Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135392e302f32342d3234203d3e20323633303539.roa
File:                     3138362e3233322e3135392e302f32342d3234203d3e20323633303539.roa (raw, json)
Hash identifier:          4uhCZYHkP59+/b56SvBa1plO9BvZ/BIlQuf50+UsHF8=
Subject key identifier:   3D:5F:C1:B3:26:DF:D7:66:3C:2C:DD:D7:B8:A5:14:22:E8:8C:50:48
Certificate issuer:       /CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Certificate serial:       61D48CC6C80E3C7016C19CF1EA02372E24218070
Authority key identifier: 87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135392e302f32342d3234203d3e20323633303539.roa
Signing time:             Thu 17 Jul 2025 18:35:44 +0000
ROA not before:           Thu 17 Jul 2025 18:30:44 +0000
ROA not after:            Thu 16 Jul 2026 18:35:44 +0000
asID:                     263059
IP address blocks:        186.232.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 04:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d4:8c:c6:c8:0e:3c:70:16:c1:9c:f1:ea:02:37:2e:24:21:80:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
        Validity
            Not Before: Jul 17 18:30:44 2025 GMT
            Not After : Jul 16 18:35:44 2026 GMT
        Subject: CN=3D5FC1B326DFD7663C2CDDD7B8A51422E88C5048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d7:a5:e8:73:5f:06:e0:6f:62:85:43:5d:d5:
                    0f:6d:eb:1e:ec:45:5b:1a:70:79:54:db:05:29:2a:
                    24:09:a3:25:5c:e4:68:b8:3f:68:99:f4:a9:ba:fb:
                    04:92:37:7f:19:2e:19:69:b5:be:b8:cd:22:7d:95:
                    fa:d6:ea:bc:26:6a:aa:41:44:a5:75:a2:9d:33:ef:
                    b1:7f:a5:82:94:ef:72:37:bc:a8:bc:54:ab:1a:54:
                    ab:ec:9c:73:a7:e7:47:63:e6:e7:f3:2e:81:41:b1:
                    42:30:ad:7e:e4:21:de:7c:36:1b:b0:94:7c:59:1a:
                    18:ae:ad:ba:48:ed:35:8c:9c:0c:ee:db:67:89:eb:
                    fb:ea:e3:dc:4f:b2:b7:07:b6:9a:16:04:ba:53:76:
                    20:b5:20:1f:c6:d7:1b:d7:59:7c:96:9a:63:5a:f8:
                    3a:da:a5:f0:de:33:a3:fe:60:ca:d4:4e:a9:7d:4b:
                    df:7d:1b:7e:1e:a5:07:50:e0:bc:cd:b8:78:a2:33:
                    68:97:fe:e1:32:db:cd:1e:f6:52:6f:2e:e7:af:0e:
                    b2:16:57:bc:59:1d:04:4c:ac:55:23:ac:28:35:8b:
                    28:04:67:e4:44:7c:44:b1:bd:a8:ed:46:53:9c:ae:
                    59:3b:dd:50:91:54:f7:2b:47:66:f3:7f:23:4c:6e:
                    f5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5F:C1:B3:26:DF:D7:66:3C:2C:DD:D7:B8:A5:14:22:E8:8C:50:48
            X509v3 Authority Key Identifier:
                keyid:87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135392e302f32342d3234203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:08:4e:58:a7:b5:a6:21:45:4d:b8:20:f8:ea:fa:57:96:7d:
         78:40:ab:c6:bd:9b:b2:37:a2:51:5b:7f:58:23:fd:48:5f:a6:
         28:a0:73:42:fb:a2:b1:74:63:d9:23:0f:b1:b2:a7:0b:bc:53:
         d6:76:dd:0d:82:3d:10:32:43:40:01:5a:2c:07:f1:59:5a:32:
         2c:c9:6d:af:52:86:b8:a6:e9:c3:8c:54:19:13:7f:7a:2b:4f:
         6f:80:03:20:7a:4d:de:3e:e9:fc:20:a8:60:61:0a:d1:1e:91:
         1c:95:09:39:2d:c0:02:d4:f4:ec:6f:cc:7b:0f:12:23:e7:62:
         52:f7:50:6b:96:8a:b8:e7:ec:16:ed:96:da:4c:6c:6e:6d:9c:
         0c:3a:41:8e:60:f7:55:95:97:8a:e0:e2:e5:cf:1a:cc:67:b1:
         09:b8:9b:41:18:5f:fc:9b:9f:67:9b:d2:db:8e:c3:e6:38:72:
         2d:ad:31:4e:63:a3:e5:70:ec:8b:93:99:8b:22:35:e3:f2:f3:
         0d:50:54:e7:80:84:3d:40:68:a2:1b:99:ea:2c:cc:63:b1:9c:
         be:c6:4f:4d:de:1b:85:54:c0:59:98:83:53:4c:b7:cb:6f:39:
         c8:aa:6d:a9:99:2b:bb:67:79:58:03:ee:8c:1f:ea:f8:1c:81:
         ef:95:46:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:10:02 2025 by rpki-client