Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e382e302f32332d3233203d3e203533313536.roa
File:                     3138362e3231312e382e302f32332d3233203d3e203533313536.roa (raw, json)
Hash identifier:          2oaK3wihlHswiLJmuCTKtwkfmTYxjiknhWTkJtp+OHU=
Subject key identifier:   8B:9C:32:32:69:1E:8C:A0:74:B3:40:2B:D9:1F:34:E7:BD:FF:37:49
Certificate issuer:       /CN=2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1
Certificate serial:       200535D4FD36A50B4173BDF7CA784172824ED65F
Authority key identifier: 2A:B3:5A:CD:D4:03:E3:46:BD:D5:B7:C6:86:CF:CF:92:18:AB:B2:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e382e302f32332d3233203d3e203533313536.roa
Signing time:             Sat 12 Jul 2025 14:27:58 +0000
ROA not before:           Sat 12 Jul 2025 14:22:58 +0000
ROA not after:            Sat 11 Jul 2026 14:27:58 +0000
asID:                     53156
IP address blocks:        186.211.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 12:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:05:35:d4:fd:36:a5:0b:41:73:bd:f7:ca:78:41:72:82:4e:d6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1
        Validity
            Not Before: Jul 12 14:22:58 2025 GMT
            Not After : Jul 11 14:27:58 2026 GMT
        Subject: CN=8B9C3232691E8CA074B3402BD91F34E7BDFF3749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2f:51:5f:11:5c:2f:93:4d:22:aa:06:5a:02:
                    1f:c2:a9:4c:1f:f8:e5:13:af:0f:22:7f:32:fb:31:
                    b8:e9:af:ff:c6:ac:37:75:24:d6:bc:66:d0:c7:73:
                    c0:6c:15:81:c5:cd:ad:44:ea:a2:02:5f:f5:94:56:
                    c4:6c:97:0b:a9:be:1c:ea:4b:9a:6b:1d:21:7e:87:
                    07:a5:94:ad:e5:0a:78:63:21:d5:2b:72:cf:7b:0a:
                    47:00:8c:29:d6:03:09:52:77:8b:99:2d:35:48:60:
                    64:90:ad:18:a9:fb:79:b9:74:2b:09:20:92:bf:fd:
                    f3:63:52:16:97:61:fa:fb:77:31:fd:4d:5d:61:e0:
                    b1:8d:be:b6:7c:9e:37:5e:de:06:f0:2a:1f:05:c5:
                    4e:1d:ea:b3:bb:4f:9c:cc:e1:9b:88:ac:db:d1:f5:
                    0e:56:bf:c3:56:bb:e3:42:b5:b9:29:fd:07:6d:bb:
                    c1:1f:64:fc:d3:e1:8b:dc:ce:70:8c:92:de:cf:2b:
                    48:1f:bf:1e:9c:bb:fb:bf:4f:f6:e6:26:7b:7c:40:
                    2e:36:63:9f:c8:dd:b4:bd:ab:66:99:ee:46:c5:91:
                    b3:82:1d:a1:66:45:be:ba:8a:95:23:7d:76:8d:eb:
                    1e:d9:3e:0f:35:ab:1a:cb:10:0a:16:01:b7:a4:ff:
                    b3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9C:32:32:69:1E:8C:A0:74:B3:40:2B:D9:1F:34:E7:BD:FF:37:49
            X509v3 Authority Key Identifier:
                keyid:2A:B3:5A:CD:D4:03:E3:46:BD:D5:B7:C6:86:CF:CF:92:18:AB:B2:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e382e302f32332d3233203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:f7:02:47:4b:1b:2d:b2:5e:b7:14:60:7e:28:d0:b1:e2:ff:
         4d:63:db:f8:c1:7a:59:b9:08:fb:1c:b0:a7:61:f6:0b:63:e7:
         f4:3c:9c:63:59:b3:ea:8d:dc:05:6a:76:9c:10:1c:0d:dc:17:
         44:23:58:65:a3:48:7b:5b:55:cf:d7:ca:59:ae:08:c8:7d:f8:
         5b:11:c4:5a:29:22:a1:27:ae:dd:cd:fe:c5:88:7f:26:c1:64:
         ae:f4:8d:ca:d5:45:45:6c:42:c7:ed:68:c2:29:6e:38:a9:15:
         ab:95:b8:4e:f7:ea:e3:ec:33:dc:95:ab:f8:19:2b:bc:f1:42:
         77:29:53:71:1b:c5:0e:f9:c0:76:8f:98:d0:14:c7:f7:4e:05:
         94:48:67:2e:66:fa:32:57:c9:3a:ea:6f:f8:1e:50:ec:f4:cb:
         fe:9a:60:ef:fa:5c:d1:b2:a3:8a:61:71:d6:22:7d:bf:72:c2:
         fc:ad:3c:91:08:bb:b3:18:95:9e:c3:c2:b8:90:ea:fb:32:eb:
         aa:ed:b2:3a:4f:e8:e1:e6:7c:7f:c4:79:14:ae:5f:7d:94:01:
         43:42:ed:02:57:ea:10:00:7b:07:4a:ae:26:f5:45:a8:71:90:
         c8:9f:8b:2c:9e:6d:2b:6f:0d:d4:d0:36:fb:a9:03:aa:60:2b:
         7e:b6:51:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:49:31 2025 by rpki-client