Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3134312e302f32342d3332203d3e203533323235.roa
File:                     3138362e3235312e3134312e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          BioPdd7TUEWLue/gpckJiioPq0zbDY3KyxiR1B0FThY=
Subject key identifier:   D6:29:7F:8D:D1:68:69:3D:44:EE:2A:EF:04:51:2E:A0:9A:8A:BF:0B
Certificate issuer:       /CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
Certificate serial:       2FAAD9750EE3D550D39AB9856092319FF81EC7F3
Authority key identifier: 43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3134312e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 02 Jul 2025 12:06:26 +0000
ROA not before:           Wed 02 Jul 2025 12:01:26 +0000
ROA not after:            Wed 01 Jul 2026 12:06:26 +0000
asID:                     53225
IP address blocks:        186.251.141.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:aa:d9:75:0e:e3:d5:50:d3:9a:b9:85:60:92:31:9f:f8:1e:c7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
        Validity
            Not Before: Jul  2 12:01:26 2025 GMT
            Not After : Jul  1 12:06:26 2026 GMT
        Subject: CN=D6297F8DD168693D44EE2AEF04512EA09A8ABF0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:66:2b:90:b7:ba:3c:72:58:43:18:24:82:7e:
                    35:9f:65:a7:65:63:1b:40:63:f4:25:18:e7:f9:27:
                    a5:3a:ee:e2:cb:0f:d1:dc:41:85:b2:9a:ef:77:26:
                    18:34:97:0c:41:e2:a8:59:b3:97:85:77:3f:2a:98:
                    e5:b9:db:7f:25:59:8a:b2:3b:fa:b3:41:da:2a:6d:
                    ed:d5:b8:ce:59:67:7f:b2:48:81:92:02:70:8c:d1:
                    7b:71:5a:6b:9c:8f:ef:81:fb:4f:e7:57:08:77:dd:
                    b0:d0:fd:5f:2f:3f:07:16:ac:40:3d:eb:b7:2d:44:
                    98:7d:cf:ac:01:fc:66:a5:66:50:cd:cb:3b:18:1d:
                    3e:63:79:55:bb:ae:e6:45:c9:5a:ee:b5:af:db:45:
                    ff:13:5f:67:ca:81:d9:45:00:9f:ca:f6:cd:b5:4f:
                    c2:5f:0b:22:a2:10:ab:c9:89:fa:30:2d:0e:30:28:
                    a0:c1:57:13:6d:13:ed:5f:ce:ee:f4:08:52:ab:b1:
                    bf:fe:ca:7e:8e:db:b5:ff:39:fe:0c:fc:4a:2e:10:
                    c4:cf:1e:d1:3b:2f:77:d9:25:e4:bf:a7:ee:5f:40:
                    d3:2f:81:39:96:32:48:bb:37:9c:b7:0b:ae:d8:02:
                    dc:4f:37:6e:0c:43:1b:a1:f3:47:a6:a5:bc:43:19:
                    88:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:29:7F:8D:D1:68:69:3D:44:EE:2A:EF:04:51:2E:A0:9A:8A:BF:0B
            X509v3 Authority Key Identifier:
                keyid:43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3134312e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:7f:f2:d4:cf:c2:91:a5:ae:d1:5b:58:82:b6:9d:54:0c:f1:
         d3:c0:0d:33:eb:a5:27:2e:79:fb:3c:16:4a:6b:9a:09:70:7a:
         70:23:d1:9d:f9:f7:9f:0b:f2:71:e5:10:b5:82:65:ae:92:d1:
         b2:5c:27:85:52:0a:4d:1f:fa:de:eb:c6:14:df:06:b2:65:47:
         62:0b:e1:6e:1e:5c:f2:f8:4f:bf:f1:55:62:f2:18:31:fd:bd:
         14:e0:db:ae:97:d7:82:72:bb:cd:14:f1:02:ac:5e:ad:bc:bd:
         68:50:f7:0a:a7:1e:31:d8:0b:72:a2:7e:da:58:08:69:91:db:
         b5:66:8f:a6:e9:ea:fa:03:a7:ab:3d:60:bd:4e:52:de:24:bc:
         3d:c3:7b:5a:77:22:b0:90:57:8f:0f:4d:31:98:e3:fc:b8:4d:
         9e:a5:d5:99:33:8b:bb:93:01:3a:b0:ce:10:d1:58:84:16:ab:
         d9:f1:1c:64:bc:9d:30:e9:ec:5e:5d:3a:3b:74:59:bc:5e:47:
         49:1f:ca:9c:db:25:0a:c0:40:bb:fe:dd:ea:82:74:15:13:c2:
         93:08:c1:e5:df:4a:fa:a0:51:40:5d:27:85:99:bc:39:15:8b:
         54:6a:01:cb:f9:20:ae:45:6a:cd:32:cc:43:62:8a:09:d8:2a:
         4b:f1:7b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:21:03 2025 by rpki-client