Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3134332e302f32342d3332203d3e203533323235.roa
File:                     3138362e3235312e3134332e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          11+wR27BgG3hiiv/7N60EJuhTYZdLtWTu05c2EJTYRs=
Subject key identifier:   52:23:55:A9:A6:8A:F7:49:39:20:80:AC:2D:68:D9:BD:C9:66:E7:E1
Certificate issuer:       /CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
Certificate serial:       04CA26CF013F027953C94C832F149476C2EFB76F
Authority key identifier: 43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3134332e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 02 Jul 2025 12:06:28 +0000
ROA not before:           Wed 02 Jul 2025 12:01:28 +0000
ROA not after:            Wed 01 Jul 2026 12:06:28 +0000
asID:                     53225
IP address blocks:        186.251.143.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ca:26:cf:01:3f:02:79:53:c9:4c:83:2f:14:94:76:c2:ef:b7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
        Validity
            Not Before: Jul  2 12:01:28 2025 GMT
            Not After : Jul  1 12:06:28 2026 GMT
        Subject: CN=522355A9A68AF749392080AC2D68D9BDC966E7E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5b:19:f6:fe:6b:f9:11:9d:75:df:69:b4:9a:
                    d6:1c:a2:98:54:60:88:6d:e0:fe:22:fe:2c:0b:e7:
                    12:7a:50:46:66:1a:75:62:71:18:2f:ac:78:70:68:
                    43:d7:d9:e6:8b:d4:7b:0d:39:da:b6:53:a3:c3:1b:
                    52:85:6a:7c:6c:c8:60:b6:43:fe:76:56:c1:2c:19:
                    12:6b:22:f0:4d:a9:b1:39:57:15:7a:09:6c:f9:6d:
                    a7:69:4a:37:d9:3a:67:ca:f1:33:e4:d6:12:c2:13:
                    43:07:62:82:dc:0f:1a:57:87:f8:08:89:20:cf:13:
                    77:b0:86:fc:a9:f6:51:ff:a5:d4:ab:a2:98:32:ed:
                    3c:7c:6c:64:db:f3:05:e9:b1:6f:a4:d4:50:94:fc:
                    96:72:e0:cc:ff:aa:71:af:03:ec:d7:ef:ce:a4:c8:
                    c9:6b:48:e1:ae:89:76:d1:4d:f9:90:86:45:58:d2:
                    d8:69:7d:5b:57:42:c4:74:ff:c1:62:5e:79:ca:58:
                    38:b4:2e:af:a5:34:a2:0c:4f:87:97:ad:ba:3f:8d:
                    a7:5f:0b:92:90:8c:27:34:1b:7d:99:c3:c9:3a:38:
                    fd:59:13:db:50:fa:55:64:b4:04:03:61:a1:d2:76:
                    5b:37:ea:e8:80:4b:31:68:84:2a:b4:65:0a:85:bf:
                    6f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:23:55:A9:A6:8A:F7:49:39:20:80:AC:2D:68:D9:BD:C9:66:E7:E1
            X509v3 Authority Key Identifier:
                keyid:43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3134332e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:a3:1e:fd:6e:84:4a:2d:61:af:2f:a6:09:aa:c5:98:23:00:
         ea:12:98:fa:76:13:f4:d4:be:8e:04:e3:a3:92:47:17:92:15:
         a9:db:e0:79:5b:ab:33:8a:5d:51:90:54:b3:58:5f:3e:bc:48:
         46:b1:45:7f:22:a7:78:34:03:25:f4:4f:73:c2:f6:e9:01:e1:
         8d:9b:1b:ab:6c:f9:ea:da:16:bc:c8:28:eb:b1:84:6e:7c:83:
         bb:ce:38:69:b8:94:8f:4e:f8:63:41:d5:75:26:fb:17:ab:d4:
         2f:95:c3:3d:46:da:ab:ea:f2:40:7c:a2:eb:a2:67:d3:18:3c:
         e1:22:44:12:b6:0f:89:a2:0a:27:ba:63:c6:38:cc:68:79:73:
         1f:90:19:87:8b:99:74:ba:92:9e:96:18:22:8a:a7:95:e3:13:
         00:8a:99:cd:0c:c7:d7:6c:20:9b:4e:65:2e:2b:df:b9:a9:87:
         25:cb:3a:6d:ff:2a:63:1e:14:b4:6f:d5:14:41:4e:17:39:65:
         4f:47:f0:d6:a6:42:ee:e3:77:c2:9c:0e:e3:f7:24:37:e3:6b:
         7e:9b:83:39:a8:f5:98:6b:c2:b4:02:6a:6d:98:b9:3d:da:5f:
         3d:fc:08:2f:c5:6f:a8:8d:5f:a6:6e:72:48:ac:34:68:a2:a7:
         bc:a8:71:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:25:10 2025 by rpki-client