Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3230382e39362e302f32302d3332203d3e20323632373733.roa
File:                     3138362e3230382e39362e302f32302d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          NgiNClPk/84EnG0rD3PX7PzrwuUXJHSQQEXVYA/lgqs=
Subject key identifier:   7B:FF:E7:55:81:D5:D2:5E:27:68:F8:3F:1C:2C:36:C6:CA:68:E4:07
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       84B49AFD11625A13739B3B71A14FB9D6FD12AD
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3230382e39362e302f32302d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 15:46:59 +0000
ROA not before:           Mon 11 Aug 2025 15:41:59 +0000
ROA not after:            Mon 10 Aug 2026 15:46:59 +0000
asID:                     262773
IP address blocks:        186.208.96.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            84:b4:9a:fd:11:62:5a:13:73:9b:3b:71:a1:4f:b9:d6:fd:12:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 15:41:59 2025 GMT
            Not After : Aug 10 15:46:59 2026 GMT
        Subject: CN=7BFFE75581D5D25E2768F83F1C2C36C6CA68E407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ed:df:1e:1e:ec:1a:21:c2:0d:79:cc:61:1a:
                    ce:e8:69:1c:5f:de:37:5d:8d:27:a8:05:f8:f4:9e:
                    db:8d:cb:a8:b7:a0:e3:4c:64:b3:c2:df:71:94:80:
                    49:19:c6:1f:08:e1:44:cb:4e:63:a9:d3:ac:f8:e8:
                    74:d4:d3:0f:85:4b:3f:5b:74:75:34:c0:c8:15:6f:
                    86:6a:04:95:e3:e2:f0:87:37:23:6a:9b:4b:d8:de:
                    19:d3:2c:0d:24:31:6b:43:24:b6:08:f8:e1:a0:60:
                    47:75:7a:4d:59:49:c3:d7:6c:61:50:7f:94:c4:f0:
                    9a:ec:ff:94:11:d2:be:b9:4c:89:48:ea:85:97:03:
                    83:7c:e0:bf:cb:07:ae:e4:f3:3e:47:72:1f:a8:17:
                    ac:b5:c6:67:6e:ce:bc:55:62:23:32:87:18:96:cb:
                    09:9e:f9:8d:1d:90:94:6e:af:ae:54:2b:fa:de:7e:
                    10:1b:90:1e:9d:e8:4f:5b:b7:2a:ef:ea:d6:78:a7:
                    98:dc:41:9e:79:b0:46:65:23:18:e2:0f:06:7b:f3:
                    48:fb:79:f5:81:41:9a:fd:0a:f0:97:69:12:c0:2a:
                    fc:7c:bb:63:f4:98:28:9c:9f:d6:b6:53:a1:7c:a3:
                    51:7c:12:ed:c6:76:e6:ea:43:a3:b1:f1:a3:9b:01:
                    bb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FF:E7:55:81:D5:D2:5E:27:68:F8:3F:1C:2C:36:C6:CA:68:E4:07
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3230382e39362e302f32302d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:6c:4e:2e:50:bc:0d:69:20:bf:fd:d8:96:dc:dd:9f:ad:c6:
         b1:9e:09:2a:7c:6e:bf:a0:6e:a3:f3:5b:38:41:c9:e1:97:e8:
         b2:e2:fd:94:1d:68:13:d4:8b:c8:2b:29:fe:a2:75:34:10:41:
         bd:6a:d6:e7:94:56:01:ec:46:94:37:1d:72:9f:33:46:08:1c:
         51:32:5e:73:33:0a:82:62:db:ec:bd:fc:84:ef:b9:49:91:2d:
         f2:49:7a:8d:08:f1:02:2e:09:3b:da:47:81:1c:b6:eb:2c:e4:
         85:58:47:b6:8a:ed:d0:20:d0:57:fb:44:68:24:90:c4:43:45:
         d7:2b:af:30:7e:75:6f:ed:b2:a7:c1:87:b4:5c:b9:58:69:97:
         4d:b0:2f:af:0e:20:0f:8c:8b:d0:06:da:27:e5:e6:26:98:ab:
         16:1f:ab:4c:b4:96:2c:e6:e1:36:c1:2e:76:f2:2c:dc:18:de:
         43:1c:ab:25:a9:b9:a5:e8:84:56:33:19:c1:46:46:6a:ea:88:
         91:ca:08:26:63:89:f7:0c:25:b2:cd:5b:c5:4d:28:bf:89:88:
         f1:d0:89:eb:4a:94:7c:96:ca:07:41:ac:9c:f5:0a:f2:72:c0:
         86:62:c0:86:6c:74:17:8b:0b:94:5f:45:d6:a8:18:b6:ef:85:
         eb:e2:35:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:34 2025 by rpki-client