Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e38352e33322e302f32302d3332203d3e203238363638.roa
File:                     3138372e38352e33322e302f32302d3332203d3e203238363638.roa (raw, json)
Hash identifier:          wD4TayL3nMr3L7rnU2JUbbUKIjPO0u5dpTztkuW7ZO4=
Subject key identifier:   1A:46:10:EC:5C:AC:7E:09:A5:2D:6D:86:60:34:73:0B:CC:C5:BB:A6
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       521170567B84066A1F50143FACFA5B6D9E734481
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e38352e33322e302f32302d3332203d3e203238363638.roa
Signing time:             Fri 15 Aug 2025 20:31:23 +0000
ROA not before:           Fri 15 Aug 2025 20:26:23 +0000
ROA not after:            Fri 14 Aug 2026 20:31:23 +0000
asID:                     28668
IP address blocks:        187.85.32.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:11:70:56:7b:84:06:6a:1f:50:14:3f:ac:fa:5b:6d:9e:73:44:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:26:23 2025 GMT
            Not After : Aug 14 20:31:23 2026 GMT
        Subject: CN=1A4610EC5CAC7E09A52D6D866034730BCCC5BBA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4e:ef:34:ab:be:a1:76:1c:9b:4e:90:c3:9b:
                    92:92:11:bf:df:57:85:ea:16:35:3a:69:0c:3e:80:
                    12:8c:22:b2:f1:70:76:29:c8:ec:06:5d:57:a4:d2:
                    1e:96:89:7c:02:eb:a8:6d:1d:63:c0:55:23:e4:06:
                    15:55:b9:5d:f0:3e:a6:95:c1:0b:7e:45:97:cc:14:
                    81:c6:cc:f5:db:75:45:d9:6a:ed:95:81:3e:6f:95:
                    97:50:19:c3:a8:25:08:b4:ce:9c:55:ee:05:e0:b5:
                    15:de:f0:8b:24:71:b7:87:92:fe:4b:d7:99:18:19:
                    e5:06:34:83:16:49:d9:a4:b7:d4:40:33:a7:42:fd:
                    a3:ae:b0:a4:55:c0:2c:d5:d8:88:24:0f:15:c4:ff:
                    a3:9b:5c:17:6f:07:c4:7a:64:be:76:3b:c9:b6:42:
                    bf:12:ea:85:35:29:b0:e1:aa:e8:f8:ae:6c:5e:9a:
                    ee:ad:e6:58:63:f4:87:13:0c:6b:de:54:c1:db:1d:
                    18:f9:b8:8e:ca:ed:9d:00:1a:ca:a4:80:f3:de:ee:
                    9d:f4:23:c7:6f:7a:02:b2:91:39:ee:ee:10:02:3f:
                    3e:42:90:6a:f1:31:00:9b:e1:80:12:71:4b:5b:ca:
                    67:0b:45:d1:12:7f:48:5b:8d:cb:16:35:38:f1:a5:
                    e4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:46:10:EC:5C:AC:7E:09:A5:2D:6D:86:60:34:73:0B:CC:C5:BB:A6
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e38352e33322e302f32302d3332203d3e203238363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:03:91:c2:e3:69:85:6e:14:13:c7:95:b2:04:6f:3a:d7:28:
         a7:d2:5c:2a:a7:e1:ab:62:a5:09:b0:37:04:de:6a:7b:ed:4d:
         7c:68:bc:1a:54:0e:39:66:41:eb:4c:79:1f:c8:23:84:bf:1f:
         41:b2:66:7c:e7:2b:a6:1b:f7:b1:39:37:26:37:65:3b:d3:4a:
         f3:a3:8b:da:8e:df:5b:ea:40:ed:74:03:26:c4:e9:7f:5f:f9:
         2d:ff:ff:b8:ea:87:21:33:93:84:e7:e2:fc:69:d0:8f:95:1a:
         18:36:df:22:36:23:b9:e9:7f:0c:61:b7:bf:26:d8:c8:b5:4c:
         73:ae:38:04:8a:5b:3f:b2:e1:fb:c6:68:68:b4:e3:0a:2d:6d:
         23:dc:35:88:cf:af:bf:c1:d2:26:0f:93:c1:bb:7e:a4:06:bc:
         3b:bd:69:4b:d5:e3:27:bb:4b:21:ee:a9:8d:31:7e:cc:d6:98:
         f2:76:eb:c1:d8:b3:91:32:9c:01:fc:33:d7:26:8b:dd:26:e9:
         89:26:3c:28:ce:4d:bf:e9:15:36:7a:da:85:3c:3e:c8:3d:9f:
         cb:1c:85:bc:64:50:69:47:ce:67:02:d1:47:a8:0b:b3:6b:24:
         21:f6:76:cb:09:b4:4b:6e:d1:c3:dd:30:a9:58:53:84:b3:f7:
         b3:1d:8e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:05:42 2025 by rpki-client