Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3230392e36342e302f32302d3332203d3e203238363439.roa
File:                     3138362e3230392e36342e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier:          mudc2EG1nCUbN5X6G2DERrb9bYdvKVeepQ1BkOJPcEQ=
Subject key identifier:   1A:EF:48:43:97:FA:3B:1A:B3:BF:A6:C9:8D:A7:FA:B1:0F:80:71:C9
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       6FEA7FED615E62B02246C6614AD2CC867DE4C1A1
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3230392e36342e302f32302d3332203d3e203238363439.roa
Signing time:             Fri 15 Aug 2025 20:31:15 +0000
ROA not before:           Fri 15 Aug 2025 20:26:15 +0000
ROA not after:            Fri 14 Aug 2026 20:31:15 +0000
asID:                     28649
IP address blocks:        186.209.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 09:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ea:7f:ed:61:5e:62:b0:22:46:c6:61:4a:d2:cc:86:7d:e4:c1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:26:15 2025 GMT
            Not After : Aug 14 20:31:15 2026 GMT
        Subject: CN=1AEF484397FA3B1AB3BFA6C98DA7FAB10F8071C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:85:68:d3:28:bd:52:6e:f9:d1:59:cf:e6:2c:
                    22:2c:0d:aa:71:ea:5a:19:cf:38:88:15:ea:d0:14:
                    b5:70:7e:c8:aa:7f:c1:0a:e3:ee:37:14:08:fc:b7:
                    ed:49:73:9b:0a:bd:ad:97:78:19:86:2a:b6:55:25:
                    99:58:71:fe:d8:46:1a:14:bb:3d:db:7f:0c:34:27:
                    e2:c3:29:e0:71:07:a9:b9:fe:7e:29:a6:f3:d6:85:
                    84:36:34:74:4b:d7:8b:7b:89:2f:18:a8:54:0f:57:
                    f9:b2:b8:84:40:4d:54:98:eb:81:ac:55:e6:11:d2:
                    48:5d:ff:59:5f:84:dd:ed:88:25:e6:49:34:0d:d8:
                    b0:20:9a:49:c5:74:6e:49:25:b0:61:0c:96:02:67:
                    a4:26:0b:dd:7c:e8:75:7e:09:7b:62:21:fd:76:bd:
                    73:16:40:1d:cf:b2:72:fa:c7:8e:7b:f4:cc:12:5c:
                    3a:e9:17:dd:ff:a2:dd:c7:45:f3:a0:00:64:18:4b:
                    27:69:9a:4d:e0:dc:0a:1a:da:c0:c2:81:77:8a:2c:
                    c7:57:e7:66:f7:a9:33:f0:7e:f7:fb:cc:b4:08:ff:
                    b3:66:1f:a9:05:62:97:a0:32:a9:12:f9:79:ae:3c:
                    b1:6d:49:a2:f7:67:72:85:e8:37:69:35:7a:63:cb:
                    1d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EF:48:43:97:FA:3B:1A:B3:BF:A6:C9:8D:A7:FA:B1:0F:80:71:C9
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3230392e36342e302f32302d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         93:11:04:fd:ea:57:7c:98:4c:75:89:c7:96:3e:20:6a:1b:e6:
         b8:2b:17:f6:23:40:6d:35:1f:15:90:13:67:6b:c4:58:2e:ff:
         c3:fb:78:46:2b:c4:0e:22:c5:27:9b:21:4f:a5:7c:a7:59:e0:
         10:90:c4:f8:22:2e:25:ab:2e:fd:89:5f:43:74:3a:93:44:15:
         2c:d7:b1:1a:96:e5:91:33:fd:e8:56:e4:91:e2:e2:ee:b8:81:
         64:22:d5:cb:13:30:0b:65:5a:3b:12:d5:f4:5f:0a:60:a4:b0:
         5d:ae:4b:d4:9a:ac:e7:18:3c:e9:3a:a1:65:a4:8f:54:e3:11:
         ed:8c:98:c0:de:f1:19:04:b3:13:15:eb:32:ff:2c:ba:e7:4a:
         30:86:60:8d:42:bf:6c:fa:a1:49:a5:f0:61:16:68:74:81:5a:
         4e:0b:14:08:ad:2d:74:f2:30:f7:62:19:9f:2b:24:d9:79:79:
         c7:f0:e6:c5:62:3e:69:36:f0:29:39:32:9d:e8:92:49:dd:6d:
         0f:b9:07:7e:83:c7:d0:2a:c4:b9:84:d6:ef:81:b4:bb:0e:2d:
         78:30:9b:89:34:d4:f9:3c:1d:b3:0c:51:da:a8:8d:89:9e:45:
         9d:fa:c9:fe:27:8f:62:f4:1d:9c:d2:4c:52:98:61:5b:2b:fc:
         86:71:15:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:18:54 2025 by rpki-client