Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135352e302f32342d3234203d3e20323633303539.roa
File:                     3138362e3233322e3135352e302f32342d3234203d3e20323633303539.roa (raw, json)
Hash identifier:          6o4QeBHd4KiKg3t/s9TNh6IUkgDmIFQuAlz1dadmaaM=
Subject key identifier:   FF:98:FB:45:32:F1:FE:BD:92:2A:83:1F:BD:13:04:70:A6:1F:D5:F0
Certificate issuer:       /CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Certificate serial:       23DA7ED8AD3C7494B9B961AFD41871A23BB7856C
Authority key identifier: 87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135352e302f32342d3234203d3e20323633303539.roa
Signing time:             Thu 17 Jul 2025 18:36:59 +0000
ROA not before:           Thu 17 Jul 2025 18:31:59 +0000
ROA not after:            Thu 16 Jul 2026 18:36:59 +0000
asID:                     263059
IP address blocks:        186.232.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 04:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:da:7e:d8:ad:3c:74:94:b9:b9:61:af:d4:18:71:a2:3b:b7:85:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
        Validity
            Not Before: Jul 17 18:31:59 2025 GMT
            Not After : Jul 16 18:36:59 2026 GMT
        Subject: CN=FF98FB4532F1FEBD922A831FBD130470A61FD5F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:0f:b0:cd:a1:63:ee:f1:f1:45:8a:e3:98:
                    d9:02:dc:e6:ad:00:62:3c:c1:3b:57:e9:71:5c:a4:
                    0d:1c:5e:3a:40:d5:e5:05:b7:db:38:83:8b:1d:da:
                    1f:f5:44:e0:c5:2b:cb:4b:ae:8e:37:14:d0:18:d2:
                    6e:8f:03:56:13:3e:aa:2e:e6:02:18:6a:81:0c:ba:
                    87:76:ae:e8:86:f0:82:c4:b3:e5:0a:75:f5:d9:ad:
                    36:77:71:bd:a7:46:a8:a8:86:a1:7a:9e:f9:62:97:
                    f4:97:65:38:b5:6b:f6:e4:5d:bd:eb:87:9a:14:55:
                    4e:9e:7c:fb:97:61:46:86:33:a4:71:3f:63:89:6c:
                    ed:b6:c8:04:fa:63:a0:58:1f:4d:76:7a:26:9c:33:
                    99:f3:b3:32:0b:69:94:ba:94:b4:24:77:47:a8:f9:
                    7f:22:68:da:e9:e6:da:92:39:c4:f4:79:50:79:bf:
                    75:5c:60:47:5f:0c:2b:75:45:85:92:d8:f3:3b:ce:
                    ce:a4:79:ac:ad:8d:bf:7d:e2:c5:f5:20:b1:69:8e:
                    fe:76:83:d7:4e:a9:a1:23:aa:44:24:c1:e7:e9:1f:
                    b1:4d:20:19:75:16:4b:82:a6:66:65:14:eb:5b:8e:
                    ad:40:ec:dd:86:a1:59:d9:a3:19:88:04:d3:07:95:
                    80:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:98:FB:45:32:F1:FE:BD:92:2A:83:1F:BD:13:04:70:A6:1F:D5:F0
            X509v3 Authority Key Identifier:
                keyid:87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135352e302f32342d3234203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:98:9e:a1:1d:94:e8:b7:b5:85:18:c5:a3:fe:2c:13:2f:f7:
         1b:5c:4b:2b:57:3f:bc:bc:b0:be:4a:96:9a:b7:29:8f:d2:1c:
         55:64:1a:82:18:0f:cf:e5:34:25:d7:29:2d:b5:6b:63:f0:b9:
         1d:94:2c:ab:d4:38:23:7f:20:59:75:42:c4:9d:b6:bb:87:2e:
         7a:ca:8e:fd:3d:6e:1b:19:6c:41:72:04:63:1b:ea:11:f3:0d:
         8e:77:94:8e:5d:53:6c:7b:04:f3:c5:1a:64:2b:a1:ea:48:0a:
         54:15:09:33:15:24:ad:dd:89:6c:27:dc:19:96:54:cd:de:45:
         d8:30:d8:b8:c7:ba:7a:3b:b9:4d:34:b8:4e:7a:c8:8c:de:45:
         ec:73:79:f2:fb:05:a6:5b:0b:44:23:c1:24:81:1b:da:4e:6e:
         73:62:f4:0b:3c:50:d6:38:71:b5:e9:d9:4a:ab:7b:54:ee:ab:
         83:2c:38:47:aa:80:d2:ca:73:8e:d4:86:fd:3c:26:44:0f:39:
         74:95:8b:94:30:92:b5:02:cf:fe:ae:c8:9e:13:82:87:0b:cb:
         1f:1e:6c:3d:71:68:e2:a0:ad:8d:39:3f:06:1c:47:59:a8:0d:
         9d:ba:a9:26:8f:3d:46:b7:7a:04:0d:2d:bd:33:ec:da:21:18:
         30:ab:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:09:29 2025 by rpki-client