Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3133362e302f32342d3332203d3e203533323235.roa
File:                     3138362e3235312e3133362e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          SiC5rErQPH0EODOaIwvE/agNJWUXChGoUPM9JgGxt50=
Subject key identifier:   C2:C5:4A:24:B5:3B:A7:83:51:EA:02:BC:0C:17:BD:3F:CB:2A:F5:06
Certificate issuer:       /CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
Certificate serial:       16AF3A5F2FF8AEEBD589DD33438DC4762000D9CC
Authority key identifier: 43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3133362e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 02 Jul 2025 12:06:22 +0000
ROA not before:           Wed 02 Jul 2025 12:01:22 +0000
ROA not after:            Wed 01 Jul 2026 12:06:22 +0000
asID:                     53225
IP address blocks:        186.251.136.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:af:3a:5f:2f:f8:ae:eb:d5:89:dd:33:43:8d:c4:76:20:00:d9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
        Validity
            Not Before: Jul  2 12:01:22 2025 GMT
            Not After : Jul  1 12:06:22 2026 GMT
        Subject: CN=C2C54A24B53BA78351EA02BC0C17BD3FCB2AF506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:08:c2:63:20:47:f7:43:04:f8:2f:ed:04:
                    07:33:0c:e6:50:0d:9e:88:e5:a8:e3:69:8c:ef:c5:
                    cd:3b:5f:ad:f7:4f:91:05:65:16:b2:76:f9:a8:03:
                    0d:bb:af:03:29:54:37:b9:4d:b3:cf:3c:b2:f5:2e:
                    56:70:ce:0e:86:a7:61:67:eb:37:ce:9a:ed:a6:00:
                    4c:ac:fe:0e:83:15:c9:a7:47:25:94:07:ae:53:e7:
                    5f:ba:6c:c2:74:94:e9:0e:f0:4d:e6:f9:19:c3:65:
                    4e:8c:2c:0b:48:a7:53:5f:b1:0a:5b:98:98:c0:ec:
                    f8:a7:50:fd:18:79:f5:a3:7b:85:f1:22:b2:01:3d:
                    b9:e8:77:a3:07:2a:90:99:fa:cd:47:b6:07:07:b4:
                    d8:6c:8c:a6:c1:5e:14:11:3e:2c:3e:08:fa:20:58:
                    32:69:52:11:2b:15:81:bf:80:04:0f:65:6c:c7:bb:
                    0f:2e:46:70:50:a4:1f:90:91:f6:a2:5b:26:f9:1d:
                    3d:b4:47:74:89:80:4d:41:6f:60:3e:cc:e1:a3:d2:
                    c5:7e:fc:97:d8:9b:c2:2d:f3:72:74:af:7a:4f:ff:
                    fa:05:24:ba:62:ee:ec:54:25:f1:8f:31:4d:07:c6:
                    1a:5f:7d:46:8a:32:09:14:67:ca:6a:5b:b3:7c:80:
                    58:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C5:4A:24:B5:3B:A7:83:51:EA:02:BC:0C:17:BD:3F:CB:2A:F5:06
            X509v3 Authority Key Identifier:
                keyid:43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3133362e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:cb:d1:d8:05:bd:5b:0e:1d:24:b5:c1:28:48:89:77:f3:ee:
         c0:60:90:f6:2d:f5:27:52:ee:5e:83:90:b5:15:cd:94:7b:d6:
         b9:af:8b:18:a6:29:dd:cd:3a:90:1e:6a:3a:e0:6a:10:82:15:
         b6:42:56:07:81:43:ea:aa:39:91:1b:51:42:a0:93:d4:12:c3:
         e9:ce:6d:de:05:a9:d0:8d:49:cf:1a:74:a5:fc:1b:be:c9:14:
         30:3c:bb:ba:02:f0:c2:1a:ce:17:2a:31:0f:33:e2:6b:10:6a:
         22:0b:04:42:c4:10:10:32:e0:5f:df:58:59:0b:88:d3:c0:03:
         aa:34:16:94:ae:59:9c:75:bb:fb:1b:39:4b:f9:50:d3:1c:36:
         c6:41:9d:97:6e:19:b6:67:4c:0a:c6:9c:94:f0:f2:b6:6e:43:
         d8:bb:bb:5f:29:cc:0a:b7:85:cd:e6:f9:94:e0:34:1f:be:23:
         b9:17:48:f3:17:90:2e:71:76:13:61:cc:10:e3:75:93:ad:e0:
         e9:6a:c1:da:0f:6e:ad:18:cc:ec:a1:ed:f5:a3:8d:f2:20:b1:
         74:0b:dc:08:5d:b0:c7:fb:ad:34:5d:f7:61:df:7c:9e:07:41:
         d9:05:d6:ca:76:39:1e:b4:ec:88:a5:e8:9a:9e:08:76:fd:d2:
         0a:9a:45:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:31:09 2025 by rpki-client