Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138362e3235312e3230302e302f32322d3234203d3e203238323031.roa
File:                     3138362e3235312e3230302e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          rrB6MA+cCIYOHhoHKSJD5BZbM9pcRcX5K3rJLAosStw=
Subject key identifier:   6E:BF:92:BD:7E:AF:71:0D:BA:39:71:1A:7A:39:F2:A8:8A:08:0A:54
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       1C67E75E08C1E789DD2D3298D1DF7BA51D43C68F
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138362e3235312e3230302e302f32322d3234203d3e203238323031.roa
Signing time:             Sat 02 Aug 2025 12:58:27 +0000
ROA not before:           Sat 02 Aug 2025 12:53:27 +0000
ROA not after:            Sat 01 Aug 2026 12:58:27 +0000
asID:                     28201
IP address blocks:        186.251.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:67:e7:5e:08:c1:e7:89:dd:2d:32:98:d1:df:7b:a5:1d:43:c6:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Aug  2 12:53:27 2025 GMT
            Not After : Aug  1 12:58:27 2026 GMT
        Subject: CN=6EBF92BD7EAF710DBA39711A7A39F2A88A080A54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:a8:be:d8:e6:20:d8:aa:de:61:ec:9c:f3:
                    f4:13:73:bc:b6:99:b4:10:41:c9:9f:45:e1:8a:9a:
                    e9:07:ce:58:54:0e:0c:d5:80:44:b7:4a:64:f2:0a:
                    8f:e0:3e:f8:eb:d4:98:03:ac:3a:7d:ee:24:df:ed:
                    68:4f:4b:5f:40:90:cf:6d:37:84:e3:79:7e:5d:d2:
                    eb:15:08:9e:52:c8:2a:07:ea:91:b3:06:44:bd:46:
                    13:78:66:09:3d:3f:eb:6f:94:d1:bd:31:e5:7a:11:
                    11:2b:01:f7:96:80:eb:9a:fb:69:f9:0f:f7:9b:8a:
                    23:34:d5:6b:77:7c:4d:d4:43:44:b7:19:b2:bf:82:
                    e5:70:fb:22:ee:09:60:d7:fe:fe:59:a4:79:5a:80:
                    d6:b5:52:04:67:52:8f:c3:80:26:03:46:0a:73:3d:
                    1f:18:b6:e7:45:a5:54:31:24:b4:67:de:c4:de:e3:
                    42:7f:e9:19:8a:2b:69:27:1f:aa:55:f6:cf:8a:94:
                    47:1d:9f:df:d4:79:f5:83:b1:79:0a:34:98:6e:58:
                    6f:53:8c:02:ce:9e:a0:4c:ed:80:49:89:3f:4e:e8:
                    1d:ba:09:c3:64:a2:ca:b4:74:69:31:c5:61:3c:bd:
                    c9:48:30:e2:50:7d:2b:98:0e:41:c2:a8:7f:28:15:
                    15:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BF:92:BD:7E:AF:71:0D:BA:39:71:1A:7A:39:F2:A8:8A:08:0A:54
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138362e3235312e3230302e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:34:b5:c2:43:85:47:a6:1c:30:8d:e8:e8:f2:0c:73:cc:6f:
         2e:71:78:4f:7c:82:a4:7d:5c:ca:58:70:8f:4a:b1:93:81:8c:
         7b:57:65:05:fd:52:2d:4c:4d:ea:87:a4:82:b8:3a:b7:a3:49:
         d4:b7:18:0e:50:8e:7f:54:17:3e:34:dd:0f:34:36:25:9d:c9:
         2b:6e:fc:f5:fd:da:2f:c6:00:28:4b:ba:72:8d:18:9f:ea:87:
         b4:4e:10:ef:81:5e:cc:78:3d:93:48:2f:cc:9d:ad:30:9f:d7:
         4b:92:6a:6c:05:0b:7e:db:16:2e:dc:46:d3:2d:47:14:b7:7e:
         78:7a:91:89:95:90:75:1d:60:a2:60:76:c5:e2:65:af:9c:58:
         b3:57:62:98:31:33:20:35:57:23:2e:11:75:0d:99:72:1f:6f:
         f0:71:ef:fe:de:ca:a7:01:69:50:43:9f:c0:e3:98:cb:f0:a4:
         95:48:53:c2:31:97:82:81:f4:cd:f5:b7:f7:2a:f6:54:58:df:
         5e:97:62:2b:52:de:89:70:5d:67:94:53:0d:5c:0d:8e:11:e9:
         8b:97:cb:d1:77:e7:2d:43:48:36:78:2a:c5:25:cc:12:d8:4d:
         e1:e0:e2:2f:a1:1b:88:2e:ed:20:4c:fa:2b:f7:e0:76:45:bc:
         20:be:a8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:43:42 2025 by rpki-client