Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/3133312e3139362e3234302e302f32342d3234203d3e20323635393331.roa
File:                     3133312e3139362e3234302e302f32342d3234203d3e20323635393331.roa (raw, json)
Hash identifier:          lM8DhwOfFuazlnjzQ0Ey4fTnI29Lt/14NruhwOf+3Qo=
Subject key identifier:   8F:6A:E3:5C:29:7E:C6:64:AC:1A:4A:AB:87:48:E3:E8:CC:20:6A:11
Certificate issuer:       /CN=9286252C75F02440D7307A4D8DAD99CDC7A76982
Certificate serial:       581C55F7B6FF67FED0DA3E34D98691AF78DECE1A
Authority key identifier: 92:86:25:2C:75:F0:24:40:D7:30:7A:4D:8D:AD:99:CD:C7:A7:69:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9286252C75F02440D7307A4D8DAD99CDC7A76982.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/3133312e3139362e3234302e302f32342d3234203d3e20323635393331.roa
Signing time:             Fri 11 Jul 2025 20:52:22 +0000
ROA not before:           Fri 11 Jul 2025 20:47:22 +0000
ROA not after:            Fri 10 Jul 2026 20:52:22 +0000
asID:                     265931
IP address blocks:        131.196.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/9286252C75F02440D7307A4D8DAD99CDC7A76982.crl
                          rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/9286252C75F02440D7307A4D8DAD99CDC7A76982.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9286252C75F02440D7307A4D8DAD99CDC7A76982.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 14:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1c:55:f7:b6:ff:67:fe:d0:da:3e:34:d9:86:91:af:78:de:ce:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9286252C75F02440D7307A4D8DAD99CDC7A76982
        Validity
            Not Before: Jul 11 20:47:22 2025 GMT
            Not After : Jul 10 20:52:22 2026 GMT
        Subject: CN=8F6AE35C297EC664AC1A4AAB8748E3E8CC206A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:88:55:13:31:45:b8:7b:e4:36:74:24:05:9f:
                    b6:f1:3a:ba:db:bc:e6:bb:e2:15:90:46:05:27:da:
                    f3:87:a7:08:e0:b2:1a:63:0b:eb:e5:e0:e4:a4:5a:
                    9a:ae:b6:2e:ec:a0:26:e5:54:7c:7d:68:d8:18:cc:
                    16:41:d9:52:24:20:53:12:0f:6a:f1:6a:09:09:cd:
                    20:5b:5c:81:31:11:e8:0b:17:db:74:19:7f:bc:c5:
                    2d:74:47:7b:dc:cf:18:53:da:98:1b:03:42:4d:e5:
                    d2:54:e9:e2:2c:64:bd:84:d8:37:52:13:96:b0:a1:
                    f2:db:bd:36:4f:56:23:51:66:0c:88:b1:1f:b4:e2:
                    e1:d8:81:d0:ab:9d:4c:ad:71:55:03:cb:0f:c5:ab:
                    b9:67:79:d3:40:58:1a:4d:de:ff:9a:35:99:2b:69:
                    d5:6b:4f:c0:88:66:4e:13:4c:54:d1:5c:f9:5c:15:
                    03:d5:1f:a3:9f:15:aa:8f:43:7f:e6:51:d4:86:cc:
                    3c:57:3b:a2:18:65:89:09:4b:62:d3:f8:0d:c6:ed:
                    e5:2e:ca:d2:5b:10:3e:f2:a0:8c:56:aa:91:3b:48:
                    82:b6:a6:6d:8b:62:b3:1f:a2:50:e0:90:16:60:c5:
                    2b:a2:17:2f:15:0c:48:f7:a6:e5:b1:4c:1a:93:d0:
                    33:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6A:E3:5C:29:7E:C6:64:AC:1A:4A:AB:87:48:E3:E8:CC:20:6A:11
            X509v3 Authority Key Identifier:
                keyid:92:86:25:2C:75:F0:24:40:D7:30:7A:4D:8D:AD:99:CD:C7:A7:69:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/9286252C75F02440D7307A4D8DAD99CDC7A76982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9286252C75F02440D7307A4D8DAD99CDC7A76982.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/3133312e3139362e3234302e302f32342d3234203d3e20323635393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:c5:6e:24:b3:fa:ae:05:7f:e5:ff:01:51:01:a9:98:94:15:
         21:dc:51:da:45:69:02:69:60:6c:65:96:5d:4c:26:99:b8:d3:
         2a:8f:b4:66:9a:5a:36:7a:f5:8a:6d:e5:09:f9:51:7a:4e:b2:
         44:a8:ce:69:d8:9b:b0:06:32:62:79:a3:33:05:98:e1:ff:02:
         6e:81:4e:00:04:55:7e:4f:fa:43:5d:cb:e8:d4:9f:cb:5a:3c:
         14:4f:8b:64:35:01:d7:e6:cb:8c:44:a0:c8:c3:8c:73:7a:18:
         bf:54:a5:b8:a6:90:04:98:b2:1f:0f:6b:30:c7:5a:f8:0c:fb:
         8e:bc:b2:f4:c9:fd:9c:b9:a3:5d:52:a1:44:85:86:f6:32:09:
         aa:8e:b1:b4:be:c2:91:19:5b:c9:79:f0:ca:10:43:5c:78:c7:
         89:83:a6:36:58:ce:5c:0e:c9:57:73:c2:f3:5d:37:e0:09:5d:
         63:4b:d0:27:4c:96:a2:89:a2:a2:55:d5:2c:01:3a:62:3b:d2:
         63:93:e4:7b:70:56:06:82:57:aa:ed:41:45:49:92:0f:e2:c5:
         bf:80:24:f8:54:48:d9:a7:c2:f3:25:f5:69:a6:d8:09:69:86:
         98:6c:91:0d:77:a0:6a:3c:04:c3:55:e8:a4:5f:9c:1a:7e:84:
         32:16:98:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:54:59 2025 by rpki-client