Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa
File:                     3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (raw, json)
Hash identifier:          3DMepOCJsB4RYYr4kz8XiRydllbiQu6BC/Dt9YVTrTI=
Subject key identifier:   13:C3:F6:77:9E:06:D4:98:FE:2C:47:92:8D:ED:20:3B:E6:AE:9C:65
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       526F0441D393DAD7AECFE0116C34D37ED27B0CA6
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa
Signing time:             Mon 18 Aug 2025 20:05:47 +0000
ROA not before:           Mon 18 Aug 2025 20:00:47 +0000
ROA not after:            Mon 17 Aug 2026 20:05:47 +0000
asID:                     53218
IP address blocks:        186.250.168.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6f:04:41:d3:93:da:d7:ae:cf:e0:11:6c:34:d3:7e:d2:7b:0c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Aug 18 20:00:47 2025 GMT
            Not After : Aug 17 20:05:47 2026 GMT
        Subject: CN=13C3F6779E06D498FE2C47928DED203BE6AE9C65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8e:7a:18:12:47:92:5a:de:b6:e3:2c:01:dd:
                    a0:30:43:df:63:0d:11:6a:58:c9:d4:b6:cd:e2:75:
                    28:54:1b:56:df:80:06:5e:1c:58:42:e6:b2:e2:a8:
                    fe:19:49:10:9d:8c:46:02:32:63:85:83:18:83:3f:
                    0c:41:8f:43:99:cd:db:06:69:00:e6:df:41:ac:e7:
                    51:4d:f9:42:0d:a4:05:56:af:39:03:74:2d:d6:97:
                    3d:1f:36:93:3d:b9:35:75:82:69:b9:a0:fd:d6:46:
                    37:1e:c9:20:ce:f2:3c:23:0d:69:70:85:0b:7b:e0:
                    88:12:68:94:fc:65:6d:4d:33:80:3a:86:a4:96:45:
                    b7:4e:bc:98:0b:56:95:99:2b:7c:66:17:26:26:df:
                    a0:fc:00:81:2c:6d:0d:86:c6:3b:a9:3c:7e:af:2e:
                    37:e3:f7:38:ea:18:6b:d9:14:cd:22:c3:15:fa:a7:
                    5f:3a:24:d6:99:91:ce:c9:55:84:a2:7b:fd:e2:0d:
                    c9:c1:a4:8b:ed:eb:77:0d:10:47:fe:de:df:58:89:
                    23:8f:73:df:79:24:7a:75:77:03:4f:69:6d:70:48:
                    a3:da:10:38:42:2f:e5:e3:c7:8e:ee:c9:ba:6a:16:
                    d6:2e:24:74:cc:ff:bc:d2:3e:96:77:b1:91:46:2c:
                    1e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C3:F6:77:9E:06:D4:98:FE:2C:47:92:8D:ED:20:3B:E6:AE:9C:65
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:a4:1d:81:80:71:77:3f:c5:38:d6:16:40:8b:eb:34:c8:71:
         82:e8:32:02:af:ae:4c:72:12:36:49:86:22:2b:e1:17:1b:0b:
         df:a0:1b:e5:ad:a2:a7:63:3a:8e:d5:de:b5:b1:76:5c:09:0a:
         44:de:94:8f:61:e9:d6:c8:b9:0e:a5:21:4b:0d:0f:3d:94:71:
         d5:19:0c:c1:4a:6f:01:20:b7:59:22:0b:10:48:de:e2:76:c7:
         ef:70:fa:6d:04:13:ee:65:57:78:c8:af:5c:0f:6d:0a:1f:d2:
         f1:db:67:07:75:dd:a7:58:1d:ce:88:44:99:7b:ac:b8:7c:93:
         72:dc:a6:c7:fb:18:85:11:ef:68:4e:d8:6f:9a:1d:05:41:c8:
         c8:3e:96:34:27:1c:79:ae:33:63:5e:91:d5:08:04:c6:b9:59:
         6a:97:f2:be:2c:02:cf:e4:e5:e5:b1:f1:9d:1b:a6:36:82:f7:
         71:64:1f:5a:77:a6:49:ca:f9:fe:db:a3:86:0a:42:f5:28:f9:
         01:de:ca:a5:30:28:bd:5a:96:68:15:ba:1e:c7:0e:5f:f6:1f:
         f4:34:28:71:4d:6e:96:d2:21:04:12:e5:dd:cf:48:0f:99:4e:
         b9:9b:0b:e2:d5:0b:95:a6:7f:72:b9:67:bb:77:d3:91:4c:17:
         f7:3d:32:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:03:09 2025 by rpki-client