Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa
File:                     3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa (raw, json)
Hash identifier:          m3/bP4NEhoiytSahseKxcZg/eJ6qp2NCqroqnr8pJ0E=
Subject key identifier:   6F:0E:8E:57:20:CD:D6:3C:23:1A:69:13:D5:50:25:36:B3:AC:FE:81
Certificate issuer:       /CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Certificate serial:       709A42702A4E6E7220DFD5166978D534E0DC73DF
Authority key identifier: 87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa
Signing time:             Thu 17 Jul 2025 18:37:08 +0000
ROA not before:           Thu 17 Jul 2025 18:32:08 +0000
ROA not after:            Thu 16 Jul 2026 18:37:08 +0000
asID:                     263059
IP address blocks:        186.232.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 04:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9a:42:70:2a:4e:6e:72:20:df:d5:16:69:78:d5:34:e0:dc:73:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
        Validity
            Not Before: Jul 17 18:32:08 2025 GMT
            Not After : Jul 16 18:37:08 2026 GMT
        Subject: CN=6F0E8E5720CDD63C231A6913D5502536B3ACFE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:4e:e6:e0:24:aa:5a:42:c3:ec:7f:18:35:
                    3f:75:97:74:24:11:32:22:92:9d:81:ba:a3:a4:ca:
                    c9:35:83:39:03:e1:25:78:f7:59:0d:69:82:c7:60:
                    15:19:b9:00:d5:3d:62:7c:d8:2c:5d:0f:5b:b4:e0:
                    c8:ea:24:3b:57:0d:f3:88:88:cf:c8:af:f2:2a:ec:
                    9d:5b:a4:5d:15:b5:b1:8c:bf:87:a3:16:b4:db:8e:
                    90:e1:2a:b1:0b:9b:c2:e0:23:f1:31:ce:6a:76:02:
                    e6:67:12:54:71:2b:cf:d1:95:99:dd:a5:44:93:93:
                    9d:57:c7:6b:d8:20:ec:99:5c:7d:92:dd:3b:9a:6b:
                    1a:5a:b7:27:dc:30:0c:ca:d9:d6:96:3e:0b:ca:25:
                    50:ad:df:8f:f7:48:44:78:fc:f6:5d:3a:5b:0d:81:
                    12:59:dc:2d:71:c7:7d:ba:76:e8:51:71:74:f9:9f:
                    f5:b7:25:bd:af:f1:2d:69:19:be:81:67:cd:5f:04:
                    ee:19:b2:9d:f1:7d:fb:41:78:e7:61:33:c4:89:c2:
                    f2:65:a5:24:49:d3:ee:e0:96:20:89:73:9d:45:bd:
                    38:07:ae:ef:47:06:57:22:e8:4e:a7:7a:6b:82:5d:
                    e0:47:ed:2d:46:0c:b0:e6:c7:eb:61:48:d3:e5:79:
                    67:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0E:8E:57:20:CD:D6:3C:23:1A:69:13:D5:50:25:36:B3:AC:FE:81
            X509v3 Authority Key Identifier:
                keyid:87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:fa:95:ba:41:10:cb:9e:27:2a:19:ea:5a:8d:f7:6e:64:62:
         5f:40:42:13:94:0e:3d:e8:67:75:56:c9:98:1c:90:0f:66:77:
         9d:32:d7:5d:04:69:a2:77:92:eb:64:84:f5:f6:ea:32:d4:8d:
         77:95:02:27:12:8b:c7:03:29:05:38:81:b3:a1:b7:27:8f:38:
         9d:35:8f:f8:1b:13:b0:2c:c9:27:50:c6:6a:d3:95:b6:37:74:
         b8:16:86:be:d6:93:01:0f:41:85:b5:48:74:9f:ac:09:84:9e:
         b4:34:e7:1c:9a:4e:ea:e2:6a:52:a4:24:58:bf:f6:03:e6:7e:
         3b:e2:4c:a3:09:ce:5e:c7:d1:2c:23:3d:e1:1f:c1:d3:7b:93:
         89:18:6d:96:4c:73:ce:76:fc:f7:5f:0d:5e:87:60:19:b7:20:
         98:ca:74:af:c4:91:59:19:83:1e:b8:0d:29:b8:e9:23:fc:ed:
         d6:0d:ec:99:42:71:b0:15:39:99:5e:61:0f:bd:6d:e1:37:57:
         41:ce:ce:0a:6d:0d:f3:00:df:2a:32:bc:b8:6f:ac:9b:ab:fa:
         99:7c:0c:59:0f:90:55:fa:22:e0:4f:4f:63:6b:32:44:4a:4b:
         e8:64:38:87:83:19:d3:2a:bd:ed:4c:b4:46:56:11:ba:db:7b:
         95:42:6c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:06:39 2025 by rpki-client