Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/3138362e3235302e3136322e302f32342d3234203d3e20323632383138.roa
File:                     3138362e3235302e3136322e302f32342d3234203d3e20323632383138.roa (raw, json)
Hash identifier:          dwr5LtB96a4Y9E4T0mMP6sn0uGhWZaPcbNGPF0oeZKA=
Subject key identifier:   7E:29:2F:88:7B:C0:34:96:98:93:01:01:19:02:74:23:72:0D:CF:6A
Certificate issuer:       /CN=F8A5885612DC8F082016099D6959B32B90C3706E
Certificate serial:       413AE6AEEE52A507FA5E67D54B701D159A9417DD
Authority key identifier: F8:A5:88:56:12:DC:8F:08:20:16:09:9D:69:59:B3:2B:90:C3:70:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/3138362e3235302e3136322e302f32342d3234203d3e20323632383138.roa
Signing time:             Fri 08 Aug 2025 11:47:42 +0000
ROA not before:           Fri 08 Aug 2025 11:42:42 +0000
ROA not after:            Fri 07 Aug 2026 11:47:42 +0000
asID:                     262818
IP address blocks:        186.250.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.crl
                          rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 06:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3a:e6:ae:ee:52:a5:07:fa:5e:67:d5:4b:70:1d:15:9a:94:17:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A5885612DC8F082016099D6959B32B90C3706E
        Validity
            Not Before: Aug  8 11:42:42 2025 GMT
            Not After : Aug  7 11:47:42 2026 GMT
        Subject: CN=7E292F887BC034969893010119027423720DCF6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:23:96:24:ac:4c:b4:7d:6b:a3:57:db:30:
                    0e:41:20:b1:64:96:7b:38:83:70:de:73:5f:f5:0f:
                    28:64:4e:ca:86:ad:3e:1b:0f:9d:f8:e6:dd:58:e9:
                    04:d8:a3:8a:84:ae:27:59:e1:ca:15:8c:68:63:65:
                    54:81:26:f2:bb:4a:ff:19:98:7f:51:4b:1e:5b:2a:
                    40:61:95:9e:90:00:3a:43:bf:0b:56:de:12:66:0f:
                    d5:be:a3:6e:06:8a:41:99:aa:6f:36:20:53:2a:a0:
                    21:f5:1d:04:d8:a0:df:1a:77:02:e2:68:e7:e0:77:
                    2e:46:3e:d3:98:f3:5e:70:a4:ca:cc:05:04:48:1a:
                    73:3a:cf:54:79:c6:60:1d:aa:d4:cf:73:b4:3f:75:
                    44:3f:6c:db:92:21:8c:31:5a:98:18:59:52:56:e9:
                    f5:25:61:c4:f1:bc:72:8e:c0:1a:5d:50:6d:59:2d:
                    1a:25:09:9e:0e:af:37:53:74:34:49:c1:08:2b:70:
                    e5:83:98:3c:39:59:9b:41:57:e1:f9:7d:ad:8a:6f:
                    e2:bd:27:5a:ea:4f:e1:99:65:3c:97:58:60:44:31:
                    af:df:42:a6:e7:18:da:18:97:36:1f:26:95:f6:ff:
                    9b:d2:9c:e5:94:ce:13:7d:f8:8b:c3:46:92:8d:e6:
                    0f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:29:2F:88:7B:C0:34:96:98:93:01:01:19:02:74:23:72:0D:CF:6A
            X509v3 Authority Key Identifier:
                keyid:F8:A5:88:56:12:DC:8F:08:20:16:09:9D:69:59:B3:2B:90:C3:70:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/3138362e3235302e3136322e302f32342d3234203d3e20323632383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:c3:67:0c:ca:e0:3d:2e:aa:ff:e9:51:9d:ed:39:c8:dd:67:
         25:15:19:a3:e3:6f:bf:a7:a5:3a:dc:51:63:9f:eb:07:b9:11:
         4c:9b:29:a9:c2:e4:f0:e2:90:cd:de:28:6b:eb:94:c1:2e:32:
         8a:3d:c4:5b:3a:c8:d5:8f:35:02:6b:7c:49:53:69:34:ca:d3:
         d6:07:9c:3a:38:ae:d2:e4:05:e1:ea:d8:70:8f:89:95:21:64:
         90:11:59:79:3f:9c:ba:d5:9b:d8:10:46:d1:10:31:1b:36:c4:
         61:1d:8f:ca:92:66:34:0e:6f:c0:64:a0:9a:a1:43:b0:a3:3f:
         6e:fc:be:af:d6:12:2b:fc:68:d4:c6:06:0a:c5:d4:fc:52:0a:
         86:77:f7:06:86:7c:5a:94:7b:a7:2c:66:20:8b:f4:8c:cf:9e:
         40:8b:ab:6f:ff:ec:df:18:80:83:4b:29:7b:0e:72:f4:54:fe:
         1c:4a:18:bf:45:08:9f:f1:d1:4d:89:b7:6b:ca:99:a9:ba:e0:
         15:99:3b:4c:c4:8d:38:70:57:0f:58:49:73:7f:4d:27:4d:9d:
         06:5d:41:9d:64:81:b8:4d:41:20:6a:0a:58:ab:40:19:8f:7c:
         78:43:7e:a3:30:8d:33:35:94:dc:f5:6b:93:bb:05:17:b7:fd:
         6c:b1:77:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 13:13:37 2025 by rpki-client