Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138362e3139332e3234302e302f32302d3234203d3e203238323630.roa
File:                     3138362e3139332e3234302e302f32302d3234203d3e203238323630.roa (raw, json)
Hash identifier:          unhHaQYULGC0/VmFLz/6JkbKqhI98mIcdDfJX1AtUWk=
Subject key identifier:   51:66:C9:20:BF:37:E3:B0:95:42:9C:42:21:39:1F:46:A7:82:C6:2E
Certificate issuer:       /CN=2A63119ED3171CA655D3DBACD89FA128C88760E9
Certificate serial:       1EA48F8DD16ECA8E4EC72421F084D128BD9C4E57
Authority key identifier: 2A:63:11:9E:D3:17:1C:A6:55:D3:DB:AC:D8:9F:A1:28:C8:87:60:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138362e3139332e3234302e302f32302d3234203d3e203238323630.roa
Signing time:             Wed 10 Sep 2025 18:48:36 +0000
ROA not before:           Wed 10 Sep 2025 18:43:36 +0000
ROA not after:            Wed 09 Sep 2026 18:48:36 +0000
asID:                     28260
IP address blocks:        186.193.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.crl
                          rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 04:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a4:8f:8d:d1:6e:ca:8e:4e:c7:24:21:f0:84:d1:28:bd:9c:4e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A63119ED3171CA655D3DBACD89FA128C88760E9
        Validity
            Not Before: Sep 10 18:43:36 2025 GMT
            Not After : Sep  9 18:48:36 2026 GMT
        Subject: CN=5166C920BF37E3B095429C4221391F46A782C62E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:59:e5:49:98:86:ab:61:63:ae:ad:2d:49:a5:
                    17:22:4d:a5:a3:9f:b9:0a:c4:31:69:07:17:69:0c:
                    21:a7:be:4a:30:0d:b1:c4:80:7b:35:3f:17:9e:e6:
                    79:98:14:47:7f:b4:d6:b1:19:7d:8c:95:af:ee:91:
                    51:9e:13:01:58:93:db:02:8b:99:f3:ed:9e:9b:56:
                    4f:0c:b9:7b:6f:eb:5d:be:71:eb:4e:5c:9e:3b:36:
                    2d:50:28:b6:ea:06:87:52:29:1d:4e:e6:cc:08:68:
                    dc:f2:45:2e:08:9b:0b:d2:98:68:d8:f1:f0:9d:72:
                    0c:03:cb:82:d8:f6:70:02:db:a6:c0:e7:7e:8c:5c:
                    d5:7f:90:09:3d:7a:a8:49:22:c5:97:09:f0:03:08:
                    8d:c0:68:78:69:08:9b:d3:db:63:70:3d:22:7b:38:
                    cd:9c:3a:42:38:98:3f:a0:87:1d:f5:79:68:02:b4:
                    80:a5:86:20:af:b8:1f:a3:e2:b2:2c:14:51:ca:2a:
                    d0:8f:fe:e2:f6:fd:b0:32:c8:0f:35:da:63:16:90:
                    41:ac:40:75:95:83:36:f7:63:a4:c1:37:07:49:29:
                    d3:4f:d6:e3:83:60:60:56:40:da:8b:d4:dc:9d:9b:
                    aa:2a:76:ee:e5:70:82:22:cb:4c:8b:ad:45:f8:29:
                    b0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:66:C9:20:BF:37:E3:B0:95:42:9C:42:21:39:1F:46:A7:82:C6:2E
            X509v3 Authority Key Identifier:
                keyid:2A:63:11:9E:D3:17:1C:A6:55:D3:DB:AC:D8:9F:A1:28:C8:87:60:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138362e3139332e3234302e302f32302d3234203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:cb:f2:f4:ea:54:9c:aa:c2:7a:fd:61:09:09:16:dc:17:bc:
         f6:84:67:d2:70:32:b6:4a:53:98:8d:3e:aa:2a:c4:92:bd:f8:
         fb:85:22:a5:7f:a1:c0:c0:ab:be:0d:60:a3:52:b8:7c:68:23:
         e0:18:a0:92:40:16:2a:a0:0f:15:bd:66:4b:0f:36:a4:e4:0d:
         99:9a:8f:2f:ad:9f:60:4f:b3:f6:d7:0f:13:34:33:f2:09:a5:
         ce:3c:df:5d:f4:1f:96:c1:a6:26:74:7c:10:8f:1f:0c:50:66:
         1d:f3:7b:b6:32:a2:45:38:d4:37:23:04:56:26:0c:46:e2:20:
         40:bf:7d:1d:f4:28:c5:8f:2e:ac:f5:07:55:e2:dd:d0:66:66:
         24:c9:49:32:51:da:fa:a3:cb:c6:3f:20:3e:ac:52:7f:cf:99:
         69:04:0c:5f:db:1f:73:55:69:af:91:dd:40:e1:f0:75:42:43:
         c9:24:91:fc:e3:09:81:54:fe:a7:69:9a:21:31:8b:95:c0:8a:
         9b:fd:a4:55:d8:dd:05:45:ad:86:7c:64:e7:bc:8d:95:03:96:
         88:6a:c3:61:bc:57:fd:51:5a:2c:d5:60:cc:24:5f:46:a3:5f:
         aa:89:87:8b:b0:19:7e:5c:e8:22:c5:b3:85:15:6f:b3:b0:5e:
         65:c9:81:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:28:51 2025 by rpki-client