Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3134332e302f32342d3332203d3e203533323235.roa
File:                     3138362e3235312e3134332e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          U0MLzk8rwnGHcsziZKHp6olXxTHWPYXdrR37X51UFtA=
Subject key identifier:   E0:BC:8B:51:65:C3:79:47:DB:61:B8:9A:70:AD:5A:41:6B:21:27:BA
Certificate issuer:       /CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
Certificate serial:       0A021A36DB3A53C424B3B36833CBE4943C5C1FD5
Authority key identifier: 72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3134332e302f32342d3332203d3e203533323235.roa
Signing time:             Thu 08 May 2025 11:56:27 +0000
ROA not before:           Thu 08 May 2025 11:51:27 +0000
ROA not after:            Thu 07 May 2026 11:56:27 +0000
asID:                     53225
IP address blocks:        186.251.143.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 15:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:02:1a:36:db:3a:53:c4:24:b3:b3:68:33:cb:e4:94:3c:5c:1f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
        Validity
            Not Before: May  8 11:51:27 2025 GMT
            Not After : May  7 11:56:27 2026 GMT
        Subject: CN=E0BC8B5165C37947DB61B89A70AD5A416B2127BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b8:2d:ec:29:8f:3c:04:a8:e8:35:9b:6a:dd:
                    b9:a7:5e:04:0b:5e:be:33:53:87:c6:69:d5:c4:2e:
                    58:ed:15:7b:8f:19:c9:2f:4a:5b:b5:84:d8:c4:8c:
                    e6:6a:7a:66:00:dc:94:e4:c9:b1:c6:fe:80:d8:2f:
                    5c:dd:4e:ac:c8:f2:cc:c8:75:55:8f:e4:05:fc:f5:
                    26:fb:66:66:4e:10:74:88:4e:3a:e0:42:63:30:e5:
                    88:cc:11:50:40:b1:de:a6:37:11:04:22:3b:2d:93:
                    9e:95:42:d8:57:9f:74:3f:fa:68:c3:07:7d:cb:49:
                    0e:e0:f0:d7:8e:6c:d3:83:22:ee:dd:cf:a8:ed:b0:
                    1a:a8:43:93:e9:ab:a1:85:f3:19:5c:d5:ef:8a:ce:
                    7f:85:5d:7b:03:25:a6:c6:1f:42:b6:b8:65:14:26:
                    dd:79:22:8a:e4:4e:f3:e2:04:9f:11:a5:70:0b:85:
                    13:91:c9:d0:f3:5e:81:8d:31:3d:f9:07:e5:2d:08:
                    44:e0:f2:d4:f5:de:a4:1d:b9:ad:99:63:55:88:5c:
                    61:38:22:2d:ad:22:dd:58:51:6f:80:7a:b7:c8:7c:
                    63:54:63:43:4f:da:f4:c0:48:48:a1:45:98:8f:1f:
                    c8:23:48:38:ba:3e:60:44:1b:ec:7c:bd:83:68:8a:
                    12:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BC:8B:51:65:C3:79:47:DB:61:B8:9A:70:AD:5A:41:6B:21:27:BA
            X509v3 Authority Key Identifier:
                keyid:72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3134332e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d3:d8:de:30:96:4b:90:fd:c9:c4:22:a7:12:19:62:d0:b6:
         3d:75:2b:c8:a9:51:c3:8f:a8:c8:98:fc:57:94:c2:14:fc:8e:
         9b:0c:5c:b3:37:31:18:55:68:f7:41:40:cd:90:8c:bb:ea:d2:
         d6:a8:8e:34:dc:98:cc:fa:90:23:ad:5f:78:e6:9f:b2:f0:e5:
         92:43:ad:bb:04:85:b4:0f:50:72:60:50:45:fd:3c:82:a2:8c:
         fe:94:bd:18:87:59:80:1a:a5:a1:7c:48:bf:2c:02:80:4f:9d:
         55:61:90:9a:ff:1a:c8:12:58:34:12:10:5a:85:7a:5d:ca:d6:
         0d:94:72:bb:2b:09:71:36:43:8c:33:86:61:bb:28:50:60:61:
         16:a5:f9:b2:d8:bc:6e:ae:50:36:da:95:d7:9a:ed:e6:d3:57:
         45:e0:8a:38:50:89:23:6f:d7:0d:c1:d3:11:c7:1e:2d:4d:b1:
         23:55:1a:bb:09:9d:c0:8c:d7:67:f0:0c:10:0e:e6:bf:c4:cb:
         11:54:c4:6e:bf:d7:d4:85:36:04:ae:db:95:d2:58:cb:c5:ee:
         cc:c1:6f:be:67:54:72:14:56:c8:4b:4b:a9:bb:79:7a:b6:14:
         5f:62:ed:13:de:86:d9:f9:bc:83:79:86:97:87:e4:43:99:12:
         61:c6:80:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 01:06:11 2025 by rpki-client