Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/3138362e3232372e3137362e302f32312d3234203d3e20323633303135.roa
File:                     3138362e3232372e3137362e302f32312d3234203d3e20323633303135.roa (raw, json)
Hash identifier:          f2tzjW5E4KeRDoMsNR/l3SX25trneWVMIPnEEvpr4UA=
Subject key identifier:   FC:C0:D0:07:A8:9A:15:9E:A4:78:6E:95:01:54:49:A3:CB:B4:7C:88
Certificate issuer:       /CN=1011573AA94A527E7C77C596D7EF50759DCDD62A
Certificate serial:       03B1C3425D3642ECEABFB4BEC6CDEF6EAB43011E
Authority key identifier: 10:11:57:3A:A9:4A:52:7E:7C:77:C5:96:D7:EF:50:75:9D:CD:D6:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1011573AA94A527E7C77C596D7EF50759DCDD62A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/3138362e3232372e3137362e302f32312d3234203d3e20323633303135.roa
Signing time:             Tue 17 Jun 2025 19:28:25 +0000
ROA not before:           Tue 17 Jun 2025 19:23:25 +0000
ROA not after:            Tue 16 Jun 2026 19:28:25 +0000
asID:                     263015
IP address blocks:        186.227.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/1011573AA94A527E7C77C596D7EF50759DCDD62A.crl
                          rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/1011573AA94A527E7C77C596D7EF50759DCDD62A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1011573AA94A527E7C77C596D7EF50759DCDD62A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b1:c3:42:5d:36:42:ec:ea:bf:b4:be:c6:cd:ef:6e:ab:43:01:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1011573AA94A527E7C77C596D7EF50759DCDD62A
        Validity
            Not Before: Jun 17 19:23:25 2025 GMT
            Not After : Jun 16 19:28:25 2026 GMT
        Subject: CN=FCC0D007A89A159EA4786E95015449A3CBB47C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ad:e3:7a:43:80:42:b9:45:d1:ae:ad:be:a5:
                    6c:f3:6f:58:1d:4d:6e:93:60:51:4d:48:20:32:bd:
                    6b:63:c7:b6:fb:fe:c8:70:8e:38:eb:9a:a0:16:85:
                    bd:91:a4:bb:9b:98:c2:ef:62:50:56:c3:23:0f:62:
                    f3:3a:69:70:c0:1e:db:a5:66:0b:b9:29:86:56:fa:
                    3a:3a:1f:f7:90:cc:c6:d6:0e:29:50:b4:27:36:a5:
                    be:96:4a:0c:13:4a:e3:22:6d:ef:7b:69:7a:c5:86:
                    55:7b:28:2f:a7:ae:93:30:b9:96:79:46:ba:81:e7:
                    a2:9c:8b:93:57:58:35:1b:56:ba:99:d2:69:be:2e:
                    72:bb:b7:ab:26:27:e6:e4:53:f7:89:83:46:55:30:
                    c7:12:bf:e3:b9:1f:f8:44:8c:dd:80:bc:54:c9:67:
                    e1:c7:00:98:d8:f2:4b:05:ca:84:db:2c:ac:cd:ed:
                    df:c0:22:16:28:57:70:ff:c1:ed:f7:6d:cb:b0:45:
                    40:79:55:97:f7:55:71:be:96:6f:91:a1:46:b2:17:
                    36:76:5c:f5:88:0e:23:b5:9e:e3:32:53:23:9b:c3:
                    5c:5d:32:0d:d2:ca:42:11:b6:47:37:d1:2f:aa:1c:
                    ac:5f:80:73:3c:09:3e:5a:20:02:7c:98:4d:a1:bf:
                    ce:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C0:D0:07:A8:9A:15:9E:A4:78:6E:95:01:54:49:A3:CB:B4:7C:88
            X509v3 Authority Key Identifier:
                keyid:10:11:57:3A:A9:4A:52:7E:7C:77:C5:96:D7:EF:50:75:9D:CD:D6:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/1011573AA94A527E7C77C596D7EF50759DCDD62A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1011573AA94A527E7C77C596D7EF50759DCDD62A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/3138362e3232372e3137362e302f32312d3234203d3e20323633303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:91:58:dd:05:e6:61:9b:06:b2:10:c2:33:4d:73:59:b4:b6:
         42:9e:0a:ec:63:b5:6f:73:f8:21:18:9e:d4:05:08:b3:05:e7:
         1b:b9:16:1c:43:57:4a:3e:a6:6e:81:5d:b9:ef:b6:d5:52:ac:
         26:8a:05:58:3d:5a:86:7d:df:42:4a:4b:66:91:7b:29:1d:9b:
         55:73:82:db:7f:90:76:28:af:7b:3f:b6:73:48:8e:8f:9d:ce:
         74:77:1f:73:4e:c4:f7:57:fd:05:b3:1b:26:27:d5:54:df:ea:
         42:dc:74:e1:2e:2f:ac:a1:25:2f:09:20:27:d6:e1:6c:d7:f3:
         ec:97:2d:be:51:94:de:6d:c4:3d:b5:ba:51:a5:dd:92:42:67:
         bd:a5:d0:4f:0c:40:bf:37:81:a9:49:c7:f4:20:e7:13:d9:94:
         06:da:c3:be:54:f5:0f:27:9b:b3:2d:24:d9:26:95:7e:2c:7e:
         90:d3:28:3f:8f:23:bb:64:cf:b3:02:dc:69:0f:b8:82:59:45:
         12:e3:1f:25:8f:81:5a:ee:c5:93:dd:96:61:2c:59:e2:72:62:
         1d:59:de:df:74:3e:06:01:4c:4e:2c:17:a5:72:97:b7:2b:68:
         4b:8e:d8:ee:05:45:d1:a5:fd:e1:e7:e5:ce:85:8a:74:df:7e:
         e7:78:45:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:04:00 2025 by rpki-client