Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3134302e302f32342d3332203d3e203533323235.roa
File:                     3138362e3235312e3134302e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          H2CSSQKWx7Q0x5ZRqMf3TSdJogU3mLhnezucAcY8Qb4=
Subject key identifier:   DC:5F:68:4B:5C:76:F6:DE:3B:1C:98:C2:F4:8B:1D:19:65:35:D8:47
Certificate issuer:       /CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
Certificate serial:       4C31F18AAC1A6C4B27A4110A5B69CBD47B187865
Authority key identifier: 43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3134302e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 02 Jul 2025 12:06:18 +0000
ROA not before:           Wed 02 Jul 2025 12:01:18 +0000
ROA not after:            Wed 01 Jul 2026 12:06:18 +0000
asID:                     53225
IP address blocks:        186.251.140.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:31:f1:8a:ac:1a:6c:4b:27:a4:11:0a:5b:69:cb:d4:7b:18:78:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
        Validity
            Not Before: Jul  2 12:01:18 2025 GMT
            Not After : Jul  1 12:06:18 2026 GMT
        Subject: CN=DC5F684B5C76F6DE3B1C98C2F48B1D196535D847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5f:da:9c:f4:35:10:d0:36:5a:27:8d:82:4b:
                    e1:35:e0:92:d3:4b:fc:40:a1:72:1f:45:f6:39:a9:
                    57:3b:c2:2d:4f:11:83:65:55:97:40:b4:58:db:e1:
                    89:b1:87:ee:e5:1a:8b:2f:32:60:63:07:93:03:20:
                    05:0b:86:58:ed:ca:5d:ec:67:c3:4c:ce:2c:e7:b6:
                    26:97:80:4d:fc:b5:ce:67:d2:0e:f0:ab:ad:18:5a:
                    a4:e3:42:4c:51:18:1f:49:e9:21:0e:89:dd:78:83:
                    42:1e:4c:f3:42:b7:e3:14:00:03:ee:0b:09:cd:a8:
                    e1:da:d6:82:7a:b4:33:cb:43:43:45:69:b9:12:cd:
                    ae:4b:50:ca:45:86:67:2e:c4:d8:05:e0:4b:10:a0:
                    6c:32:1d:56:a0:61:a6:81:ca:cb:cf:cf:59:d0:50:
                    f0:d9:b4:2f:1c:5c:90:3a:dc:76:5d:3c:0a:e9:b7:
                    eb:5d:12:ac:54:55:92:46:f5:68:a7:1e:b8:29:a8:
                    3a:03:0c:cf:a7:e9:c1:fe:fc:66:b2:00:ff:bd:53:
                    8f:59:61:89:06:a3:bc:76:f5:7c:20:43:83:5a:31:
                    0f:c8:90:ec:e6:86:e7:fc:43:fb:35:8e:b4:31:a4:
                    cf:71:33:0f:62:66:d2:7c:16:61:c6:c2:94:ca:e5:
                    da:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5F:68:4B:5C:76:F6:DE:3B:1C:98:C2:F4:8B:1D:19:65:35:D8:47
            X509v3 Authority Key Identifier:
                keyid:43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3134302e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:44:9d:7e:6f:5c:86:4a:89:87:8b:48:57:ac:a2:be:a5:0a:
         fb:07:2c:2a:8c:85:70:ce:90:2e:79:42:6b:63:3a:fd:30:ee:
         d3:53:ff:cf:09:ac:16:32:a3:ff:42:3e:e8:66:89:31:50:8d:
         7f:0c:c9:bf:da:17:87:d7:a1:06:fa:5a:14:08:5a:33:4c:55:
         23:dc:56:39:18:e6:84:a3:15:63:eb:75:91:ea:34:23:30:cc:
         34:26:60:ce:91:5c:5e:9e:8b:1d:1a:d2:3d:30:7f:6a:95:be:
         a3:08:f5:bd:61:20:36:d0:86:3c:c5:62:7f:c9:67:40:b8:fb:
         7e:8f:03:94:c0:1e:87:46:c4:87:25:26:05:a6:69:75:57:3f:
         1f:f8:d6:22:7f:c6:b6:6e:aa:6d:0e:f5:e7:96:0b:c5:e3:20:
         fe:e5:6a:e7:05:65:e9:f1:09:98:04:05:77:4d:77:d3:c8:05:
         d5:34:79:03:79:68:a9:ae:97:97:37:f7:5c:d5:0c:da:83:1b:
         b6:0f:d9:e7:8a:84:eb:af:1b:f3:af:68:62:90:1e:be:fb:e2:
         13:06:ce:19:4a:dd:76:d5:ba:43:95:9d:3e:ab:b3:1e:0f:f5:
         0c:e0:6e:61:32:e5:79:68:3c:97:fe:28:f7:3b:3e:46:a0:e5:
         a6:52:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:25:49 2025 by rpki-client