Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3138362e3234392e3231362e302f32322d3234203d3e20323633353639.roa
File:                     3138362e3234392e3231362e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier:          fgywBGElImbpfj0GeFPB0GQIlF9uifL0fl+b9Q9ePb0=
Subject key identifier:   DE:1C:B5:54:6C:97:04:BE:35:2A:FA:3D:C1:FB:82:F3:F4:ED:B3:9F
Certificate issuer:       /CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Certificate serial:       145E0558622AEF4E1CC94CCF0ACA94AAEC542CE8
Authority key identifier: B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3138362e3234392e3231362e302f32322d3234203d3e20323633353639.roa
Signing time:             Mon 08 Sep 2025 14:16:47 +0000
ROA not before:           Mon 08 Sep 2025 14:11:47 +0000
ROA not after:            Mon 07 Sep 2026 14:16:47 +0000
asID:                     263569
IP address blocks:        186.249.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl
                          rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 22:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5e:05:58:62:2a:ef:4e:1c:c9:4c:cf:0a:ca:94:aa:ec:54:2c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
        Validity
            Not Before: Sep  8 14:11:47 2025 GMT
            Not After : Sep  7 14:16:47 2026 GMT
        Subject: CN=DE1CB5546C9704BE352AFA3DC1FB82F3F4EDB39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ef:25:d9:84:b7:a4:d2:2b:d4:af:e3:e6:07:
                    05:21:4d:3b:c3:a9:ed:1b:35:61:93:bb:4a:27:a1:
                    88:9d:4e:b8:3e:27:db:07:7d:dd:35:93:62:36:30:
                    55:ce:92:79:f6:7a:44:53:f1:fe:1a:00:ab:82:16:
                    7c:c7:d1:d9:78:f8:33:dc:6e:9f:fc:14:f7:1b:1d:
                    36:a5:71:5f:fd:5a:0c:05:27:bf:90:ea:57:58:a3:
                    fe:32:98:dd:a1:84:48:5c:cb:e7:a9:32:e4:65:6a:
                    19:be:da:f2:55:a4:84:0d:86:ec:a9:f3:b7:3c:2e:
                    98:38:bd:47:99:a2:a1:95:5d:40:d2:0f:85:f3:c7:
                    4e:12:fb:47:ae:4f:40:e8:92:dc:b8:df:da:c4:64:
                    82:8f:d4:fd:3a:d4:3c:a0:e9:ce:6b:08:ec:49:2d:
                    af:3e:8d:f0:0b:e9:b6:72:09:43:fa:29:96:26:ae:
                    aa:6c:70:79:1b:e6:25:a1:11:d1:87:b7:e2:40:40:
                    d4:de:d2:a5:3a:e2:57:fa:23:3e:c9:e2:94:3d:00:
                    ef:25:18:39:bb:dc:33:9d:40:e4:b7:2e:31:22:6f:
                    1a:01:e0:f1:2c:5d:3a:4a:f5:a2:fb:cc:70:73:11:
                    ea:af:45:2e:5a:c0:1f:da:9f:16:5c:0a:65:66:52:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1C:B5:54:6C:97:04:BE:35:2A:FA:3D:C1:FB:82:F3:F4:ED:B3:9F
            X509v3 Authority Key Identifier:
                keyid:B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3138362e3234392e3231362e302f32322d3234203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:c4:b9:76:8d:5d:5c:8a:bc:4f:26:8d:d3:54:5b:c9:11:ea:
         fa:03:2c:ee:56:9d:01:55:f0:8d:12:72:53:6a:c3:b8:d4:b4:
         6c:23:c3:80:06:c1:e5:ad:3f:23:c5:6e:75:89:25:2a:3e:79:
         36:81:e6:79:3b:e9:3a:2e:86:1c:2b:90:71:24:23:ce:3d:75:
         8b:53:d0:d5:50:2c:b8:57:ae:d6:7d:a0:12:2d:5f:35:08:13:
         86:11:32:57:19:4e:7e:77:dd:af:6e:d1:cd:b4:37:04:49:c8:
         f1:87:30:67:90:b7:66:28:06:26:58:84:59:1f:f4:2f:be:82:
         eb:72:0d:39:a9:6c:aa:f2:3f:d1:df:2b:7e:53:6a:e2:52:dd:
         cb:39:35:78:83:1b:a8:e5:16:94:93:3a:05:bf:f5:bb:5b:9a:
         71:90:50:e8:3d:e3:13:db:89:9a:2a:a3:ba:dc:4f:d0:a6:d6:
         49:7e:aa:b3:89:43:31:12:7d:56:ea:e7:0d:b5:d8:10:0f:d0:
         30:67:74:ff:e1:52:42:53:ab:9a:e1:51:3e:10:2e:46:06:f5:
         07:3c:6d:2c:4b:91:6f:95:19:58:8e:17:a3:79:94:9f:d0:f1:
         73:d2:6b:ad:f9:90:5d:3a:9a:3b:41:49:83:55:8c:2d:41:5e:
         08:a2:d0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:25:33 2025 by rpki-client