Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/3138362e3235312e3139322e302f32312d3332203d3e20323632383334.roa
File:                     3138362e3235312e3139322e302f32312d3332203d3e20323632383334.roa (raw, json)
Hash identifier:          hnKgVk2wpWgB/8wNQx/o1GayrTWmQ+FySDKckNiQ2YY=
Subject key identifier:   FF:61:ED:D5:62:F8:89:20:E5:13:08:07:BC:AA:CB:AC:A9:B0:6F:5A
Certificate issuer:       /CN=5002EE56B40431CA262F59717A16E5A8812286A5
Certificate serial:       76E8746C172A4283E3F96BB7C8508431E4695746
Authority key identifier: 50:02:EE:56:B4:04:31:CA:26:2F:59:71:7A:16:E5:A8:81:22:86:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5002EE56B40431CA262F59717A16E5A8812286A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/3138362e3235312e3139322e302f32312d3332203d3e20323632383334.roa
Signing time:             Thu 07 Aug 2025 13:52:57 +0000
ROA not before:           Thu 07 Aug 2025 13:47:57 +0000
ROA not after:            Thu 06 Aug 2026 13:52:57 +0000
asID:                     262834
IP address blocks:        186.251.192.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.crl
                          rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5002EE56B40431CA262F59717A16E5A8812286A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 06:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e8:74:6c:17:2a:42:83:e3:f9:6b:b7:c8:50:84:31:e4:69:57:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5002EE56B40431CA262F59717A16E5A8812286A5
        Validity
            Not Before: Aug  7 13:47:57 2025 GMT
            Not After : Aug  6 13:52:57 2026 GMT
        Subject: CN=FF61EDD562F88920E5130807BCAACBACA9B06F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:33:95:0e:28:14:ea:0b:13:cd:82:9f:0f:e7:
                    5a:40:14:47:40:aa:5d:65:2a:13:29:b9:e3:79:3f:
                    79:37:fb:e6:78:98:d1:67:10:c2:6c:a7:72:15:f1:
                    ca:3c:6e:e2:fc:f8:48:b5:74:ad:ae:78:12:8b:3e:
                    d6:1c:b9:64:ca:1c:83:4e:c4:cb:a1:a0:5f:b4:a5:
                    de:2e:72:d7:1b:46:15:21:d3:6f:da:cd:67:4e:34:
                    5e:df:ae:62:96:06:f0:53:fb:08:eb:13:df:6a:9a:
                    32:10:cf:a1:91:74:c3:29:9a:ed:b3:18:43:48:e9:
                    6b:69:ac:83:1f:de:ff:61:1d:b3:7b:ae:a8:a1:fe:
                    b2:89:77:39:7f:5f:78:e6:76:dc:b7:f8:01:6c:5d:
                    7e:07:ee:65:6c:eb:80:b0:86:e3:4e:ea:1b:1b:e4:
                    87:a8:d4:d8:48:5a:f3:e7:18:24:8d:0b:98:48:63:
                    8b:d3:be:02:da:56:07:81:cc:01:68:ad:e8:0b:f4:
                    f1:9f:c3:92:90:4e:2f:86:dc:d3:02:64:67:7c:41:
                    9c:c4:55:84:59:45:85:06:ff:3e:35:fc:8d:59:26:
                    c7:7f:fe:8f:c8:ea:62:ad:a5:55:e4:66:35:f3:17:
                    18:ab:2f:63:37:1c:aa:52:99:16:99:9e:0f:b9:62:
                    d5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:61:ED:D5:62:F8:89:20:E5:13:08:07:BC:AA:CB:AC:A9:B0:6F:5A
            X509v3 Authority Key Identifier:
                keyid:50:02:EE:56:B4:04:31:CA:26:2F:59:71:7A:16:E5:A8:81:22:86:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5002EE56B40431CA262F59717A16E5A8812286A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/3138362e3235312e3139322e302f32312d3332203d3e20323632383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b7:3f:fa:52:a4:7f:a6:49:4b:d1:d4:79:2e:f3:af:a5:92:76:
         d9:a2:30:b7:e6:0c:87:34:0e:98:12:d7:d1:9e:92:7e:a5:7a:
         f0:fa:99:00:81:51:ee:ba:52:ff:a6:53:22:94:70:6f:0b:c8:
         b0:55:7b:9a:30:cf:71:77:ef:a6:83:b8:3a:3b:d9:64:ae:00:
         c3:81:d3:da:c9:b5:8e:8b:e3:a6:45:b3:fa:af:a2:40:27:7d:
         00:8c:13:1d:2f:3d:c3:3c:ac:bd:4c:8e:89:6c:51:15:d0:ae:
         32:44:bc:d9:2a:fe:56:e7:78:28:fb:af:19:4e:9b:f5:55:3f:
         9f:cd:30:bd:17:e2:80:9b:28:7f:74:92:1c:ca:32:04:a7:02:
         5c:d1:a8:55:b5:bc:a6:e4:59:e4:ef:c4:bd:89:80:bb:69:2a:
         61:95:73:2c:2a:d3:39:0c:b7:f5:32:05:ec:09:f6:24:e7:eb:
         99:9e:d8:6d:19:b5:48:37:26:a7:ea:27:f3:6d:ac:fc:3b:e1:
         91:c0:05:7c:f8:0e:01:dc:94:82:2b:ba:32:99:a7:1a:a1:2c:
         62:72:44:28:49:15:30:e8:d5:08:94:f4:f6:b3:3b:51:e9:50:
         e9:6b:f9:b3:ca:78:76:d7:63:39:67:84:e4:0a:2f:a1:1e:68:
         a2:ac:e9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:25:45 2025 by rpki-client