Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/3133312e3139362e3234302e302f32332d3233203d3e20323635393331.roa
File:                     3133312e3139362e3234302e302f32332d3233203d3e20323635393331.roa (raw, json)
Hash identifier:          +ihT6rZiE1uI6SReNb72LBnYGlTs9QQG8VUO/VJewfw=
Subject key identifier:   58:5C:7C:51:65:A3:F9:F7:F2:26:2E:98:8F:76:A5:7D:3C:6D:BC:72
Certificate issuer:       /CN=9286252C75F02440D7307A4D8DAD99CDC7A76982
Certificate serial:       21DA9178D7CE9FA681320AFC20D6EFD11AAF7F80
Authority key identifier: 92:86:25:2C:75:F0:24:40:D7:30:7A:4D:8D:AD:99:CD:C7:A7:69:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9286252C75F02440D7307A4D8DAD99CDC7A76982.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/3133312e3139362e3234302e302f32332d3233203d3e20323635393331.roa
Signing time:             Fri 11 Jul 2025 20:52:19 +0000
ROA not before:           Fri 11 Jul 2025 20:47:19 +0000
ROA not after:            Fri 10 Jul 2026 20:52:19 +0000
asID:                     265931
IP address blocks:        131.196.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/9286252C75F02440D7307A4D8DAD99CDC7A76982.crl
                          rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/9286252C75F02440D7307A4D8DAD99CDC7A76982.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9286252C75F02440D7307A4D8DAD99CDC7A76982.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 14:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:da:91:78:d7:ce:9f:a6:81:32:0a:fc:20:d6:ef:d1:1a:af:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9286252C75F02440D7307A4D8DAD99CDC7A76982
        Validity
            Not Before: Jul 11 20:47:19 2025 GMT
            Not After : Jul 10 20:52:19 2026 GMT
        Subject: CN=585C7C5165A3F9F7F2262E988F76A57D3C6DBC72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:86:b5:9b:20:df:f7:f9:e0:6a:e0:6f:82:29:
                    82:0f:c6:28:1f:d0:51:c6:38:90:92:10:f5:1b:1c:
                    f8:f5:ae:37:ef:73:b4:14:90:a5:d9:d2:35:d2:86:
                    ea:20:1f:52:d4:06:26:ad:bb:62:25:f9:41:75:a2:
                    cf:51:b9:47:34:41:14:41:9e:d0:7b:87:a1:18:a3:
                    01:c8:96:1a:97:08:a0:c4:19:3e:d7:4c:e1:8a:9a:
                    52:96:5c:26:0f:6b:a5:08:e6:4d:92:fd:e3:6f:6f:
                    96:cc:f3:5e:6f:1a:2f:80:2e:95:d9:54:ea:03:ac:
                    e6:b1:ec:07:f1:7f:a4:36:d2:99:fd:a3:6e:93:1d:
                    5f:86:20:fd:be:bf:70:9e:ff:71:41:b7:56:fb:a0:
                    e3:64:b5:9e:0f:b9:48:52:ea:01:47:b9:c1:0a:4c:
                    53:67:2b:3b:7a:2c:ea:8f:8f:c9:62:fe:68:a8:7e:
                    77:75:48:62:58:fa:99:e6:6b:64:1f:08:46:3b:82:
                    d5:56:81:21:c3:53:6d:26:c9:3f:4f:56:50:e9:ad:
                    c0:44:30:33:75:a4:db:93:e7:9a:d6:83:15:2b:e2:
                    f6:c6:87:09:9f:34:ff:fe:b5:f3:11:05:48:13:93:
                    49:70:14:33:13:08:0d:ea:15:aa:d7:36:28:ce:81:
                    3f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5C:7C:51:65:A3:F9:F7:F2:26:2E:98:8F:76:A5:7D:3C:6D:BC:72
            X509v3 Authority Key Identifier:
                keyid:92:86:25:2C:75:F0:24:40:D7:30:7A:4D:8D:AD:99:CD:C7:A7:69:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/9286252C75F02440D7307A4D8DAD99CDC7A76982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9286252C75F02440D7307A4D8DAD99CDC7A76982.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/3133312e3139362e3234302e302f32332d3233203d3e20323635393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:90:a1:80:f5:f6:8d:b0:58:bc:44:f1:98:df:6e:aa:01:93:
         15:c1:b2:0a:5b:e6:83:8b:37:80:0c:bb:c5:4e:3e:c6:04:da:
         eb:85:6c:1e:f4:60:62:16:b3:0b:6a:ee:d1:20:5e:94:16:99:
         27:ae:7f:1b:0c:e2:36:b5:90:f0:41:97:19:1a:9b:52:fb:22:
         ca:ef:5e:f0:fc:cb:25:15:f9:ba:f0:1b:ab:de:87:15:87:19:
         a7:a1:84:a3:4f:9b:65:c2:b3:e0:f4:d5:eb:3f:03:4a:d6:2b:
         e4:ba:75:fe:b3:d3:78:c9:53:6c:10:40:7f:8c:b9:5c:95:ed:
         d1:c0:b6:2f:d8:13:2f:b8:fd:6e:6c:c5:52:ff:af:1e:73:8d:
         30:87:e7:e3:0e:b6:d1:5a:39:b6:d7:b6:db:76:70:e5:0f:91:
         0b:b9:e8:58:fc:f2:ff:54:63:72:7f:a8:85:30:0d:dc:b7:5c:
         83:c5:6b:b4:e1:14:f5:3c:23:ca:dc:a1:77:f0:86:72:52:15:
         33:10:1f:3a:75:e7:43:eb:52:dd:c7:86:87:56:39:b3:9d:48:
         be:b4:89:27:64:1f:bc:cc:4c:c6:77:9d:74:9f:22:39:0f:44:
         a5:ac:56:2b:9b:a5:40:20:11:0a:54:1e:37:6e:69:ce:97:9d:
         36:30:b5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:53:32 2025 by rpki-client