Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133332e302f32342d3332203d3e203533323235.roa
File:                     3138362e3235312e3133332e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          +T2rBEexdgfcouv0tjBANtd1S1LU/PVKAT2oRghJYKE=
Subject key identifier:   84:DD:7C:0A:83:BC:47:04:E1:A8:DC:72:D9:AF:CF:E5:84:B6:FD:02
Certificate issuer:       /CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
Certificate serial:       2DBFE6FBD111922A78196E6367C360E20657E519
Authority key identifier: 72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133332e302f32342d3332203d3e203533323235.roa
Signing time:             Tue 06 May 2025 12:30:40 +0000
ROA not before:           Tue 06 May 2025 12:25:40 +0000
ROA not after:            Tue 05 May 2026 12:30:40 +0000
asID:                     53225
IP address blocks:        186.251.133.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bf:e6:fb:d1:11:92:2a:78:19:6e:63:67:c3:60:e2:06:57:e5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
        Validity
            Not Before: May  6 12:25:40 2025 GMT
            Not After : May  5 12:30:40 2026 GMT
        Subject: CN=84DD7C0A83BC4704E1A8DC72D9AFCFE584B6FD02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:59:8a:a8:f3:02:e0:a8:71:41:d4:c9:e8:
                    5d:c2:18:90:9f:6f:70:de:81:d2:db:eb:b2:c1:14:
                    50:9b:cb:37:fd:72:fa:74:d7:2c:8b:2f:72:a1:f4:
                    84:54:a3:1d:51:3b:5f:b3:47:1f:d4:a7:4d:b5:04:
                    06:75:fe:92:8d:fd:b7:ca:c9:d0:cf:d1:3a:dc:c7:
                    32:1f:69:56:4f:fd:8d:fe:dd:9a:e4:71:ce:0a:07:
                    0e:20:67:87:f1:4c:0e:a3:a1:6b:e3:a1:31:28:e3:
                    4e:fd:d6:fb:78:a5:4a:bf:3c:d8:8f:c3:f5:47:ac:
                    a4:76:1f:32:b2:90:05:aa:57:c4:5a:e5:b8:66:df:
                    d6:a4:ac:b4:d8:9f:40:44:30:b3:30:03:1c:79:43:
                    78:ea:6e:71:ed:fb:d3:b6:9a:e2:53:3a:68:4d:d0:
                    c5:1b:63:d9:69:85:2d:cd:a1:89:43:9e:f5:74:57:
                    26:af:56:df:f3:fb:0c:5b:90:15:b9:a0:25:eb:12:
                    5c:da:b3:9e:69:a4:bd:a5:7d:2f:5e:ba:d3:9a:af:
                    cf:c4:1b:99:ad:b3:1e:a1:09:e5:14:b3:44:9a:79:
                    25:4b:64:23:d1:1e:0f:cf:4c:c3:f3:e7:0a:ce:65:
                    08:af:df:f7:23:67:d2:7e:c0:05:df:f7:51:ae:4e:
                    1f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DD:7C:0A:83:BC:47:04:E1:A8:DC:72:D9:AF:CF:E5:84:B6:FD:02
            X509v3 Authority Key Identifier:
                keyid:72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133332e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:d7:b2:e3:43:b3:d2:87:9e:1d:48:22:72:d2:ea:47:76:f4:
         86:be:57:82:11:c1:d8:04:6a:25:0c:01:c5:a2:8e:f3:8f:9d:
         69:32:15:d4:ba:05:0a:3d:d0:98:5d:a7:56:57:dd:14:00:07:
         f1:69:a7:29:74:06:b3:39:87:9a:e4:b2:32:e3:ad:ed:29:7c:
         4c:61:a6:05:c9:29:e7:b1:ef:fc:bc:03:a1:1f:f1:25:79:ab:
         02:60:e9:4b:3e:cc:b9:7d:b1:a1:e1:8d:aa:cb:0b:da:e0:70:
         77:f0:0f:15:27:4b:8c:da:5c:1b:d1:4f:e2:f7:b2:af:54:8e:
         1f:2b:52:fc:7b:e9:51:6f:b6:50:45:63:81:f2:6d:84:52:f9:
         af:f2:5c:84:a7:c1:38:ac:a5:fe:83:6e:52:80:66:90:2b:dd:
         b1:4c:c4:ed:82:85:97:56:87:c0:a4:f4:26:98:1e:87:f1:33:
         0f:cf:a9:ed:43:27:78:87:00:ff:40:68:0a:91:eb:7b:4a:7e:
         48:e3:66:60:b5:30:d5:ae:20:31:3b:14:4d:32:e9:59:02:74:
         c7:9b:3c:1c:9f:90:5c:41:18:d0:c2:00:78:7e:8d:05:fa:b6:
         be:22:4f:2c:d1:df:fa:44:4a:bd:48:e8:0c:77:a3:74:59:17:
         5b:c8:98:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:45:07 2025 by rpki-client