Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/3138362e3235312e37322e302f32322d3234203d3e20323632393933.roa
File:                     3138362e3235312e37322e302f32322d3234203d3e20323632393933.roa (raw, json)
Hash identifier:          CTqEQNYUPgpqxJHzBzNFhz+OTvdbPy+PQDq+v/y/J/8=
Subject key identifier:   EE:FF:3A:16:48:32:CA:01:24:69:EA:38:FA:84:84:FE:FF:D6:C6:98
Certificate issuer:       /CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Certificate serial:       69870489D0BFFF38841C09F1A266A3AC520ED171
Authority key identifier: 21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/3138362e3235312e37322e302f32322d3234203d3e20323632393933.roa
Signing time:             Wed 23 Jul 2025 13:08:09 +0000
ROA not before:           Wed 23 Jul 2025 13:03:09 +0000
ROA not after:            Wed 22 Jul 2026 13:08:09 +0000
asID:                     262993
IP address blocks:        186.251.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
                          rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 17:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:87:04:89:d0:bf:ff:38:84:1c:09:f1:a2:66:a3:ac:52:0e:d1:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
        Validity
            Not Before: Jul 23 13:03:09 2025 GMT
            Not After : Jul 22 13:08:09 2026 GMT
        Subject: CN=EEFF3A164832CA012469EA38FA8484FEFFD6C698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b5:de:71:17:84:0a:5d:b0:c9:0a:77:36:71:
                    24:2e:c5:b3:7b:10:9a:74:58:1f:7b:cc:8d:c5:68:
                    aa:ee:e5:0e:96:5f:e9:ec:cc:8a:88:d9:29:90:82:
                    0d:97:fe:37:b5:45:ba:7f:4b:a5:7f:9c:db:a2:1e:
                    e5:16:48:52:14:50:b7:fb:48:28:f7:a3:03:14:2e:
                    20:80:6f:a1:1d:e8:93:1f:8e:8f:84:0c:39:f6:cb:
                    cc:5c:6b:88:c1:82:ad:77:55:26:7a:04:bf:cf:c3:
                    70:74:af:98:28:fe:80:ff:87:4f:ba:37:68:47:c8:
                    46:14:f6:b6:a7:23:3a:01:a7:bb:de:db:31:10:a6:
                    ea:02:b1:fd:43:6b:77:9e:85:aa:1f:73:5b:49:8a:
                    d7:e3:b9:6e:b6:fa:a0:15:f1:99:17:d9:83:03:7b:
                    a5:70:26:8c:88:63:8f:c7:96:fd:c6:1f:d2:1e:2d:
                    64:6b:67:ff:68:3d:2d:c8:4c:ec:cf:63:c7:63:e7:
                    6d:d6:72:d1:08:fd:b9:f7:ea:0d:5b:02:74:ae:92:
                    49:a3:cb:26:05:f8:bc:a5:04:1f:33:e1:88:2c:b6:
                    70:7b:22:53:e6:85:2d:09:78:3a:74:cf:5d:8c:d1:
                    8f:bf:23:7a:99:e1:78:93:b8:5d:6d:d9:54:db:90:
                    f5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FF:3A:16:48:32:CA:01:24:69:EA:38:FA:84:84:FE:FF:D6:C6:98
            X509v3 Authority Key Identifier:
                keyid:21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/3138362e3235312e37322e302f32322d3234203d3e20323632393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:44:88:6d:7e:fa:31:2a:60:8e:4e:6b:c4:f8:cd:80:44:f7:
         40:50:f1:24:7e:72:c8:42:27:d5:7c:2b:5a:78:0a:7a:de:60:
         fc:62:f6:8e:3c:f5:64:e3:99:e3:63:03:0b:5e:1c:ba:4f:83:
         a9:9d:83:66:7c:46:b2:17:95:ca:68:95:df:4f:6c:d4:29:bc:
         eb:f7:55:b6:c0:7b:fb:89:57:16:8f:bd:0a:34:2a:14:a1:bf:
         49:4e:75:bb:21:d4:5b:6a:2a:0e:44:bc:ff:0b:22:73:14:b6:
         25:d5:54:a4:ab:71:34:cd:e0:12:eb:e0:d7:ca:c9:29:5e:24:
         45:82:e2:39:ed:65:85:6c:29:4f:bf:36:6c:6b:87:22:d3:a7:
         8a:12:43:0d:1b:ce:c2:ea:a5:4a:a3:d1:cc:e1:26:08:ec:a8:
         5e:a9:58:db:a6:b8:4a:ed:fe:fe:b0:79:3d:28:34:17:a6:4e:
         56:0e:52:b7:3e:4b:fa:ec:66:62:29:b9:65:f2:eb:73:5b:27:
         9b:4f:10:fd:fa:b3:25:43:99:53:96:6c:fa:76:8e:9a:84:ef:
         21:e2:0f:b7:26:eb:4d:55:cd:5d:e5:7f:1d:13:94:f3:92:89:
         c7:3d:7d:45:ff:aa:e5:cd:46:92:74:97:ef:f4:ef:aa:ae:92:
         00:f0:ea:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:30:53 2025 by rpki-client