Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KV1gajkbvL4dsdE4P5Bac2Ezo97ZZGs93r1mYAiDzS6/0/3138362e3235312e36342e302f32312d3234203d3e20323632383236.roa
File:                     3138362e3235312e36342e302f32312d3234203d3e20323632383236.roa (raw, json)
Hash identifier:          dceUKXTi3iGy3gMSE9ACPm8NbgmKiTDjuPvjCN7DnvQ=
Subject key identifier:   E0:8A:4A:43:84:E3:A7:78:06:64:84:BD:8D:6B:F3:B9:24:FD:87:14
Certificate issuer:       /CN=F41A3B424DC82042A446A1FBCDC9AC982418C829
Certificate serial:       691389C8115EDBF8AFD69FE1611E02FFFC6D90CC
Authority key identifier: F4:1A:3B:42:4D:C8:20:42:A4:46:A1:FB:CD:C9:AC:98:24:18:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F41A3B424DC82042A446A1FBCDC9AC982418C829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KV1gajkbvL4dsdE4P5Bac2Ezo97ZZGs93r1mYAiDzS6/0/3138362e3235312e36342e302f32312d3234203d3e20323632383236.roa
Signing time:             Mon 06 Oct 2025 17:48:17 +0000
ROA not before:           Mon 06 Oct 2025 17:43:17 +0000
ROA not after:            Mon 05 Oct 2026 17:48:17 +0000
asID:                     262826
IP address blocks:        186.251.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KV1gajkbvL4dsdE4P5Bac2Ezo97ZZGs93r1mYAiDzS6/0/F41A3B424DC82042A446A1FBCDC9AC982418C829.crl
                          rsync://rpki-repo.registro.br/repo/7KV1gajkbvL4dsdE4P5Bac2Ezo97ZZGs93r1mYAiDzS6/0/F41A3B424DC82042A446A1FBCDC9AC982418C829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F41A3B424DC82042A446A1FBCDC9AC982418C829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:13:89:c8:11:5e:db:f8:af:d6:9f:e1:61:1e:02:ff:fc:6d:90:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F41A3B424DC82042A446A1FBCDC9AC982418C829
        Validity
            Not Before: Oct  6 17:43:17 2025 GMT
            Not After : Oct  5 17:48:17 2026 GMT
        Subject: CN=E08A4A4384E3A778066484BD8D6BF3B924FD8714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:03:13:5b:dd:2d:7a:c0:14:3d:a6:dc:7a:
                    1d:99:0e:c4:1a:ca:cf:94:0e:2f:6a:f2:38:ef:9a:
                    0e:25:47:1e:77:9c:e5:65:58:28:40:c1:5a:b0:65:
                    e1:fc:f3:1d:14:f3:68:54:e3:87:0a:f2:f9:54:05:
                    a4:cc:5e:cc:37:00:12:cf:26:f9:5f:39:19:8b:aa:
                    20:81:7b:3c:46:27:6d:11:25:db:a9:ea:ca:8d:43:
                    1f:9f:a7:ce:e0:c4:f4:91:8d:7e:a1:30:5c:9e:bd:
                    2a:e5:a0:61:fd:b0:7c:ed:e6:6a:87:ae:34:e5:82:
                    48:d0:b1:ef:4d:b5:27:f7:4b:20:59:c6:ed:43:dd:
                    b6:b7:7a:64:a5:8e:4a:d8:d6:ca:61:2f:47:c4:b5:
                    11:bb:60:9d:e7:4f:48:1a:d2:71:2d:8d:8d:bf:f0:
                    35:14:a0:fa:bb:0f:bd:4b:0d:f5:91:32:98:1a:0a:
                    6f:2a:58:e6:99:a9:5a:b8:07:f6:b6:3b:92:d5:e8:
                    ff:64:34:48:c9:59:ff:7d:1e:a5:b4:ba:94:7e:5e:
                    9b:28:b6:87:0e:84:63:8a:81:39:ce:4a:69:1d:57:
                    c7:f2:56:b8:d4:b1:08:aa:b2:6f:73:d0:a6:e0:9e:
                    7c:d6:1b:68:c2:cf:79:72:43:7e:6a:81:19:25:a9:
                    66:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8A:4A:43:84:E3:A7:78:06:64:84:BD:8D:6B:F3:B9:24:FD:87:14
            X509v3 Authority Key Identifier:
                keyid:F4:1A:3B:42:4D:C8:20:42:A4:46:A1:FB:CD:C9:AC:98:24:18:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KV1gajkbvL4dsdE4P5Bac2Ezo97ZZGs93r1mYAiDzS6/0/F41A3B424DC82042A446A1FBCDC9AC982418C829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F41A3B424DC82042A446A1FBCDC9AC982418C829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KV1gajkbvL4dsdE4P5Bac2Ezo97ZZGs93r1mYAiDzS6/0/3138362e3235312e36342e302f32312d3234203d3e20323632383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:13:7e:9a:19:a9:b9:be:cf:e3:6a:f4:74:79:64:06:38:04:
         c7:d7:f0:0f:f1:87:bb:36:09:2f:59:ed:7c:45:bc:d5:96:6c:
         d0:0e:e6:b2:8b:e7:11:c9:f6:96:15:50:76:a0:37:f1:bc:06:
         4b:65:a3:4d:67:0b:fc:c5:d7:8e:20:b2:5c:67:66:ad:b6:d0:
         50:c7:34:43:2c:7d:96:a0:00:41:ea:20:d4:a1:b5:d0:ed:50:
         19:b1:41:01:2a:5b:43:0e:7b:37:ba:f4:60:b4:0d:32:61:69:
         bb:dd:2d:07:84:b4:12:fb:eb:3e:48:4a:1f:d0:26:50:22:24:
         6c:c1:e4:78:44:e5:38:90:b0:50:b3:aa:b9:1c:d1:22:a3:8b:
         02:5b:e5:67:f7:e8:3a:41:2e:91:b0:cf:28:12:ff:60:4d:c8:
         88:3b:2d:92:f0:d8:cc:36:0c:22:f9:c9:82:b0:2a:c4:93:c4:
         73:19:47:17:3b:e1:12:d7:3e:1d:46:21:06:88:8c:29:10:7d:
         3d:a9:22:cf:71:48:0c:48:54:b3:13:72:54:60:3e:01:31:23:
         64:16:0f:4b:e2:27:aa:b6:07:3b:c7:73:69:75:ad:ee:8a:7c:
         1d:d1:6f:ba:7c:22:69:13:d2:ef:af:56:5a:cb:0d:95:fb:79:
         1d:c0:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:10:00 2025 by rpki-client