Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3138362e3139342e3133362e302f32322d3234203d3e203533313431.roa
File:                     3138362e3139342e3133362e302f32322d3234203d3e203533313431.roa (raw, json)
Hash identifier:          oXjm5UzF3qyypZeRSTvoHZK2uFPAU2d1Wlm6rw6hugk=
Subject key identifier:   A8:CB:08:E1:D7:67:5E:C8:EC:46:E6:37:2C:17:08:A2:90:0C:50:4F
Certificate issuer:       /CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
Certificate serial:       5A6DD6A8CCCB9014D49DEA3A8578555DC84271F3
Authority key identifier: 7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3138362e3139342e3133362e302f32322d3234203d3e203533313431.roa
Signing time:             Wed 02 Jul 2025 13:33:31 +0000
ROA not before:           Wed 02 Jul 2025 13:28:31 +0000
ROA not after:            Wed 01 Jul 2026 13:33:31 +0000
asID:                     53141
IP address blocks:        186.194.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl
                          rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 13:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6d:d6:a8:cc:cb:90:14:d4:9d:ea:3a:85:78:55:5d:c8:42:71:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
        Validity
            Not Before: Jul  2 13:28:31 2025 GMT
            Not After : Jul  1 13:33:31 2026 GMT
        Subject: CN=A8CB08E1D7675EC8EC46E6372C1708A2900C504F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8e:d3:22:92:dd:ad:dd:7c:c0:c5:9e:44:8f:
                    1b:30:0a:9a:4b:2c:5d:71:7c:73:5e:cf:5e:68:c2:
                    5a:30:a2:97:c8:26:3e:49:b5:41:20:4c:b1:3c:e0:
                    a8:4d:35:2b:90:86:ce:bd:6d:0e:c3:c2:67:86:66:
                    e2:4a:f8:7e:0a:e2:17:84:e2:1d:2b:fb:f4:b4:40:
                    cc:9c:7a:09:34:2a:ab:3b:31:46:00:f0:bb:c7:9e:
                    9d:4e:44:6a:15:51:fb:61:45:79:91:51:16:47:5a:
                    d2:48:e4:35:47:02:28:0e:65:bc:84:1d:a7:fd:6c:
                    f2:c9:4d:db:4e:36:7c:11:0f:3e:fe:0f:c4:14:a0:
                    eb:5e:72:b1:b0:89:26:3b:50:d0:07:f6:5e:fb:e8:
                    97:df:d9:5d:cf:27:55:b4:23:94:16:0c:06:a5:e3:
                    a4:5d:6b:2c:bc:16:65:41:f4:62:22:76:34:31:a0:
                    98:28:61:ba:98:04:d5:ca:0c:e6:ae:de:a7:94:5a:
                    6d:37:29:e2:08:40:53:a2:c6:2d:7f:01:f0:57:07:
                    7f:8a:24:5e:a2:35:3b:82:7f:f4:d6:47:14:68:40:
                    67:cb:9b:9a:f5:dc:8b:04:f6:1b:5a:65:16:3f:a6:
                    49:b6:2c:52:ac:f1:1c:1b:85:28:25:cd:8c:a0:de:
                    ec:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CB:08:E1:D7:67:5E:C8:EC:46:E6:37:2C:17:08:A2:90:0C:50:4F
            X509v3 Authority Key Identifier:
                keyid:7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3138362e3139342e3133362e302f32322d3234203d3e203533313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:5e:01:a0:38:d2:a3:79:86:18:6f:30:7f:55:b2:33:b4:f8:
         96:06:53:ea:4b:ba:b4:ba:5d:4f:f3:6b:bd:26:ff:1f:0e:63:
         56:12:db:0d:87:9c:e0:89:0b:c6:60:94:60:a0:7b:3d:92:c6:
         f3:cd:80:ee:af:45:b6:66:71:d3:2d:24:4c:b1:aa:8f:98:e6:
         c0:7d:48:22:44:57:de:f8:0d:d3:c2:ca:4b:e5:e6:c4:6c:fb:
         06:af:27:7f:37:d4:94:26:4e:9f:72:ec:e7:d2:7b:ea:d7:d6:
         3d:f9:36:2d:02:f2:7b:b4:95:cb:83:cc:5b:7f:77:c4:ee:67:
         be:ad:02:4d:89:4f:95:33:b5:c5:2b:d2:a2:98:fd:ff:e6:ba:
         d5:ac:e9:c7:97:0a:66:27:48:03:b1:77:b3:64:87:62:ef:6f:
         0e:a6:00:df:25:37:a1:9d:6b:aa:e8:84:88:b7:90:ee:eb:ec:
         66:91:5f:d4:3b:16:28:f0:ea:2b:59:26:d4:f8:24:e7:32:9b:
         62:8f:72:81:7a:8e:96:a7:7a:da:f8:f7:8b:62:62:23:07:5e:
         25:f7:44:25:a6:d0:ae:dd:34:7c:a1:06:37:53:68:e3:46:ef:
         3e:fe:88:e4:db:cf:18:74:51:f8:56:6a:9f:59:8f:4d:cb:24:
         29:a1:97:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:55:52 2025 by rpki-client