Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3132382e302f32342d3332203d3e203533323235.roa
File:                     3138362e3235312e3132382e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          H4dQ/DpHQVYoPzn5RFK8E4/G5WgcGJEgg4cg1+Q9EyA=
Subject key identifier:   B6:7D:9C:2A:03:BA:DB:8F:EC:15:78:36:63:3C:4E:7B:51:BF:19:37
Certificate issuer:       /CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
Certificate serial:       2E545E90ADA57C7557E22B3231F5CA22027BAC52
Authority key identifier: 43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3132382e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 02 Jul 2025 12:06:23 +0000
ROA not before:           Wed 02 Jul 2025 12:01:23 +0000
ROA not after:            Wed 01 Jul 2026 12:06:23 +0000
asID:                     53225
IP address blocks:        186.251.128.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:54:5e:90:ad:a5:7c:75:57:e2:2b:32:31:f5:ca:22:02:7b:ac:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
        Validity
            Not Before: Jul  2 12:01:23 2025 GMT
            Not After : Jul  1 12:06:23 2026 GMT
        Subject: CN=B67D9C2A03BADB8FEC157836633C4E7B51BF1937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:c6:38:96:47:d3:b2:10:03:86:f8:68:e7:
                    15:5b:63:a6:d9:e1:05:d0:94:9b:42:78:9f:f4:fc:
                    e8:46:46:d4:24:32:d1:19:11:1a:dd:57:48:6c:bf:
                    7d:e3:c2:8c:3b:e9:b0:8a:40:e8:2f:67:df:a6:b6:
                    e7:d9:41:dd:59:3e:0f:5d:8a:ab:dc:10:f9:8e:8c:
                    e4:3a:41:8e:e6:e1:8a:51:f4:21:a5:68:00:26:40:
                    b4:e3:48:50:aa:73:7e:94:a7:61:53:cb:a5:10:46:
                    da:a9:8c:a2:64:2a:f0:37:94:9c:bf:96:59:69:44:
                    81:94:a0:44:e2:95:36:76:a8:70:03:db:05:a4:e6:
                    d2:a6:27:64:22:35:f6:3a:5a:6a:09:ae:18:7b:86:
                    a4:54:04:36:5b:c2:ff:fb:90:21:03:d1:70:b0:80:
                    cf:82:f7:b4:13:85:e9:85:b4:f7:b3:79:ac:eb:5f:
                    d3:cd:cd:de:83:58:3d:1b:cf:10:eb:a4:93:56:10:
                    40:64:53:83:cd:1c:51:4c:31:dd:4a:7f:05:6c:43:
                    90:cc:03:a4:e5:17:60:f0:ea:73:ea:84:f1:be:ed:
                    73:2e:50:aa:94:d4:d5:81:18:10:cb:2d:11:c9:a3:
                    76:62:ed:05:6b:fa:18:47:72:56:13:1a:62:89:c2:
                    b3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7D:9C:2A:03:BA:DB:8F:EC:15:78:36:63:3C:4E:7B:51:BF:19:37
            X509v3 Authority Key Identifier:
                keyid:43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3132382e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:49:7d:b1:36:83:3d:c1:80:52:bc:82:c0:b2:1e:00:46:6f:
         e3:7a:c9:50:d4:09:86:6b:af:46:a3:26:0a:b0:d2:8f:9b:49:
         4f:b8:8e:40:32:98:8d:df:24:ec:94:0a:08:c9:40:62:72:e2:
         9b:b5:80:83:39:21:ed:6c:0f:09:33:2c:d1:ec:a4:da:5b:c3:
         a1:0d:e8:58:10:c1:c3:31:bc:e3:6f:77:e2:a5:e9:55:19:49:
         ed:53:3a:44:06:e1:82:b4:6f:50:32:04:07:18:de:e9:a5:99:
         0c:8d:5a:bd:95:18:9a:ff:5c:3c:9c:80:91:4f:60:54:df:dd:
         48:17:72:78:f2:e7:36:d6:af:13:0b:56:b3:d7:01:59:78:26:
         8f:30:48:2d:56:04:60:a0:7d:2f:61:42:e1:1b:07:55:e0:f3:
         bf:2d:69:28:39:cd:56:b9:be:4f:dd:47:9e:cc:a4:63:3b:2b:
         4b:42:84:74:9a:2b:fe:8d:7c:00:f0:5e:85:46:14:52:75:13:
         00:0c:22:cc:1a:2a:07:f5:99:be:12:80:50:04:b3:fa:b7:38:
         2c:f6:67:06:50:f4:3c:ca:37:eb:b8:fb:d2:b5:63:ef:0d:e3:
         b6:cb:1d:66:7a:d3:bb:76:f7:3a:a5:b7:55:6b:c9:2b:41:00:
         04:d1:cc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:11:06 2025 by rpki-client