Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32342d3234203d3e20323633303539.roa
File:                     3138362e3233322e3135322e302f32342d3234203d3e20323633303539.roa (raw, json)
Hash identifier:          +5V878ipRDVKxutHqVvbquY5lRmi351KJOEwviak8DM=
Subject key identifier:   3C:43:EB:0D:EA:70:EA:29:03:CA:E7:5D:2B:8B:CD:84:A7:C1:87:0A
Certificate issuer:       /CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Certificate serial:       7D45116CC1CAEB03B319A0194713679BBE34D3A9
Authority key identifier: 87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32342d3234203d3e20323633303539.roa
Signing time:             Thu 17 Jul 2025 18:36:48 +0000
ROA not before:           Thu 17 Jul 2025 18:31:48 +0000
ROA not after:            Thu 16 Jul 2026 18:36:48 +0000
asID:                     263059
IP address blocks:        186.232.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 23:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:45:11:6c:c1:ca:eb:03:b3:19:a0:19:47:13:67:9b:be:34:d3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
        Validity
            Not Before: Jul 17 18:31:48 2025 GMT
            Not After : Jul 16 18:36:48 2026 GMT
        Subject: CN=3C43EB0DEA70EA2903CAE75D2B8BCD84A7C1870A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:b6:a5:14:06:c9:60:88:0f:45:6a:d3:3a:
                    55:23:3a:2f:0b:e1:14:05:f0:80:a8:a1:bd:97:ca:
                    40:38:a4:6d:9d:86:0e:1a:f0:8e:3f:00:9b:7b:83:
                    7f:d6:cc:2c:e1:fc:b2:39:3c:39:cd:02:5b:74:57:
                    ec:9b:d6:e7:94:ca:8d:2b:dd:c6:2c:0b:65:14:0e:
                    08:ab:86:4a:02:45:7e:42:48:d2:1d:6f:a8:16:86:
                    75:ca:29:ac:20:ee:8d:12:17:7e:e7:40:a2:f5:75:
                    c5:5b:80:ce:29:d0:3e:13:ff:e2:76:ca:6a:99:a8:
                    09:fd:77:54:6a:23:d4:db:24:63:4b:43:e4:f0:a5:
                    b1:b0:13:af:da:32:b8:0b:00:25:44:0e:92:e9:f6:
                    15:8e:74:18:c3:80:33:97:ca:49:4e:2a:b1:2b:99:
                    c4:c7:3b:2d:48:d6:22:ac:08:13:80:d6:1a:eb:c3:
                    cf:16:0f:24:a7:60:34:bf:a9:8e:e7:eb:77:cf:ac:
                    58:6b:f1:e9:63:06:93:9f:64:c2:50:4a:61:73:7f:
                    4a:49:94:26:1a:aa:66:8f:b9:d8:df:da:2c:ff:89:
                    62:7b:39:28:80:b6:78:f5:f0:9c:c3:da:cd:bc:d1:
                    eb:fa:e5:a4:b7:b4:21:97:c8:40:10:e4:13:46:d6:
                    63:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:43:EB:0D:EA:70:EA:29:03:CA:E7:5D:2B:8B:CD:84:A7:C1:87:0A
            X509v3 Authority Key Identifier:
                keyid:87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32342d3234203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:1f:23:3f:f6:ba:8b:ab:ed:2a:a7:5b:09:c0:ed:b1:bc:e2:
         c5:0c:f9:a3:56:e1:7f:dc:3e:1e:6a:ad:c0:ef:26:7e:f8:ac:
         44:a9:38:12:6d:4f:7f:52:6d:7f:7a:fa:c5:6e:99:35:bd:a1:
         2c:dc:02:3c:76:70:01:93:30:d0:d5:cf:d4:0d:22:37:ea:26:
         e5:cf:db:04:c8:cc:f5:e6:88:86:d3:38:da:11:e1:c3:81:9e:
         07:80:c1:5f:77:9e:d1:f9:bc:5d:2d:89:c6:c5:4c:13:c9:2c:
         05:72:ed:40:ba:67:a3:e9:d0:99:04:e1:ed:ba:18:80:c4:bf:
         0f:15:08:42:a6:c1:6b:be:45:a1:f1:02:f1:68:37:63:9f:c7:
         4d:85:d9:3a:38:4c:e0:76:db:ab:b1:1d:d5:38:87:52:cf:32:
         00:60:57:1b:09:e4:84:19:e2:75:01:ee:ff:5a:fd:6b:74:2a:
         72:b8:67:cf:74:56:b9:fb:6e:62:fc:0c:01:66:03:27:bb:bb:
         58:97:ac:8d:d9:e4:87:fa:ce:e4:42:94:b6:55:07:7c:c3:d7:
         92:bb:7d:87:dc:86:16:03:9b:01:91:da:6a:e4:83:b2:a1:0c:
         b2:9c:3a:52:94:c6:c9:f4:36:57:08:df:ed:8a:e4:b2:1d:f5:
         6d:18:1e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:01:47 2025 by rpki-client