Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3133352e302f32342d3332203d3e203533323235.roa
File:                     3138362e3235312e3133352e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          1o7M9MRMzrKpg1BL91YdOV87akBA72VaHtLQfKkVmEM=
Subject key identifier:   07:61:18:94:52:4C:B4:D1:9D:DF:37:D4:03:1D:E4:4D:FE:14:67:71
Certificate issuer:       /CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
Certificate serial:       42F9DD4EE022366221ABE8E3DF70FB8F0D9C945A
Authority key identifier: 43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3133352e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 02 Jul 2025 12:06:23 +0000
ROA not before:           Wed 02 Jul 2025 12:01:23 +0000
ROA not after:            Wed 01 Jul 2026 12:06:23 +0000
asID:                     53225
IP address blocks:        186.251.135.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f9:dd:4e:e0:22:36:62:21:ab:e8:e3:df:70:fb:8f:0d:9c:94:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
        Validity
            Not Before: Jul  2 12:01:23 2025 GMT
            Not After : Jul  1 12:06:23 2026 GMT
        Subject: CN=07611894524CB4D19DDF37D4031DE44DFE146771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:1b:6f:83:8d:c3:02:9d:6b:4d:57:21:a0:
                    d0:48:e2:da:a3:c5:2d:7b:74:52:e5:d0:fc:47:cc:
                    ae:54:33:75:84:55:fd:b2:19:a5:32:e3:4a:da:61:
                    db:2e:44:9e:85:25:e9:26:cf:c0:96:08:04:e2:ed:
                    66:b5:a9:b3:5f:d1:50:7a:54:fc:04:c7:ec:56:01:
                    63:4a:ae:ad:82:ee:b0:ce:ae:66:8a:c0:37:12:91:
                    08:3d:1c:0c:c3:f5:d1:3a:60:25:1a:fe:1d:90:02:
                    7d:37:3d:a4:25:6d:ea:33:b0:cf:1a:f7:7f:a1:76:
                    ce:fa:7a:37:23:58:a6:d7:9a:8f:43:e6:69:69:9a:
                    16:99:05:a3:d1:e0:13:59:98:2b:ef:90:f4:47:47:
                    6a:ec:c6:a6:26:22:25:76:ea:53:2e:ad:69:3e:6d:
                    55:0f:fb:47:88:3e:53:98:c5:82:b8:0f:f5:3c:59:
                    f7:ea:b1:2a:cb:39:4f:8d:22:a8:e3:3f:f7:03:af:
                    d8:23:d4:aa:f6:5a:7c:b4:1a:3a:15:19:b0:36:92:
                    6e:c7:2f:99:1b:91:7a:43:7e:f8:54:bd:ea:03:29:
                    74:b6:92:b6:65:14:53:c7:95:d5:2e:5f:be:6d:1b:
                    a5:d3:c2:b4:c2:39:ef:ad:94:15:0f:b6:17:10:ad:
                    1e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:61:18:94:52:4C:B4:D1:9D:DF:37:D4:03:1D:E4:4D:FE:14:67:71
            X509v3 Authority Key Identifier:
                keyid:43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3133352e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:af:35:05:e6:92:ab:fd:89:55:73:46:68:ed:15:c7:77:4f:
         17:1a:82:08:70:3b:30:4a:12:96:c9:b8:71:78:4e:5d:a6:29:
         6d:fd:55:0a:ef:48:0f:72:42:ee:84:c1:fd:58:28:75:2c:4f:
         b5:24:ea:c3:81:eb:3b:01:bb:1e:2f:18:a7:89:cb:90:eb:5a:
         67:5a:52:aa:06:ca:06:e4:a3:66:2c:fc:20:b9:55:29:d8:31:
         83:ab:1c:95:10:9f:84:f2:7d:1b:71:a6:14:5e:1b:d4:5a:7f:
         d8:e1:0f:7e:0e:43:0e:90:55:ad:e4:3e:0a:0d:ec:d4:83:d1:
         58:af:9f:0c:cc:4f:f7:6f:3d:03:94:a8:c6:43:83:fe:f1:5e:
         8b:60:97:69:3e:0d:3f:f0:a4:8c:31:24:2a:b0:ee:9f:1b:ba:
         4e:aa:f4:f2:ae:de:83:47:e3:49:e9:cf:9e:27:f8:3e:47:ae:
         25:98:72:6e:ad:97:e2:8d:a1:c6:f2:0f:a3:1b:8a:57:46:8b:
         0a:a6:70:0a:b8:13:69:02:97:4a:11:f8:b5:eb:85:3f:46:ae:
         d0:05:4e:fc:eb:c2:b7:e6:27:79:67:2d:46:4f:f8:57:0c:4f:
         db:47:c2:48:4b:3f:d4:87:6a:8f:0c:f4:c7:6f:5c:e8:c0:81:
         28:b2:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:33:32 2025 by rpki-client