Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/3138362e3232362e3230302e302f32312d3332203d3e20323632323930.roa
File:                     3138362e3232362e3230302e302f32312d3332203d3e20323632323930.roa (raw, json)
Hash identifier:          uiRXmYyaZnyGUKLQ5O4V1lbbD9LHclhNzx6GlKrNEXo=
Subject key identifier:   3A:EF:4E:46:F0:9A:5A:73:5C:4C:98:43:A9:CD:57:76:CE:7F:AF:73
Certificate issuer:       /CN=24DA1210F429D91717494C8CC3BF85882918C64A
Certificate serial:       443EBE96E96DD69908B77A03A48FE648CE676523
Authority key identifier: 24:DA:12:10:F4:29:D9:17:17:49:4C:8C:C3:BF:85:88:29:18:C6:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DA1210F429D91717494C8CC3BF85882918C64A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/3138362e3232362e3230302e302f32312d3332203d3e20323632323930.roa
Signing time:             Mon 01 Sep 2025 15:18:36 +0000
ROA not before:           Mon 01 Sep 2025 15:13:36 +0000
ROA not after:            Mon 31 Aug 2026 15:18:36 +0000
asID:                     262290
IP address blocks:        186.226.200.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.crl
                          rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DA1210F429D91717494C8CC3BF85882918C64A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3e:be:96:e9:6d:d6:99:08:b7:7a:03:a4:8f:e6:48:ce:67:65:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24DA1210F429D91717494C8CC3BF85882918C64A
        Validity
            Not Before: Sep  1 15:13:36 2025 GMT
            Not After : Aug 31 15:18:36 2026 GMT
        Subject: CN=3AEF4E46F09A5A735C4C9843A9CD5776CE7FAF73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:18:8b:75:0a:8d:8a:2c:10:4a:e2:ba:34:83:
                    a1:9e:cf:df:43:77:49:1c:85:9c:a9:30:10:a5:97:
                    3d:ff:a0:ee:bd:51:2f:ab:f7:73:19:5e:cb:3e:bb:
                    45:a9:71:6f:f0:b7:5f:7a:f1:9d:71:0d:71:f5:94:
                    d0:c5:76:07:56:93:d7:ee:31:5f:be:f7:1c:27:a3:
                    3b:be:88:26:d0:6e:1e:c9:de:5e:fa:30:99:53:26:
                    0f:66:71:6f:5f:ef:a5:18:84:04:c9:5d:5f:c1:c1:
                    f5:3d:9f:d1:43:aa:57:0e:bd:32:8e:15:28:3a:65:
                    3c:29:70:ed:ea:ee:b3:68:1c:fb:f2:33:08:00:37:
                    0c:ac:2c:4e:6f:1c:72:11:af:2d:a7:03:1c:aa:f1:
                    71:10:96:78:e9:de:cd:ba:6b:8c:52:c0:97:9e:6d:
                    b2:cc:e8:27:11:31:31:18:d4:f0:61:0f:6f:e3:a7:
                    f5:3a:dd:af:7f:c5:cb:10:c2:90:d6:46:6a:13:b6:
                    a5:be:89:35:0b:02:c3:56:26:65:0c:6c:fa:d5:ec:
                    d4:11:17:a2:b9:73:2c:8f:46:f0:28:59:8b:c6:58:
                    d8:97:66:41:09:15:99:d3:bc:d4:d9:7b:f7:1e:6f:
                    18:c1:0c:f5:8f:47:a4:07:21:06:5c:d0:dd:98:79:
                    48:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EF:4E:46:F0:9A:5A:73:5C:4C:98:43:A9:CD:57:76:CE:7F:AF:73
            X509v3 Authority Key Identifier:
                keyid:24:DA:12:10:F4:29:D9:17:17:49:4C:8C:C3:BF:85:88:29:18:C6:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DA1210F429D91717494C8CC3BF85882918C64A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/3138362e3232362e3230302e302f32312d3332203d3e20323632323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:45:3e:3b:cf:9d:22:d1:ab:09:6f:0b:b9:f5:44:9b:e0:96:
         a6:34:35:0b:7b:17:b2:50:9b:07:f5:02:7b:25:6d:61:0b:27:
         b4:79:8b:f0:bf:0f:04:9d:d4:c9:a0:8b:ff:e8:9a:13:63:9b:
         58:31:73:ee:f5:b4:b6:f6:30:16:a1:01:ff:31:d5:ce:94:d7:
         5c:b7:98:e0:be:3a:6d:fd:79:67:7b:8b:08:7b:71:56:59:8c:
         43:54:b6:46:b8:81:21:6a:db:6d:e3:c8:95:2d:82:5c:da:63:
         47:56:1a:2f:26:9b:31:28:19:42:60:33:9f:f8:5b:c5:d4:56:
         59:b2:23:bb:bf:ab:ec:bd:c6:68:d5:12:12:6a:e0:2b:b5:e1:
         87:d8:fa:c1:72:5e:f8:a8:cc:bc:0e:c6:69:c9:c0:f5:50:d0:
         ae:21:e4:f5:18:d7:17:71:aa:55:35:4e:28:2c:9f:dc:eb:03:
         84:05:7f:58:fd:f4:ca:7c:1c:cc:09:1f:db:3c:3a:62:6b:3d:
         22:23:58:b4:12:f3:f8:82:77:be:27:f4:a2:df:a5:6c:a0:18:
         2a:70:d6:45:0a:e6:2f:74:86:0c:df:50:68:2a:2f:10:a7:a1:
         ac:9b:10:f4:78:26:bf:d1:75:80:d5:c7:c3:cc:cd:ee:ee:36:
         dd:19:d0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:33:09 2025 by rpki-client