Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3138362e3234392e3230382e302f32312d3234203d3e20323633303236.roa
File:                     3138362e3234392e3230382e302f32312d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          I91E2F3jw4jRdSPxaOhLIhvmTJSuU7fGzMz9ajPNwbU=
Subject key identifier:   30:03:22:65:4B:EE:B1:99:C7:3F:60:F6:B2:68:40:BA:7D:BD:82:69
Certificate issuer:       /CN=41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68
Certificate serial:       0676F2627336F4451DA595F458F781682A56E8CD
Authority key identifier: 41:FD:33:29:BA:EE:7F:DE:9F:A6:AE:86:AE:40:25:B1:BF:AE:0A:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3138362e3234392e3230382e302f32312d3234203d3e20323633303236.roa
Signing time:             Mon 27 Oct 2025 14:51:11 +0000
ROA not before:           Mon 27 Oct 2025 14:46:11 +0000
ROA not after:            Mon 26 Oct 2026 14:51:11 +0000
asID:                     263026
IP address blocks:        186.249.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl
                          rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 06:05:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:76:f2:62:73:36:f4:45:1d:a5:95:f4:58:f7:81:68:2a:56:e8:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68
        Validity
            Not Before: Oct 27 14:46:11 2025 GMT
            Not After : Oct 26 14:51:11 2026 GMT
        Subject: CN=300322654BEEB199C73F60F6B26840BA7DBD8269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:13:b2:f1:3a:c4:ef:94:52:21:7b:25:0b:
                    98:6e:60:c6:a5:71:b6:bd:0d:6d:1e:c1:a8:e2:de:
                    fe:ef:86:a1:0c:b3:60:a0:53:c3:74:19:fc:0f:bb:
                    cf:28:1d:82:21:fe:be:3a:31:ff:6a:58:ba:ed:37:
                    0d:0e:bb:95:f4:69:fa:93:92:05:41:60:dd:ef:4f:
                    d1:fc:7d:23:1c:ed:22:47:e6:02:0f:71:04:79:98:
                    f2:27:ef:4e:16:4e:d5:b6:f9:44:8d:f1:30:20:07:
                    06:64:d2:5b:de:2a:21:4c:d0:cf:e6:63:bf:12:c8:
                    e6:72:b5:4d:55:3d:5f:30:32:5e:6b:58:ac:c5:5f:
                    59:bf:bf:3f:05:d2:6a:b8:f0:92:be:54:05:f7:c7:
                    90:3a:1d:42:b3:08:8b:9a:47:ed:f8:ff:9c:26:d2:
                    21:84:5b:be:39:10:66:46:11:ed:cc:3d:d1:bf:85:
                    5a:4a:ff:58:87:d2:4b:49:d1:5a:00:45:3a:57:aa:
                    4b:fd:45:af:92:e7:1f:9b:eb:51:cf:c4:ba:88:f6:
                    8d:d4:6c:4a:13:66:c1:b0:56:8e:7e:51:ee:c4:a4:
                    7a:47:e3:e3:55:1b:98:89:8e:0d:51:9e:18:03:e8:
                    ee:ea:49:e6:7f:da:f7:09:3e:d0:d1:d8:5d:55:1c:
                    c3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:03:22:65:4B:EE:B1:99:C7:3F:60:F6:B2:68:40:BA:7D:BD:82:69
            X509v3 Authority Key Identifier:
                keyid:41:FD:33:29:BA:EE:7F:DE:9F:A6:AE:86:AE:40:25:B1:BF:AE:0A:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3138362e3234392e3230382e302f32312d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         11:96:cb:d6:96:d0:bc:c0:6a:7e:8c:2d:36:92:b4:43:84:00:
         38:fa:65:84:92:e6:21:22:60:76:37:7a:bb:99:d4:4c:0c:7c:
         49:20:be:94:64:64:45:13:a9:25:84:80:47:55:45:eb:53:91:
         11:b7:67:5d:7a:d9:bc:1a:93:e8:b7:91:03:d6:6e:1b:64:81:
         10:db:7a:ce:82:2e:e6:db:de:18:11:91:27:d9:4c:2f:ad:39:
         ec:05:5b:10:c2:11:b0:33:b5:ac:a1:41:ee:62:9c:49:df:d5:
         08:33:6f:d1:9d:3f:7c:a0:9b:56:9a:ec:d3:a1:1b:a8:f1:cd:
         09:e3:e3:be:81:ec:38:23:35:6e:48:be:74:38:64:a2:1d:87:
         9b:88:be:1b:e9:f7:8d:c9:d9:2f:3f:87:d0:2b:8d:9c:dc:fb:
         8a:eb:dd:09:6b:cb:14:94:ad:33:8b:8d:fa:f6:bc:07:50:2c:
         9c:22:6f:6c:e5:f8:7a:29:2c:bb:cd:39:ae:6a:24:14:94:6e:
         9f:ed:ce:f7:f5:72:7b:4c:c1:f5:e2:3c:40:99:3e:08:b1:6b:
         be:00:ff:59:ed:17:3c:42:4b:72:26:bf:28:03:bb:6e:eb:1e:
         5f:7b:ac:2d:de:b7:ce:ed:09:22:54:b5:ea:e2:eb:48:29:8c:
         b4:be:53:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:36:03 2025 by rpki-client