Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37352e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e37352e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          rSTSv1IiYUQb8+f4VtJs9s0XpyayQcH17hKPRxBSQ6w=
Subject key identifier:   28:F5:19:C9:07:00:1F:42:26:72:6B:29:75:E5:36:56:FF:8E:9B:48
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       7E7EFB347423AC934AA2FE3F193237002D7FA65C
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37352e302f32342d3332203d3e203532353830.roa
Signing time:             Mon 06 Oct 2025 12:33:00 +0000
ROA not before:           Mon 06 Oct 2025 12:28:00 +0000
ROA not after:            Mon 05 Oct 2026 12:33:00 +0000
asID:                     52580
IP address blocks:        186.195.75.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7e:fb:34:74:23:ac:93:4a:a2:fe:3f:19:32:37:00:2d:7f:a6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Oct  6 12:28:00 2025 GMT
            Not After : Oct  5 12:33:00 2026 GMT
        Subject: CN=28F519C907001F4226726B2975E53656FF8E9B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:77:8d:9c:7d:f4:40:21:2f:0c:2d:e0:b3:71:
                    2a:27:37:6e:1f:b5:2d:f3:29:b1:62:ef:14:53:bb:
                    0b:79:c3:fb:e2:d0:ad:60:a8:23:4c:0b:63:f1:2b:
                    6c:f6:54:51:69:57:a5:76:c4:9e:8e:72:eb:cc:0b:
                    4b:9f:74:43:a7:9d:87:c8:0f:c8:36:d1:2c:6b:65:
                    04:e3:5e:9d:74:50:ba:a8:c3:03:8c:55:7b:62:30:
                    0d:d8:c5:bd:f4:7d:d9:51:dc:cb:80:17:be:69:f9:
                    d6:b0:56:3f:da:50:16:21:2d:9c:e7:67:47:4b:4a:
                    c6:23:c0:5f:a7:67:c4:1c:c7:66:28:30:c4:7f:60:
                    21:cd:31:63:d4:e8:92:69:1d:1d:d2:63:06:e4:f4:
                    9e:62:0b:47:0c:2d:67:62:a4:69:cc:5b:57:c2:e5:
                    f3:7d:ed:3d:09:e1:a9:34:2b:3d:66:77:09:40:e0:
                    3b:fe:38:01:2c:83:bf:b0:73:26:a1:df:91:a8:b1:
                    2d:1f:9f:66:cf:59:f0:56:f7:9c:d1:f1:4a:29:02:
                    27:de:1c:fa:cb:2f:7e:91:43:26:89:71:45:60:1b:
                    d5:3b:a1:cb:94:42:2b:dd:be:cf:50:43:da:91:42:
                    df:7e:06:2a:23:ca:4b:d5:3c:5d:19:a2:e0:33:f0:
                    b6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F5:19:C9:07:00:1F:42:26:72:6B:29:75:E5:36:56:FF:8E:9B:48
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37352e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:80:34:8b:4e:e0:94:70:5e:01:bf:89:71:5b:5a:5b:90:4f:
         ec:52:aa:0a:64:58:ef:0c:0f:37:29:1c:95:5f:41:b6:d5:20:
         19:5d:43:be:37:43:b0:a2:ad:09:43:16:47:9c:d4:84:e3:46:
         39:82:bb:70:f9:e0:11:07:d2:0d:e1:f8:00:72:a7:95:9f:ad:
         1e:f2:f4:ba:a4:b9:c3:44:b4:f9:6f:8e:a2:11:1a:62:5b:4c:
         4a:7e:ac:be:e2:60:65:b4:d8:5a:62:5d:c3:5f:ae:79:85:b5:
         35:32:6b:a1:47:40:8a:5a:f4:80:4b:34:8e:f9:f1:2c:1a:fe:
         7f:00:fd:02:bd:1c:86:97:ab:54:c2:d2:87:78:f9:f5:6c:e5:
         f4:d2:a2:44:8c:7d:ef:44:89:05:99:69:c2:8b:1c:9c:e9:a2:
         7c:bf:96:f2:5a:b4:95:26:30:00:ac:a2:f6:4f:4f:e9:34:8c:
         6c:5d:38:b7:7d:07:17:ac:ce:5f:f4:28:90:ac:fd:a0:0a:9f:
         3f:d3:5a:d5:98:6e:a7:e8:84:29:8c:fe:94:f6:fd:6f:15:07:
         63:71:c1:dd:9f:3f:c0:0a:b8:8e:00:ce:23:4b:a8:a6:55:0b:
         58:c1:90:aa:19:df:b8:88:68:54:ce:8d:1f:f1:8d:30:f7:cf:
         1e:f0:66:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:08:07 2025 by rpki-client