Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138362e3235302e38382e302f32322d3234203d3e203238313436.roa
File:                     3138362e3235302e38382e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          4KqWCyURQUhMfOHeHemWy2/da9rzFHENWW044SyRy8U=
Subject key identifier:   8C:FF:A9:2E:55:A4:DD:D2:CC:80:B5:01:8B:6F:3E:05:78:E2:F7:C9
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       5358534DD767B1DB713774A03B134AD8CB2FF658
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138362e3235302e38382e302f32322d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:56:31 +0000
ROA not before:           Mon 12 May 2025 12:51:31 +0000
ROA not after:            Mon 11 May 2026 12:56:31 +0000
asID:                     28146
IP address blocks:        186.250.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 22:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:58:53:4d:d7:67:b1:db:71:37:74:a0:3b:13:4a:d8:cb:2f:f6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:51:31 2025 GMT
            Not After : May 11 12:56:31 2026 GMT
        Subject: CN=8CFFA92E55A4DDD2CC80B5018B6F3E0578E2F7C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:f3:84:b5:81:99:8a:fe:46:fb:d9:9e:19:
                    af:f6:40:ad:b4:2a:6d:0b:b0:f5:9b:e8:8a:24:5f:
                    86:28:7d:3b:c4:43:33:2b:89:bb:cb:47:1c:0e:98:
                    59:13:3f:40:a4:48:0c:06:ec:b3:88:fc:97:1b:04:
                    06:7c:43:54:80:c3:7e:d8:0c:eb:4c:44:41:f8:12:
                    43:b3:ed:c2:c5:01:58:a3:39:e9:e7:20:dc:5e:61:
                    d8:fe:bd:41:c9:cc:c1:74:af:64:c5:be:19:6b:a6:
                    32:6d:1e:e6:9e:36:51:90:b1:d0:32:82:cc:ef:1b:
                    2a:e8:9b:bb:43:14:dd:a0:c5:b9:f4:48:2b:be:76:
                    e8:c1:11:8a:28:3b:e7:dd:67:34:d0:84:e6:f0:6d:
                    ea:cf:af:3d:c6:2a:c8:65:ff:a8:a8:08:62:4c:63:
                    0e:d7:3c:31:4c:55:b4:3e:71:46:06:d8:11:87:7e:
                    6a:3a:50:7a:40:bc:7f:7d:7e:0e:f7:c5:10:85:07:
                    b4:84:0e:8b:d6:26:ff:6e:c7:9b:36:a6:3e:8d:3b:
                    37:fc:24:8d:1d:2d:2b:63:03:f0:db:96:72:df:1a:
                    d7:e1:8f:18:b0:6c:d2:17:19:ed:f5:9c:d8:9b:18:
                    a8:6b:b9:af:3c:0c:60:cb:24:5f:7b:49:c4:8b:07:
                    5a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FF:A9:2E:55:A4:DD:D2:CC:80:B5:01:8B:6F:3E:05:78:E2:F7:C9
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138362e3235302e38382e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:70:b4:7e:dd:f2:95:94:31:29:c4:c1:3a:3b:2a:2f:93:17:
         a1:5f:71:8a:8c:83:66:f4:36:42:bd:77:99:84:f7:5f:cc:85:
         48:3c:a0:84:4d:4f:e6:9a:b1:12:7f:e3:49:8c:07:8b:1a:28:
         c7:e7:f6:17:62:36:08:13:f0:88:c1:59:f0:f0:b6:a6:36:39:
         e6:b3:6c:11:4c:ef:0a:42:07:27:69:84:c1:db:3b:6f:f4:c5:
         6b:3a:1f:07:0b:a8:b6:a1:72:e0:16:d5:9f:db:bd:05:4d:8c:
         57:e7:12:eb:e6:b9:a2:2a:5f:ce:e1:8a:eb:23:b9:8c:bc:93:
         eb:4f:78:53:de:94:e9:5c:12:31:ce:38:c9:eb:c4:e1:8b:d7:
         f3:11:58:c9:45:32:de:97:7f:e0:7b:c1:f0:06:31:f8:7c:ce:
         aa:2f:38:01:56:ad:ff:f7:f0:7f:d0:6f:57:fa:d3:9e:55:aa:
         3a:5b:c1:53:73:00:f2:64:c3:57:6a:0f:3b:97:27:7c:46:a9:
         ab:e6:fa:32:8c:72:fa:4a:3c:a6:f9:b0:a1:84:29:62:3e:db:
         ca:8e:b9:72:f9:f4:e6:66:7f:9b:fa:08:69:3e:90:09:10:3f:
         3d:94:26:14:5b:b1:df:e4:7b:60:56:eb:fa:3b:b8:9c:d4:0c:
         54:ee:43:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:30:17 2025 by rpki-client