Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/3138362e3233362e3234302e302f32322d3232203d3e20323633363338.roa
File:                     3138362e3233362e3234302e302f32322d3232203d3e20323633363338.roa (raw, json)
Hash identifier:          hqeFlM3WrLGFcMNDQIoXAwabvXYa98Oe5uQQiIP/TTc=
Subject key identifier:   A8:72:8B:6B:70:12:6D:69:C0:FC:E6:F0:DE:9B:74:56:92:E2:ED:2E
Certificate issuer:       /CN=783FF5947307C60922650955561D38DF088C82A7
Certificate serial:       3730720212F249586CCB81F5BFA3B504B6F9E0FB
Authority key identifier: 78:3F:F5:94:73:07:C6:09:22:65:09:55:56:1D:38:DF:08:8C:82:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783FF5947307C60922650955561D38DF088C82A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/3138362e3233362e3234302e302f32322d3232203d3e20323633363338.roa
Signing time:             Thu 04 Sep 2025 12:45:52 +0000
ROA not before:           Thu 04 Sep 2025 12:40:52 +0000
ROA not after:            Thu 03 Sep 2026 12:45:52 +0000
asID:                     263638
IP address blocks:        186.236.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/783FF5947307C60922650955561D38DF088C82A7.crl
                          rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/783FF5947307C60922650955561D38DF088C82A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783FF5947307C60922650955561D38DF088C82A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 01:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:30:72:02:12:f2:49:58:6c:cb:81:f5:bf:a3:b5:04:b6:f9:e0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783FF5947307C60922650955561D38DF088C82A7
        Validity
            Not Before: Sep  4 12:40:52 2025 GMT
            Not After : Sep  3 12:45:52 2026 GMT
        Subject: CN=A8728B6B70126D69C0FCE6F0DE9B745692E2ED2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1e:08:1d:eb:e5:b1:d4:d4:a6:f7:77:68:ec:
                    39:f8:ec:ea:07:2b:5b:15:33:ae:9d:50:e7:77:4b:
                    bb:85:90:e2:d0:21:fd:53:08:23:98:7f:d5:49:fd:
                    55:f8:aa:b7:60:55:69:f7:9b:e2:a2:b6:7a:b9:13:
                    9d:b0:00:68:bb:4c:5e:30:1c:d5:98:ec:f9:29:d3:
                    99:eb:31:ce:eb:60:9d:44:71:c2:e4:37:ae:1c:b1:
                    3f:42:b2:c2:f6:93:09:96:3f:b2:c2:c5:7b:eb:94:
                    ed:23:57:c2:86:1a:f0:b6:51:cb:29:12:c3:75:3f:
                    9c:05:7f:ba:a7:75:76:4d:b6:e6:77:23:ef:12:49:
                    8c:9c:17:14:cf:1b:36:02:12:24:40:43:23:be:c6:
                    30:90:61:d2:e3:da:64:ec:ca:b7:31:03:c0:a7:53:
                    df:71:93:64:f5:ae:88:82:b8:9d:89:52:21:03:54:
                    64:a5:a3:76:45:30:88:e6:f6:4b:f2:2a:8a:02:1b:
                    21:30:8b:c7:04:2b:06:06:20:f8:2e:de:ca:46:1d:
                    05:99:8b:36:c5:c7:b1:80:e1:9b:8c:39:0c:19:1c:
                    e5:ae:a6:38:23:e7:ad:df:b3:65:87:e1:96:15:5e:
                    1b:b5:71:50:2b:49:f3:3c:fd:35:13:ec:2f:5f:96:
                    1f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:72:8B:6B:70:12:6D:69:C0:FC:E6:F0:DE:9B:74:56:92:E2:ED:2E
            X509v3 Authority Key Identifier:
                keyid:78:3F:F5:94:73:07:C6:09:22:65:09:55:56:1D:38:DF:08:8C:82:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/783FF5947307C60922650955561D38DF088C82A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783FF5947307C60922650955561D38DF088C82A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/3138362e3233362e3234302e302f32322d3232203d3e20323633363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:b4:f5:7a:22:fe:3f:9b:56:e0:4b:55:ec:69:b6:03:cc:cc:
         6c:ec:0a:f8:73:73:87:a2:4e:75:80:15:d0:0d:12:62:c7:c7:
         90:a3:bc:a6:91:7f:c3:91:3c:24:4a:85:dc:76:ac:c5:f2:58:
         34:4a:19:6d:36:92:c4:17:5b:10:d0:5b:19:89:42:95:55:fc:
         28:0c:04:d8:59:51:6a:fb:bc:a5:63:a8:ed:7a:8c:22:38:61:
         e9:af:1e:3a:34:ea:db:3d:50:a3:fb:35:75:30:6f:99:83:6d:
         92:45:dd:0a:81:26:b3:08:db:27:47:5d:bc:8a:9d:5b:f3:68:
         97:36:73:a8:11:52:79:a4:22:cf:f4:3e:e7:cf:b5:c6:8a:f3:
         08:95:a7:4e:77:ff:8a:20:9b:29:43:85:6c:1e:6b:7b:27:ef:
         41:40:c3:50:43:19:0b:33:20:e7:47:02:76:4a:c7:0f:f7:57:
         a0:60:ab:c3:85:35:af:de:97:46:35:db:95:8a:35:00:9d:f1:
         b2:52:4d:3e:84:7f:89:ca:f4:08:0b:eb:6a:29:bd:4f:bf:4f:
         c8:f0:33:34:c4:fb:d5:55:13:a3:a2:18:d9:ed:80:3c:23:0e:
         81:83:2c:63:ce:68:36:7b:f6:46:f1:f6:26:2a:65:05:e1:2b:
         b8:22:b8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:46:50 2025 by rpki-client