Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130372e302f32342d3234203d3e203533313037.roa
File:                     3138362e3230392e3130372e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier:          oXEQYu/SMJhBxACzQ5w7/TCCqqs1HWt7xPKin5NreKU=
Subject key identifier:   F2:96:D3:47:7A:60:88:DE:07:4E:9D:E8:E4:2D:BC:96:D3:AF:BD:EE
Certificate issuer:       /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial:       586B36D6667759F6A67C9BD0F4AF1EBD463F136A
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130372e302f32342d3234203d3e203533313037.roa
Signing time:             Wed 20 Aug 2025 15:58:07 +0000
ROA not before:           Wed 20 Aug 2025 15:53:07 +0000
ROA not after:            Wed 19 Aug 2026 15:58:07 +0000
asID:                     53107
IP address blocks:        186.209.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6b:36:d6:66:77:59:f6:a6:7c:9b:d0:f4:af:1e:bd:46:3f:13:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
        Validity
            Not Before: Aug 20 15:53:07 2025 GMT
            Not After : Aug 19 15:58:07 2026 GMT
        Subject: CN=F296D3477A6088DE074E9DE8E42DBC96D3AFBDEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:aa:0f:65:dc:03:f1:3d:a2:95:cb:92:23:28:
                    92:6e:90:35:51:44:11:8b:91:d8:ff:cd:de:69:50:
                    12:15:fe:dc:bc:8d:6e:68:ae:90:9e:78:21:cc:c0:
                    f9:9e:2e:44:f4:7e:88:e5:29:0c:69:b5:00:ee:5c:
                    6e:7c:a7:36:68:f1:5a:b5:56:6a:92:d2:6c:37:43:
                    33:6d:d2:a1:fd:20:01:92:c6:d8:8d:29:a6:9d:8c:
                    63:07:f9:91:22:84:6d:a3:a2:f1:3d:07:29:47:10:
                    ad:0b:00:7c:79:ef:fa:1d:ab:e0:85:1d:45:b5:20:
                    d2:19:20:bc:aa:16:84:b0:f5:29:6a:d6:70:3e:39:
                    26:4b:ac:a6:fd:40:5a:d5:70:a9:29:49:88:d3:19:
                    1b:15:48:0f:2e:0b:43:9a:12:ac:41:90:84:9a:14:
                    9c:13:d1:9b:3b:9e:ea:da:70:37:dd:40:1d:75:76:
                    86:3f:8e:da:27:20:20:05:3f:ec:87:fe:7a:04:d0:
                    d8:e3:72:d9:6d:18:11:7a:bf:ad:60:ab:54:55:1a:
                    44:14:8a:9d:19:dd:6e:0a:15:0a:91:36:a3:ca:30:
                    b6:7c:47:83:d0:11:be:c1:ee:15:ea:9b:06:01:c6:
                    bf:b3:dd:78:9b:6f:f2:f8:b4:bd:f3:4b:c6:a3:33:
                    01:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:96:D3:47:7A:60:88:DE:07:4E:9D:E8:E4:2D:BC:96:D3:AF:BD:EE
            X509v3 Authority Key Identifier:
                keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130372e302f32342d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:9a:94:2e:1f:22:c9:24:4f:33:f4:e6:ab:9f:a4:10:89:52:
         a2:fc:be:7d:1d:1e:1f:4e:ff:1f:60:c0:bf:91:98:4d:0b:40:
         f4:55:ec:df:89:8c:0f:c3:1b:97:40:e7:f4:f5:ee:65:69:06:
         db:61:9e:61:52:45:ee:6d:2e:2f:c1:bd:12:92:54:7e:44:a2:
         24:e1:fa:5f:56:71:e4:2e:dd:45:84:31:b7:9a:86:65:d7:2a:
         20:3f:b6:ef:53:4b:62:76:6c:eb:24:84:01:b9:54:2e:53:79:
         53:c3:32:1a:24:2d:4a:62:05:21:39:7d:ef:a2:60:cf:35:d9:
         4c:a6:9f:bd:fc:80:fc:60:f9:64:41:a7:8d:29:fa:ac:69:fa:
         4b:c2:82:12:88:f6:98:8e:f8:a5:ed:a8:80:70:23:f4:d6:19:
         df:35:46:dd:fd:09:cc:b7:91:21:d2:b6:80:86:17:93:d9:3d:
         e6:8b:c5:ff:9a:64:83:1b:e0:af:11:c9:c2:31:2b:3f:39:af:
         1d:39:85:04:63:0b:f7:1f:3b:b0:8c:30:40:f2:87:8c:8e:62:
         12:99:a3:0d:b1:e3:e9:72:66:9d:e8:46:d5:15:66:57:b0:30:
         9a:f9:f8:87:9f:82:ad:ad:5d:74:7a:0f:31:da:24:ec:17:cf:
         b4:24:07:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:22:34 2025 by rpki-client