Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/3138362e3233362e3234302e302f32302d3332203d3e20323633363338.roa
File:                     3138362e3233362e3234302e302f32302d3332203d3e20323633363338.roa (raw, json)
Hash identifier:          BaDZDEaLEJqKKBaZAkDEbhGmcWGD4IPTJSHVw5yAr+8=
Subject key identifier:   F9:B6:8E:E9:EA:B6:5C:63:CF:F0:1C:1D:86:8F:24:14:DB:D7:5E:91
Certificate issuer:       /CN=783FF5947307C60922650955561D38DF088C82A7
Certificate serial:       092C02562C7EA3E5F3437E89FF82E425D533D786
Authority key identifier: 78:3F:F5:94:73:07:C6:09:22:65:09:55:56:1D:38:DF:08:8C:82:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783FF5947307C60922650955561D38DF088C82A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/3138362e3233362e3234302e302f32302d3332203d3e20323633363338.roa
Signing time:             Thu 31 Jul 2025 13:12:39 +0000
ROA not before:           Thu 31 Jul 2025 13:07:39 +0000
ROA not after:            Thu 30 Jul 2026 13:12:39 +0000
asID:                     263638
IP address blocks:        186.236.240.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/783FF5947307C60922650955561D38DF088C82A7.crl
                          rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/783FF5947307C60922650955561D38DF088C82A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783FF5947307C60922650955561D38DF088C82A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 11:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2c:02:56:2c:7e:a3:e5:f3:43:7e:89:ff:82:e4:25:d5:33:d7:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783FF5947307C60922650955561D38DF088C82A7
        Validity
            Not Before: Jul 31 13:07:39 2025 GMT
            Not After : Jul 30 13:12:39 2026 GMT
        Subject: CN=F9B68EE9EAB65C63CFF01C1D868F2414DBD75E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:2e:f2:dd:52:ba:27:d7:4a:57:38:c0:e9:
                    23:35:ee:ab:65:17:73:ee:3b:6d:f0:5a:4d:42:69:
                    55:d5:50:4e:0b:ce:e2:17:77:0a:1c:c3:3a:fc:1b:
                    34:2f:2a:39:4c:76:48:25:b7:41:f4:86:24:68:97:
                    28:c2:fc:b9:af:0b:da:ad:2a:31:9d:00:7e:1d:c3:
                    56:25:68:2a:3e:bd:41:8b:07:71:23:c0:1b:10:f8:
                    f1:90:23:49:81:43:1a:63:c4:63:a4:58:a6:40:75:
                    ce:ce:d5:0f:57:92:f2:68:e4:8b:92:43:24:b7:a0:
                    f7:bb:5d:ac:58:8c:8b:eb:c1:a5:6c:bb:a2:17:2a:
                    25:0e:9b:dd:53:bd:d8:be:b6:95:a4:d9:3c:68:eb:
                    67:4f:6c:0c:5f:89:bc:7e:1f:1a:b5:81:84:b4:61:
                    b8:9a:00:54:a6:c9:d3:10:32:74:ed:af:c4:87:7e:
                    b9:ee:ef:7f:87:b4:0c:25:24:85:6f:04:48:94:0d:
                    53:d0:f0:2d:37:66:61:be:55:18:f7:da:4c:0e:06:
                    0e:c0:18:62:8d:4a:82:ca:28:14:1a:1b:f7:c7:73:
                    3d:e4:7b:b9:f8:cb:58:6c:22:a6:10:cb:43:6b:8d:
                    a8:4e:d8:7c:b6:3d:6e:f2:ac:bd:4d:14:0d:47:fb:
                    9c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B6:8E:E9:EA:B6:5C:63:CF:F0:1C:1D:86:8F:24:14:DB:D7:5E:91
            X509v3 Authority Key Identifier:
                keyid:78:3F:F5:94:73:07:C6:09:22:65:09:55:56:1D:38:DF:08:8C:82:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/783FF5947307C60922650955561D38DF088C82A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783FF5947307C60922650955561D38DF088C82A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/3138362e3233362e3234302e302f32302d3332203d3e20323633363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:0a:25:e4:48:1b:c8:a7:ce:2b:0f:0f:cf:b0:5f:f2:4b:82:
         06:15:af:a6:4d:6c:90:6d:2a:ec:11:b4:83:e9:9e:31:3c:51:
         ea:c5:e6:52:c9:c0:3f:10:2d:9b:12:3d:99:9f:d2:ba:95:1b:
         eb:ea:b5:7c:10:02:0d:f8:ec:66:1e:9f:5c:40:97:09:6f:ef:
         0b:fb:3c:87:bf:3c:76:a8:e7:20:21:11:2d:71:f9:4b:54:1c:
         d1:14:cf:70:7e:ab:10:73:70:9c:8d:71:03:bc:8b:2c:7c:b9:
         b4:94:05:d6:ac:19:ff:d4:e4:95:8c:da:02:55:50:f4:78:4b:
         73:70:89:64:d1:04:ac:68:c4:50:a0:54:bb:f5:11:73:74:8b:
         96:4c:ef:8f:37:e2:36:74:ab:02:36:57:59:09:5a:86:d0:47:
         00:94:bc:d2:e9:ca:1f:06:11:2e:95:a7:76:a0:c2:ea:05:a7:
         1b:9e:8c:78:ff:e8:ce:7f:fd:98:2e:d2:9e:8f:0d:0b:c9:9b:
         71:6f:01:da:ab:83:b2:a4:d3:2f:47:29:dc:63:f2:8f:b9:91:
         fb:83:a8:a0:ab:cc:be:85:46:4c:3a:7f:3e:aa:e7:c0:6a:75:
         27:d7:c2:c2:30:d4:54:c2:40:aa:b7:bc:82:14:38:e2:25:dd:
         d6:09:20:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:51:03 2025 by rpki-client