Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3133382e302f32342d3332203d3e203533323235.roa
File:                     3138362e3235312e3133382e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          9gW7fw8ZME6sD+CipVi5OKYFoMcoBgo6Ux+e9y3Khr8=
Subject key identifier:   CB:5F:E5:61:AE:6D:69:DF:85:57:63:D7:29:8A:13:EB:EF:84:9B:20
Certificate issuer:       /CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
Certificate serial:       143D51F3B22E77A0B72FEA4C7A0AE31216C4B2DD
Authority key identifier: 43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3133382e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 02 Jul 2025 12:06:27 +0000
ROA not before:           Wed 02 Jul 2025 12:01:27 +0000
ROA not after:            Wed 01 Jul 2026 12:06:27 +0000
asID:                     53225
IP address blocks:        186.251.138.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3d:51:f3:b2:2e:77:a0:b7:2f:ea:4c:7a:0a:e3:12:16:c4:b2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
        Validity
            Not Before: Jul  2 12:01:27 2025 GMT
            Not After : Jul  1 12:06:27 2026 GMT
        Subject: CN=CB5FE561AE6D69DF855763D7298A13EBEF849B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:44:ec:ec:46:e1:95:5c:bc:98:de:31:5b:06:
                    90:35:66:3a:1b:2d:7a:56:6a:03:c6:ea:96:09:a5:
                    00:53:8a:f2:2c:22:c6:26:12:5c:ce:75:2a:4b:8b:
                    3a:75:d7:ed:c8:9b:d7:d0:ab:59:72:f8:f9:03:84:
                    3d:d2:45:83:df:cf:20:e4:12:94:f1:9b:34:ac:c7:
                    6b:1a:f1:34:a8:07:52:c6:4c:39:5e:5a:8a:1f:0f:
                    cf:a9:d0:94:f4:4c:66:b2:5d:dc:66:9c:ab:e6:97:
                    04:b4:45:e1:ca:62:65:14:51:ae:ec:45:25:cb:83:
                    d8:71:08:a8:8e:c7:0a:9e:83:38:ca:91:18:4c:7f:
                    0a:8b:ec:87:ee:8b:2d:2b:94:7c:54:dd:41:db:20:
                    89:54:14:14:b5:94:4d:3b:0a:66:e2:8d:03:fb:02:
                    c3:e7:dd:64:8d:92:7c:08:e2:c5:b0:a4:d2:f0:76:
                    ec:64:c3:f1:4f:44:e4:7d:fc:33:6a:d5:ed:97:2c:
                    8b:27:fb:58:b3:a7:9b:25:1f:a1:2a:43:b7:50:6e:
                    39:d5:38:82:5a:e9:e8:af:9e:b1:a5:64:14:87:87:
                    3a:42:53:ee:c8:32:d3:2c:ed:0b:23:86:ed:05:8c:
                    2f:2f:9f:9b:1d:25:be:0e:71:40:4c:5e:c0:6a:ec:
                    05:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5F:E5:61:AE:6D:69:DF:85:57:63:D7:29:8A:13:EB:EF:84:9B:20
            X509v3 Authority Key Identifier:
                keyid:43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3133382e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:78:10:1c:b8:87:8f:7e:03:6d:45:fe:25:fd:09:5f:20:68:
         87:13:1f:e6:0c:c7:57:08:3d:43:98:70:a4:72:47:3d:a1:95:
         5e:c1:29:5c:99:7c:04:b6:dc:1b:56:3a:73:bb:d7:b8:b8:76:
         a3:8e:d7:76:05:07:02:d1:ef:1a:ba:79:43:80:96:4c:95:c5:
         c5:30:61:ad:16:12:34:8a:50:55:48:bc:ac:24:52:2c:f4:d3:
         9c:d1:c7:e5:d4:25:96:15:f4:8a:75:b8:e8:b6:33:fd:7d:38:
         2b:4a:1b:3b:7c:33:5a:df:3a:40:81:e4:b8:5b:a4:e8:25:e0:
         33:61:a8:5d:65:c4:f9:7c:8f:0f:a8:33:67:4b:c3:14:3a:8b:
         dd:90:5e:45:64:be:41:67:2f:ce:d2:61:74:f1:32:7c:ec:62:
         d1:8d:e5:65:6d:f3:b9:54:56:83:32:11:15:5f:7a:f9:df:db:
         eb:d0:bf:30:9f:1b:37:ff:e3:5a:37:a6:1f:19:be:a8:0a:d2:
         f3:8f:bd:d9:d0:c7:a8:74:d2:28:20:3c:4e:49:3f:f6:53:e7:
         9b:e1:12:dd:8a:d8:32:6e:ee:a0:e3:35:3c:29:79:73:88:bc:
         39:f5:b7:7c:39:8c:0e:35:bd:ec:f6:67:6d:4c:79:7d:71:a1:
         42:21:e6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:38:03 2025 by rpki-client