Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/3138362e3235302e3136332e302f32342d3234203d3e20323632383138.roa
File:                     3138362e3235302e3136332e302f32342d3234203d3e20323632383138.roa (raw, json)
Hash identifier:          UN03158w/3yr2Z+4dj4HrJxwzFVa91tnpBwYIMawdQY=
Subject key identifier:   30:32:29:DA:31:26:59:56:F1:3D:A7:49:B6:93:31:AB:AF:52:72:1B
Certificate issuer:       /CN=F8A5885612DC8F082016099D6959B32B90C3706E
Certificate serial:       766831F6A5042D42CD00A4BE2417B62860C38A0D
Authority key identifier: F8:A5:88:56:12:DC:8F:08:20:16:09:9D:69:59:B3:2B:90:C3:70:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/3138362e3235302e3136332e302f32342d3234203d3e20323632383138.roa
Signing time:             Fri 08 Aug 2025 11:47:42 +0000
ROA not before:           Fri 08 Aug 2025 11:42:42 +0000
ROA not after:            Fri 07 Aug 2026 11:47:42 +0000
asID:                     262818
IP address blocks:        186.250.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.crl
                          rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 06:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:68:31:f6:a5:04:2d:42:cd:00:a4:be:24:17:b6:28:60:c3:8a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A5885612DC8F082016099D6959B32B90C3706E
        Validity
            Not Before: Aug  8 11:42:42 2025 GMT
            Not After : Aug  7 11:47:42 2026 GMT
        Subject: CN=303229DA31265956F13DA749B69331ABAF52721B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fc:3b:f8:f5:40:e7:c4:1c:7c:cd:69:57:52:
                    0d:2d:9d:14:cb:03:dd:1e:3d:57:a0:32:11:d1:78:
                    09:21:dc:be:c7:0c:7a:3b:7e:28:b4:d1:f8:f0:53:
                    0e:f7:06:91:92:be:54:22:b5:4d:be:86:b5:74:17:
                    c6:bb:4c:f6:62:25:72:4a:86:5b:d6:ad:76:7b:f2:
                    4c:19:fc:bf:17:0a:3d:96:9e:71:b1:1e:2e:17:32:
                    4a:e3:a3:5b:a6:45:e3:3f:59:26:1a:86:d5:b6:89:
                    79:e0:fa:b7:33:43:24:45:4b:ab:35:75:0c:77:e0:
                    d4:d2:6a:3a:36:1b:31:dc:a1:94:b9:75:83:7a:23:
                    ed:6a:10:1b:bd:34:fe:c9:d5:46:72:e9:f8:a0:b0:
                    ad:e7:8e:d9:97:c6:30:b6:d5:56:fe:9c:76:1a:56:
                    2e:62:88:98:0b:10:98:15:50:d3:c5:d9:83:3f:ef:
                    c0:f2:ad:ec:93:99:62:dd:d7:d7:1a:12:fe:09:47:
                    2f:f6:ba:90:05:df:a8:dd:ea:a7:10:a2:56:76:ee:
                    dd:f0:85:b9:2c:67:a7:72:cc:53:6c:81:7e:30:8c:
                    1c:a5:a1:14:12:f3:a7:7f:67:16:f4:1c:6f:fa:ef:
                    a0:a2:25:4f:f9:d5:82:77:94:04:8b:76:9e:ce:03:
                    de:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:32:29:DA:31:26:59:56:F1:3D:A7:49:B6:93:31:AB:AF:52:72:1B
            X509v3 Authority Key Identifier:
                keyid:F8:A5:88:56:12:DC:8F:08:20:16:09:9D:69:59:B3:2B:90:C3:70:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/3138362e3235302e3136332e302f32342d3234203d3e20323632383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:7f:89:d0:67:39:1d:4e:a9:ec:64:5b:be:1a:f5:d3:66:ef:
         40:33:2e:51:dd:f1:58:1a:1e:a3:39:e4:2e:2d:88:19:3b:69:
         7f:15:f2:11:32:2f:cd:f7:ce:79:23:aa:2a:21:e4:95:7c:e0:
         fd:cc:4a:7c:91:c3:91:7e:4b:02:31:82:78:78:7f:f1:5f:54:
         77:f1:be:59:a8:07:57:81:2c:3a:0c:d7:c1:38:d4:09:4f:64:
         80:60:e6:97:7a:3a:0b:78:a0:86:ae:4b:78:32:fc:e1:b7:95:
         0d:fa:34:d2:6b:7d:f2:fc:59:e5:67:4a:3c:58:77:38:6e:d7:
         03:3f:22:ea:d1:b9:7d:a6:24:08:20:f9:45:21:fa:07:4c:92:
         eb:ae:5d:c5:97:46:d6:62:e8:1c:c1:94:14:0d:79:b9:9f:41:
         4f:5b:a9:29:6f:fc:46:0b:f8:28:03:e9:ca:54:35:22:a5:4b:
         73:16:f5:77:95:73:39:4b:26:1e:d0:fe:4b:fc:2d:59:f0:69:
         7d:97:43:1c:64:35:5d:ec:c4:d4:53:1c:ac:eb:93:25:1a:89:
         19:de:c7:fe:b8:f1:66:9c:12:0b:92:97:26:9f:6d:d5:2e:d9:
         8d:8a:32:93:6a:8b:0c:b9:30:2d:4d:87:87:ad:f7:d8:6c:84:
         eb:7f:27:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 13:12:47 2025 by rpki-client