Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133392e302f32342d3332203d3e203533323235.roa
File:                     3138362e3235312e3133392e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          m1Ovb/wt+/gadqWskIB7bPsbx1PIyk/HA47G0vAODUo=
Subject key identifier:   08:C0:CF:60:9A:32:FD:8E:7F:7A:86:9A:4E:01:9B:CA:CA:69:F8:99
Certificate issuer:       /CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
Certificate serial:       2D37CE7F7F1AD56B30D004A3E10A2258162012AF
Authority key identifier: 72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133392e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 07 May 2025 18:47:20 +0000
ROA not before:           Wed 07 May 2025 18:42:20 +0000
ROA not after:            Wed 06 May 2026 18:47:20 +0000
asID:                     53225
IP address blocks:        186.251.139.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 12:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:37:ce:7f:7f:1a:d5:6b:30:d0:04:a3:e1:0a:22:58:16:20:12:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
        Validity
            Not Before: May  7 18:42:20 2025 GMT
            Not After : May  6 18:47:20 2026 GMT
        Subject: CN=08C0CF609A32FD8E7F7A869A4E019BCACA69F899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:bb:d2:f5:fc:b5:3c:28:5a:d4:5e:b5:3e:
                    77:d0:2e:f8:9c:f0:04:06:19:6d:f1:11:3a:1a:9f:
                    c0:76:b4:15:cf:0d:e2:3b:04:19:13:c7:04:71:46:
                    db:b6:91:4e:e8:f5:07:64:1d:ec:9d:74:fe:50:c9:
                    56:4a:a2:f5:c3:47:bc:3a:f9:48:85:97:f3:37:62:
                    db:c4:32:e7:f4:fa:f7:bd:8d:87:db:71:26:e6:8a:
                    ec:fb:35:29:ff:76:0e:f6:fb:ed:05:97:e5:55:49:
                    5d:41:79:50:f9:ff:6d:aa:36:8d:67:21:21:73:cd:
                    81:b0:aa:2d:84:af:ec:2b:40:6d:89:6e:8f:e0:a2:
                    16:e6:ea:d6:9e:41:6d:b5:71:b0:a4:e3:7f:2c:75:
                    55:be:03:1e:52:77:04:2a:fa:3e:f3:77:05:57:5c:
                    c9:bc:08:78:6c:09:00:18:0b:58:2c:69:66:62:ea:
                    dc:65:28:c1:6e:1b:c2:cb:e7:aa:1f:3c:80:1d:12:
                    ac:8a:df:10:a8:40:d6:b6:07:7d:49:34:0d:d3:1c:
                    a0:c4:83:a3:b9:04:88:91:87:98:fc:c6:81:68:68:
                    59:0c:fd:89:f4:3a:0e:dc:9f:bd:82:2c:45:07:24:
                    c0:b8:69:55:1f:0f:60:93:81:69:9a:33:5e:dc:93:
                    6a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C0:CF:60:9A:32:FD:8E:7F:7A:86:9A:4E:01:9B:CA:CA:69:F8:99
            X509v3 Authority Key Identifier:
                keyid:72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133392e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:77:ee:1e:d6:ff:b1:90:99:2b:c2:32:f2:8b:f0:83:26:af:
         3c:ce:f8:73:8a:ee:f0:1f:54:fc:b1:b4:d8:3a:ed:28:5a:c6:
         d9:56:20:bc:31:5d:c7:f0:ec:36:1a:65:a1:64:45:09:88:da:
         d5:99:d4:b6:d9:b3:da:6e:6a:eb:40:a7:88:f1:da:0d:7e:2a:
         a5:14:89:67:13:d6:93:d7:3c:cc:9b:93:b6:9b:cb:df:28:9f:
         44:6f:bf:cf:d5:66:5f:32:9c:19:49:ca:57:a8:e1:7f:63:dc:
         42:39:7d:c9:37:f1:da:de:34:31:38:3a:b2:59:a8:8b:33:51:
         2a:b4:b5:10:5a:e1:f4:e8:84:38:50:e8:d0:ec:e2:3a:56:2b:
         b2:a5:17:11:b5:fe:ec:ec:fa:f8:c0:89:cb:67:14:6e:05:1a:
         11:5b:0f:31:1b:74:82:a7:01:1a:d0:42:78:0d:b9:7b:a4:d0:
         56:1e:7e:f5:99:df:29:69:48:f0:13:33:9d:88:89:07:91:bc:
         dd:18:3f:6c:62:c2:0b:4a:6f:15:f3:85:98:5f:56:a2:9e:b3:
         36:2e:7c:f5:1d:a0:76:2d:56:f7:04:05:bd:8d:4d:26:05:b5:
         2e:e6:06:46:7b:d9:6c:b5:e6:22:fd:77:10:5c:40:5f:49:7a:
         f4:cd:a1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:56:07 2025 by rpki-client