Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/3133312e3139362e3234302e302f32322d3232203d3e20323635393331.roa
File:                     3133312e3139362e3234302e302f32322d3232203d3e20323635393331.roa (raw, json)
Hash identifier:          jqWXsitt8X0z4mL38XyvH9uf36ZUwW6Be5L3B6Om10E=
Subject key identifier:   C5:02:DC:63:F3:9B:D9:FD:ED:F7:F9:AC:9A:6F:E8:57:3D:9C:D2:EB
Certificate issuer:       /CN=9286252C75F02440D7307A4D8DAD99CDC7A76982
Certificate serial:       4E488FAAA50F0F08404FF300FE140075DDAA77BC
Authority key identifier: 92:86:25:2C:75:F0:24:40:D7:30:7A:4D:8D:AD:99:CD:C7:A7:69:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9286252C75F02440D7307A4D8DAD99CDC7A76982.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/3133312e3139362e3234302e302f32322d3232203d3e20323635393331.roa
Signing time:             Fri 11 Jul 2025 20:52:23 +0000
ROA not before:           Fri 11 Jul 2025 20:47:23 +0000
ROA not after:            Fri 10 Jul 2026 20:52:23 +0000
asID:                     265931
IP address blocks:        131.196.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/9286252C75F02440D7307A4D8DAD99CDC7A76982.crl
                          rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/9286252C75F02440D7307A4D8DAD99CDC7A76982.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9286252C75F02440D7307A4D8DAD99CDC7A76982.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 14:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:48:8f:aa:a5:0f:0f:08:40:4f:f3:00:fe:14:00:75:dd:aa:77:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9286252C75F02440D7307A4D8DAD99CDC7A76982
        Validity
            Not Before: Jul 11 20:47:23 2025 GMT
            Not After : Jul 10 20:52:23 2026 GMT
        Subject: CN=C502DC63F39BD9FDEDF7F9AC9A6FE8573D9CD2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:d6:1c:30:ea:7b:05:54:c2:9f:64:d3:5c:
                    07:a0:3d:91:37:78:a1:64:e3:7c:e2:6d:55:3e:18:
                    36:10:34:c6:c3:70:37:1c:d3:17:aa:ba:4b:da:3a:
                    9e:b8:56:40:53:f5:83:d3:09:0b:2c:dd:1c:fb:f5:
                    fe:ae:86:4f:27:1c:6f:42:d3:12:bd:e0:74:cb:10:
                    01:88:76:32:79:7b:63:8b:9f:b8:a4:c0:df:22:b2:
                    bf:0d:84:cf:77:71:bc:d3:b3:8c:68:c3:4e:09:6e:
                    c0:dd:4f:1f:3d:ab:46:dc:51:a6:40:dd:7e:58:92:
                    0e:f6:b6:50:cb:45:8f:5d:02:6a:44:ef:64:09:7f:
                    4e:2b:27:08:0b:f7:b3:c1:63:96:21:b5:02:05:6a:
                    d1:43:4d:8f:32:fb:e8:b9:26:d7:9e:8a:ef:e3:27:
                    82:1b:ce:3a:bb:f7:05:cd:e9:41:f9:9c:56:ba:87:
                    20:47:50:a8:0c:36:8c:48:d1:86:1c:1c:38:25:78:
                    40:29:bc:37:16:46:68:47:64:c3:bb:f4:ec:cd:ac:
                    14:3d:b6:2b:9a:42:df:86:e5:4a:0c:07:f6:44:3b:
                    18:0d:df:1a:45:1c:a3:f1:80:48:ac:6a:9e:d8:75:
                    8e:a6:43:04:3b:37:81:d5:38:ec:af:f4:dd:e8:50:
                    09:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:02:DC:63:F3:9B:D9:FD:ED:F7:F9:AC:9A:6F:E8:57:3D:9C:D2:EB
            X509v3 Authority Key Identifier:
                keyid:92:86:25:2C:75:F0:24:40:D7:30:7A:4D:8D:AD:99:CD:C7:A7:69:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/9286252C75F02440D7307A4D8DAD99CDC7A76982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9286252C75F02440D7307A4D8DAD99CDC7A76982.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/3133312e3139362e3234302e302f32322d3232203d3e20323635393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:e2:56:fa:2c:d0:0f:d1:5b:8b:66:9a:ed:5c:6b:02:ad:fe:
         1d:3a:89:bc:0e:06:72:c3:35:c2:e3:bb:98:93:43:15:b6:19:
         f2:0e:2e:63:c5:f1:6b:f9:ac:46:ce:73:96:85:4f:36:29:12:
         05:4f:1a:75:38:ff:97:50:ff:83:3d:93:54:e2:5e:e1:3a:11:
         19:93:42:f1:c6:24:cf:3c:51:99:8a:17:7f:e2:e5:51:e7:0d:
         db:2c:17:54:9e:42:0e:a5:45:f6:61:5f:43:eb:00:35:f8:65:
         24:56:59:52:2a:06:d6:72:4e:e3:fa:1d:a6:b2:7c:97:5e:9b:
         4a:f2:f7:03:05:f4:ee:74:0e:b8:51:ba:53:6b:b6:a6:15:e8:
         bb:6e:64:c8:d1:6b:d7:cb:83:5f:77:b7:72:e5:d5:7c:e9:9b:
         08:e2:81:a0:6e:09:f2:a5:b2:e4:aa:34:13:2f:f8:69:ad:f6:
         76:09:1c:bc:ae:3e:4a:46:b3:9b:eb:68:a8:92:3f:e0:a5:b7:
         a8:f1:ce:b9:bd:75:30:0d:9f:12:c6:5f:21:95:fa:2b:a8:fa:
         f2:7b:83:04:29:02:e2:d3:e2:87:2e:a9:1f:49:0f:aa:30:dc:
         fb:58:83:0c:72:ec:c6:34:a3:50:85:7d:55:0d:e8:83:fd:32:
         9e:dc:fe:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:53:18 2025 by rpki-client