e302f32332d3233203d3e203533313536.roa
File:                     3138362e3231312e362e302f32332d3233203d3e203533313536.roa (raw, json)
Hash identifier:          51ehLB+dQFKh/r0wBBGMG17YScMUaXmz6Ed6DxbpjwY=
Subject key identifier:   CA:4A:F9:97:60:1A:A2:BA:92:78:61:79:CB:23:47:A0:44:8F:9A:89
Certificate issuer:       /CN=2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1
Certificate serial:       0CED9AB653C7FAAA55F0CA31FFBB35B43B477764
Authority key identifier: 2A:B3:5A:CD:D4:03:E3:46:BD:D5:B7:C6:86:CF:CF:92:18:AB:B2:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e362e302f32332d3233203d3e203533313536.roa
Signing time:             Sat 12 Jul 2025 14:27:54 +0000
ROA not before:           Sat 12 Jul 2025 14:22:54 +0000
ROA not after:            Sat 11 Jul 2026 14:27:54 +0000
asID:                     53156
IP address blocks:        186.211.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 12:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ed:9a:b6:53:c7:fa:aa:55:f0:ca:31:ff:bb:35:b4:3b:47:77:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1
        Validity
            Not Before: Jul 12 14:22:54 2025 GMT
            Not After : Jul 11 14:27:54 2026 GMT
        Subject: CN=CA4AF997601AA2BA92786179CB2347A0448F9A89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:31:5f:93:03:70:ba:13:59:0f:b3:dd:13:4c:
                    7e:e8:e8:cc:5b:85:4d:7d:9b:76:69:74:67:d0:02:
                    df:98:88:8b:4a:a4:8c:d6:7d:b5:a6:04:77:44:a3:
                    51:04:14:e4:83:a0:89:20:3c:c6:5d:c8:90:7c:10:
                    b4:07:f5:6f:4d:5a:64:61:f0:ca:2d:f9:c2:b6:4e:
                    55:59:a0:7b:39:4f:35:e4:f1:71:28:9e:24:f8:53:
                    00:5d:ff:43:4a:74:87:39:11:26:1b:5b:d2:ee:93:
                    b7:88:7a:22:4c:4b:68:4a:5a:17:8a:38:0a:e6:41:
                    cf:8d:a5:96:a0:f2:57:3f:30:c6:1a:d2:65:96:38:
                    cd:2c:46:42:c0:8e:9e:56:63:93:e0:f7:bc:e3:42:
                    a8:53:e0:86:3c:ca:ee:6d:bd:1d:61:fe:ee:67:8c:
                    33:bd:18:85:bc:84:98:a9:20:3d:fa:9f:ce:2c:37:
                    d8:a7:f1:0a:75:9f:3b:dc:24:86:38:ed:bf:84:25:
                    f7:d7:3a:22:45:b8:2f:ed:cc:d5:1f:c9:25:5d:60:
                    dd:12:0b:42:f7:56:9e:ef:c6:59:11:bd:4c:90:2e:
                    93:97:cd:a7:e2:7f:c9:f2:8e:c6:85:f3:6f:be:92:
                    67:79:00:cb:8f:8e:0d:de:f6:14:06:d9:2d:44:73:
                    54:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4A:F9:97:60:1A:A2:BA:92:78:61:79:CB:23:47:A0:44:8F:9A:89
            X509v3 Authority Key Identifier:
                keyid:2A:B3:5A:CD:D4:03:E3:46:BD:D5:B7:C6:86:CF:CF:92:18:AB:B2:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e362e302f32332d3233203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:d4:83:87:63:f2:29:7f:be:99:51:d6:3e:b9:e3:e7:5e:94:
         38:b6:0b:37:4c:17:fe:0c:6a:d0:53:cd:bb:e4:52:62:c7:f2:
         50:73:a2:74:40:45:8b:e8:a5:34:71:a5:a4:69:cf:a1:6e:7a:
         ab:4d:2d:cb:e8:5b:1d:62:92:3f:7e:5d:f4:c6:fb:75:a8:45:
         39:11:8d:a0:23:15:93:7b:b4:81:38:45:ec:0a:00:29:d8:d3:
         22:1c:b2:6c:72:a3:06:f9:cb:a5:6f:e8:30:fa:78:1b:0d:a6:
         20:80:28:ba:b7:55:86:98:88:f8:83:16:77:d1:fb:2c:a0:30:
         8e:28:83:29:cd:40:e8:5e:8c:36:2e:75:d3:0a:c4:dd:16:ff:
         49:b2:df:18:1f:a1:11:fd:6b:ad:62:b1:72:8a:2b:eb:d0:f9:
         a3:58:95:83:51:a1:05:6f:fb:e2:49:46:e6:be:0c:3c:6d:ff:
         41:21:47:39:f2:85:32:8c:77:94:39:57:f4:21:2f:86:e0:45:
         94:e0:37:27:c0:87:b8:75:12:c6:44:ca:74:66:6b:73:d7:a0:
         73:19:4a:2b:8f:09:a6:56:f1:28:d7:4a:5a:d3:20:f8:db:15:
         80:75:20:ea:e2:18:ea:a3:44:21:ac:9a:59:64:b3:94:f7:0c:
         0e:e7:4e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:12:38 2025 by rpki-client