Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32332d3233203d3e20323633303539.roa
File:                     3138362e3233322e3135322e302f32332d3233203d3e20323633303539.roa (raw, json)
Hash identifier:          mEP71tLmppNt8bM8tuUehW7C7dWWwgSbBT8rdk7f79U=
Subject key identifier:   6B:D5:26:C0:43:B5:AD:0A:B1:DF:1D:30:C4:BC:3A:8D:FB:AC:26:1D
Certificate issuer:       /CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Certificate serial:       300D7D699CFF090B21108A384C9BEB6C69990B78
Authority key identifier: 87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32332d3233203d3e20323633303539.roa
Signing time:             Thu 17 Jul 2025 18:36:45 +0000
ROA not before:           Thu 17 Jul 2025 18:31:45 +0000
ROA not after:            Thu 16 Jul 2026 18:36:45 +0000
asID:                     263059
IP address blocks:        186.232.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 04:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0d:7d:69:9c:ff:09:0b:21:10:8a:38:4c:9b:eb:6c:69:99:0b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
        Validity
            Not Before: Jul 17 18:31:45 2025 GMT
            Not After : Jul 16 18:36:45 2026 GMT
        Subject: CN=6BD526C043B5AD0AB1DF1D30C4BC3A8DFBAC261D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:75:dc:d0:6d:2f:90:b2:5d:41:2c:c0:81:
                    ad:5e:fe:1c:5f:34:f9:d1:da:7a:fa:87:21:52:fc:
                    3c:6a:60:8a:1c:de:3f:ef:ef:bd:e2:3f:1e:2c:eb:
                    e4:39:8e:09:6d:a3:34:2b:17:86:18:59:e5:98:5d:
                    db:a2:34:a2:19:f9:3c:76:b8:1b:34:da:07:2f:70:
                    b3:ee:e9:de:11:ab:2a:7d:a1:5b:48:77:77:24:ff:
                    62:a1:ae:7c:80:67:b9:91:fa:72:33:49:59:f7:bb:
                    d0:74:54:69:bc:61:58:ed:bd:51:31:fb:9f:38:ab:
                    e7:4e:94:36:28:fd:30:6a:79:14:c0:2a:6a:9b:f2:
                    c1:51:38:84:30:91:57:24:65:cb:52:9d:6e:e8:6f:
                    e2:f7:67:76:8a:7a:a3:c5:e6:b1:f3:1d:11:30:e8:
                    af:db:b0:6d:54:4b:8b:68:77:3b:bf:e6:45:f4:35:
                    75:e8:65:94:02:9e:04:a1:31:06:86:62:5f:3e:29:
                    62:4c:02:14:04:e8:7d:5b:64:cb:bd:37:55:36:9b:
                    b6:91:90:82:52:9b:07:ea:c4:57:58:c4:23:53:a1:
                    8c:5c:7c:1a:0b:33:28:86:aa:64:28:0d:1b:df:43:
                    03:96:0a:8b:0c:ee:99:1c:c6:1f:3f:3a:c3:32:e6:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D5:26:C0:43:B5:AD:0A:B1:DF:1D:30:C4:BC:3A:8D:FB:AC:26:1D
            X509v3 Authority Key Identifier:
                keyid:87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32332d3233203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:be:17:12:85:e3:2c:df:dd:f3:6a:e4:aa:fd:45:cd:e6:96:
         28:ab:42:58:93:3d:d3:03:15:91:64:ee:39:43:f5:2b:86:ee:
         0a:2a:72:e9:f5:c1:c0:e8:3d:3a:fd:8d:68:ff:ce:e6:78:db:
         93:db:5e:8e:5e:9e:9b:21:4e:32:a5:85:55:4e:f5:c3:f0:91:
         3d:76:13:42:0f:03:ac:80:4c:e7:2f:6c:3c:50:50:a7:e8:e5:
         e3:ba:52:43:9c:8d:c2:e7:b9:7d:0f:40:2a:8c:38:a6:af:02:
         a4:36:2f:95:82:a4:4f:9b:57:93:d4:d8:72:f3:ea:20:27:d7:
         39:25:d1:5e:fd:75:e7:00:24:47:05:4c:c8:b1:fc:ae:6c:0b:
         b8:bc:f2:81:56:09:29:f5:5e:5e:65:06:b6:a7:7f:4b:5f:06:
         c9:fd:74:a1:e5:4c:f7:b0:a0:05:14:1d:83:32:4e:d8:80:b5:
         27:71:0a:37:fe:b1:6c:14:f8:41:b4:74:02:b7:17:6a:03:e2:
         a4:b9:69:f0:3c:25:02:6b:78:24:97:50:73:0c:66:ad:75:7e:
         2f:3d:03:2a:27:45:01:61:1e:c8:e4:bc:a3:b9:db:71:86:48:
         31:52:b6:45:59:c2:74:65:9b:05:19:a1:17:0a:5f:43:10:48:
         81:c6:cb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:04:39 2025 by rpki-client