Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39322e302f32322d3232203d3e20323632343434.roa
File:                     3138372e36332e39322e302f32322d3232203d3e20323632343434.roa (raw, json)
Hash identifier:          if6KQZ8QOsXbQhUYe/IScmyjaR5ET3whVA9bUQIe5EM=
Subject key identifier:   38:C2:32:1A:4F:E1:B4:23:C4:8A:D9:E9:A5:80:FA:D0:8F:7F:5B:7A
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       76C2B96FDDA6FCC5978E2B9E4B6070529CFD1FF2
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39322e302f32322d3232203d3e20323632343434.roa
Signing time:             Wed 09 Jul 2025 14:04:41 +0000
ROA not before:           Wed 09 Jul 2025 13:59:41 +0000
ROA not after:            Wed 08 Jul 2026 14:04:41 +0000
asID:                     262444
IP address blocks:        187.63.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 03:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c2:b9:6f:dd:a6:fc:c5:97:8e:2b:9e:4b:60:70:52:9c:fd:1f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jul  9 13:59:41 2025 GMT
            Not After : Jul  8 14:04:41 2026 GMT
        Subject: CN=38C2321A4FE1B423C48AD9E9A580FAD08F7F5B7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:e7:c9:8a:24:6c:92:80:4d:5d:9c:8a:fc:
                    0d:82:cb:07:21:26:ca:97:75:9b:dd:09:f3:e8:82:
                    95:f6:ee:0f:c6:a6:9b:bf:8f:33:53:6c:05:54:4b:
                    28:75:22:dc:43:68:1a:94:4c:56:2c:dd:a1:8f:88:
                    25:b1:8b:52:8c:b6:63:4a:3c:63:d6:fb:c3:dc:c2:
                    2d:26:4b:04:4d:44:a1:ae:17:70:e6:f7:e7:da:7e:
                    4e:fc:1d:56:e5:41:37:cc:1d:e8:8e:6c:23:34:c5:
                    f5:c0:4f:7d:8f:1f:d9:51:7f:51:c0:45:57:6e:4b:
                    e1:52:9c:73:5d:a2:cc:45:c3:b6:10:35:41:96:65:
                    9e:06:55:07:47:84:e6:3e:d8:80:ec:26:b9:ee:69:
                    0c:2a:16:6b:e0:59:e5:9e:37:b9:82:46:23:11:40:
                    c1:47:3e:94:c1:e6:e1:51:81:8a:14:bb:3d:06:5a:
                    9c:2f:df:19:94:f3:37:6d:61:c5:e0:3b:12:7d:e1:
                    a0:94:29:ab:e4:a1:b6:73:27:2d:35:73:ac:31:43:
                    bf:1f:38:11:2d:62:97:23:93:5d:b2:4e:ea:b1:d1:
                    b3:38:4a:86:7e:05:a2:c6:2b:a8:36:13:2c:b3:5d:
                    07:a8:5a:23:75:fa:17:3c:bc:c2:ca:cf:bd:53:65:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C2:32:1A:4F:E1:B4:23:C4:8A:D9:E9:A5:80:FA:D0:8F:7F:5B:7A
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39322e302f32322d3232203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:e3:c1:e3:0a:14:7b:18:57:45:7a:6d:98:20:61:45:ea:53:
         72:e6:08:ed:40:7b:c7:84:ef:0d:c3:c2:a1:75:cb:9f:d5:60:
         34:6f:56:0d:c6:83:94:9d:cf:a6:79:04:aa:18:37:74:12:03:
         96:ac:cb:9e:4b:22:50:7b:30:2d:e4:86:6c:c0:37:da:b0:b3:
         2d:37:60:94:30:30:c0:6f:1d:92:ac:c7:67:89:a3:7b:3b:9c:
         96:07:77:ac:a2:37:ac:52:0b:5d:2f:fa:47:51:dd:1b:c1:12:
         a7:b2:30:08:db:73:de:19:c3:a4:5b:f5:bd:e9:5f:d1:3c:e7:
         8a:07:b9:e3:59:ff:5b:fb:4a:de:48:57:8f:5e:3d:39:c3:84:
         ce:ae:6c:78:5a:81:84:23:1a:c6:95:16:ab:0e:9d:ae:6b:06:
         79:e3:21:d9:6d:d1:97:5f:25:4f:03:e0:c4:55:9e:1f:33:75:
         67:c3:38:c9:4c:1e:e7:f1:13:d3:fc:1b:25:85:cc:f4:a8:c3:
         87:1e:86:03:e3:95:45:ed:0d:d0:36:e2:95:38:49:c0:c2:b0:
         4d:f9:63:a5:c4:14:7c:da:cd:33:19:5b:ac:da:6b:92:fb:96:
         a8:68:26:f6:a0:38:32:a9:28:31:e2:5e:54:16:8a:38:62:f9:
         75:63:b2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:02:08 2025 by rpki-client