Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/3138362e3235312e37362e302f32322d3234203d3e20323632393933.roa
File:                     3138362e3235312e37362e302f32322d3234203d3e20323632393933.roa (raw, json)
Hash identifier:          dDZBFJTgy6uf7u/054EgmCGUT/tK/Ve2awhm8WyhgyI=
Subject key identifier:   2E:95:15:25:23:4C:A2:CD:CC:73:E9:19:1C:E9:07:17:08:F4:B8:8B
Certificate issuer:       /CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Certificate serial:       677B489CAAAE718D3E87FBA1864493B4049D0F7D
Authority key identifier: 21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/3138362e3235312e37362e302f32322d3234203d3e20323632393933.roa
Signing time:             Wed 23 Jul 2025 13:08:08 +0000
ROA not before:           Wed 23 Jul 2025 13:03:08 +0000
ROA not after:            Wed 22 Jul 2026 13:08:08 +0000
asID:                     262993
IP address blocks:        186.251.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
                          rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 17:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7b:48:9c:aa:ae:71:8d:3e:87:fb:a1:86:44:93:b4:04:9d:0f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
        Validity
            Not Before: Jul 23 13:03:08 2025 GMT
            Not After : Jul 22 13:08:08 2026 GMT
        Subject: CN=2E951525234CA2CDCC73E9191CE9071708F4B88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:71:f0:fb:26:1d:f4:ef:ad:80:93:5e:a6:
                    eb:d4:e3:35:a5:e7:3f:5f:e4:19:e2:27:28:93:e2:
                    93:00:67:af:3e:20:91:c3:ab:b6:29:6e:91:72:60:
                    e0:67:7c:57:d5:7a:07:ba:e7:ea:6f:c2:e3:2b:d5:
                    78:54:68:8e:7f:44:2d:a4:33:0d:14:48:dc:36:dc:
                    22:dd:77:94:d7:80:36:9d:12:08:44:2f:d8:ec:ed:
                    db:07:6f:25:b6:9c:a1:ce:14:6b:e3:72:a3:74:5d:
                    9e:92:10:b5:d1:8b:d9:4b:96:4a:27:87:3c:10:12:
                    8f:9e:cb:67:61:12:d2:23:78:a9:22:c7:8e:4e:55:
                    37:37:9c:c6:ef:66:29:34:d3:4e:03:33:cc:97:ff:
                    dd:b0:00:5f:0e:ce:9b:c6:8a:a4:2b:7b:db:a0:1d:
                    97:fb:c2:8a:2a:e7:67:e6:2e:19:b0:1a:26:60:df:
                    28:ea:bb:ae:86:fe:d5:57:17:32:bf:61:c1:61:1c:
                    bd:6d:6c:4d:86:6b:fc:05:d8:31:21:4e:13:bc:96:
                    4a:ff:a3:eb:25:2d:42:29:05:e0:97:b1:e0:3d:86:
                    91:4b:db:d6:46:3c:7f:ae:56:8d:ce:bd:80:2b:3f:
                    37:8e:03:42:23:69:b1:5c:2c:a9:dc:93:85:18:0b:
                    f0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:95:15:25:23:4C:A2:CD:CC:73:E9:19:1C:E9:07:17:08:F4:B8:8B
            X509v3 Authority Key Identifier:
                keyid:21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/3138362e3235312e37362e302f32322d3234203d3e20323632393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:59:09:ae:54:49:14:c5:ba:6e:63:29:8d:a7:68:f8:43:8f:
         c2:70:7e:ee:3a:5e:ec:37:ee:e6:96:fa:2f:2b:30:d5:15:7d:
         11:e3:f2:7d:f5:be:1f:45:c3:a6:59:4c:cc:19:f1:e1:ce:ec:
         b7:4a:d5:50:ef:27:d1:5f:cc:98:e0:10:75:2c:f1:bb:4e:d5:
         bd:3d:cd:ab:d3:00:c0:7f:29:05:31:39:d0:be:11:20:63:e7:
         ed:46:8d:35:c4:3f:31:d4:29:39:6c:4c:c3:f4:85:e2:e3:42:
         fe:6a:42:f7:de:f8:ee:99:96:67:c3:49:1e:78:57:80:40:97:
         cf:48:25:14:ff:2e:0a:1c:8d:65:4c:e2:f2:78:a4:66:46:27:
         02:0b:d7:35:f4:29:b4:8e:84:80:d9:62:71:f8:a6:2d:2b:ef:
         e9:74:92:d1:f0:9e:c9:af:69:e4:18:60:e8:e3:37:c5:b2:59:
         c2:fc:e2:33:c8:03:76:15:c3:24:9a:8c:9b:8d:71:68:40:46:
         5c:a0:8d:db:69:31:0c:dd:c5:5b:8c:54:c5:76:56:c2:ee:d7:
         d6:88:b2:08:98:48:d5:bb:65:50:d8:42:6e:ff:2e:f8:65:5b:
         e2:fa:45:f2:b1:63:5e:bc:2e:46:00:78:08:46:0c:b8:84:ca:
         d6:37:12:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:30:17 2025 by rpki-client