Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138362e3233362e302e302f32302d3234203d3e203238313436.roa
File:                     3138362e3233362e302e302f32302d3234203d3e203238313436.roa (raw, json)
Hash identifier:          U+F7tvhtfGVLzciGRw1icgJOnSAe1GCzVGqxlWxmPiY=
Subject key identifier:   39:D2:10:DF:48:3B:82:8F:16:07:65:AB:EB:26:90:57:26:72:D8:0B
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       58B813B78D6AA7D9307C967C7A02360935D245AA
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138362e3233362e302e302f32302d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:57:46 +0000
ROA not before:           Mon 12 May 2025 12:52:46 +0000
ROA not after:            Mon 11 May 2026 12:57:46 +0000
asID:                     28146
IP address blocks:        186.236.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 10:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b8:13:b7:8d:6a:a7:d9:30:7c:96:7c:7a:02:36:09:35:d2:45:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:52:46 2025 GMT
            Not After : May 11 12:57:46 2026 GMT
        Subject: CN=39D210DF483B828F160765ABEB2690572672D80B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4e:c4:7c:65:d4:fa:98:bb:24:8f:48:70:16:
                    07:ae:3d:98:61:ca:57:a2:e5:14:9b:18:bf:36:dc:
                    69:2f:ac:f6:6e:d2:5c:ff:74:3b:2d:04:01:01:7e:
                    78:ef:5e:ca:15:3c:f6:64:23:f0:97:27:ac:9d:d5:
                    2a:97:81:28:27:fc:46:b3:60:66:d7:2f:b1:e5:26:
                    18:be:5d:ce:82:ca:22:ce:26:12:21:2f:76:60:a5:
                    06:c9:92:be:66:59:80:42:58:e4:e1:79:c6:03:c6:
                    ca:40:9d:99:1d:d0:70:0a:cb:1f:31:54:8a:e9:86:
                    75:da:9a:db:32:0d:12:39:d0:51:cb:f2:98:5b:39:
                    00:55:ee:e2:5a:07:10:b2:8c:ae:17:4f:8d:91:fd:
                    2b:61:ad:68:13:72:09:ea:de:5e:47:11:fd:34:3b:
                    6b:ce:d8:88:4a:95:df:1f:62:53:43:ec:39:37:6e:
                    ff:9d:16:08:aa:17:13:2e:51:00:dc:01:59:be:bd:
                    74:ad:70:81:65:a9:86:7a:16:25:0e:21:97:1a:30:
                    64:76:d4:c2:1c:bf:9e:cf:06:45:2c:9e:68:56:28:
                    4a:44:20:81:6c:04:e7:6f:37:4e:cb:26:01:64:43:
                    b9:b7:af:0d:36:d7:94:d0:ad:f6:3a:fe:f5:c8:c7:
                    17:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D2:10:DF:48:3B:82:8F:16:07:65:AB:EB:26:90:57:26:72:D8:0B
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138362e3233362e302e302f32302d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:ac:01:7e:2d:95:e8:f2:79:64:c6:36:88:30:5f:13:8a:fd:
         04:08:d3:38:04:9a:72:91:50:5d:75:e7:7b:e1:c9:62:9a:33:
         d4:e2:d1:4e:ee:79:b8:61:cb:b6:b9:a0:6e:c4:c8:5c:ac:57:
         43:b4:77:d2:d2:aa:59:d2:d1:6c:95:81:50:43:ad:43:c8:62:
         66:bd:e2:98:df:c8:e6:3c:2b:fb:f7:85:31:40:70:be:b2:f8:
         d5:d3:40:cf:f0:d4:e7:bf:ab:10:2d:86:62:f9:99:26:97:5b:
         0f:16:49:d4:f2:33:12:69:9b:7c:e6:da:2b:29:57:29:12:c9:
         fa:ab:9f:db:21:f1:6f:a2:70:c6:e2:49:cf:ab:b3:e2:48:d5:
         02:8e:1d:44:d8:29:06:3a:7d:02:34:80:9b:b9:a0:92:1a:94:
         bf:ea:12:cf:3d:a9:34:b9:28:d4:f0:f4:87:73:5f:d9:31:1a:
         cd:df:9c:3b:5e:72:5e:e3:db:a0:a6:be:6e:19:06:f0:82:cd:
         d1:64:3c:a9:4f:8d:69:d0:d0:d5:43:0b:f0:dd:2b:58:a9:fc:
         db:89:9a:a5:24:36:f4:99:d8:d0:1d:3d:74:6f:60:52:b6:11:
         9c:5b:69:d5:ca:11:6f:af:e8:eb:b4:01:71:98:e5:df:6c:f4:
         7f:b5:ba:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:52:23 2025 by rpki-client