Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39322e302f32332d3233203d3e20323632343434.roa
File:                     3138372e36332e39322e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          00SutRFCODQ+e6SZWItReRl1oU2LcfKDxflo4tN1nGI=
Subject key identifier:   E4:F9:73:DC:83:95:D8:A2:13:CB:06:D4:06:D1:BB:D1:2F:DF:2C:34
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       3C735789BA22B18CD18A01A7E46C4492E7B50498
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39322e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 09 Jul 2025 14:04:42 +0000
ROA not before:           Wed 09 Jul 2025 13:59:42 +0000
ROA not after:            Wed 08 Jul 2026 14:04:42 +0000
asID:                     262444
IP address blocks:        187.63.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 03:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:73:57:89:ba:22:b1:8c:d1:8a:01:a7:e4:6c:44:92:e7:b5:04:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jul  9 13:59:42 2025 GMT
            Not After : Jul  8 14:04:42 2026 GMT
        Subject: CN=E4F973DC8395D8A213CB06D406D1BBD12FDF2C34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:12:ea:b0:0a:f2:3a:e8:03:15:b6:fb:2b:
                    58:18:6f:5a:c6:78:76:fc:23:de:ea:fe:1c:b4:f7:
                    02:9e:7b:56:96:68:c6:22:7a:0f:40:a7:95:4d:3a:
                    74:b2:68:17:c0:ad:bd:c6:c2:3e:06:8c:55:4a:e2:
                    1e:71:45:c0:fe:55:2e:78:17:36:ad:54:39:ea:81:
                    41:68:bb:ca:60:86:f0:e2:6b:17:0a:3f:a9:3e:88:
                    3c:4d:de:3f:7a:85:3e:ba:66:1e:3c:67:e2:27:b3:
                    c1:a3:1a:10:44:8c:ea:67:c4:da:b4:41:28:e7:5a:
                    71:65:17:f6:7f:7a:90:81:df:d2:2f:b1:1e:65:4a:
                    47:b1:9a:07:67:37:11:af:5f:c0:c1:e7:29:14:58:
                    2d:3e:d6:5d:c0:39:5c:89:28:ed:81:28:46:96:63:
                    87:47:36:ca:29:86:4d:4a:5a:1c:70:a2:a0:50:08:
                    d5:e4:a3:cc:a4:59:61:56:0d:d2:48:61:df:f5:2f:
                    0d:64:f6:38:88:94:a7:24:f7:d9:c3:92:d3:65:f0:
                    65:31:51:f4:b6:46:02:49:ec:4e:e2:20:1b:d7:ae:
                    ab:ff:28:39:aa:3c:27:bc:5b:16:dd:53:dc:8e:9b:
                    78:18:07:02:e1:fd:cc:c2:13:a9:08:48:8f:fb:78:
                    9b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F9:73:DC:83:95:D8:A2:13:CB:06:D4:06:D1:BB:D1:2F:DF:2C:34
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39322e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d9:e1:2a:6c:62:55:3a:90:12:d7:8a:1f:f2:c7:a7:c6:2b:32:
         74:2f:43:06:d3:24:3e:3d:6e:44:c5:ab:be:48:38:fe:02:e0:
         b9:f5:ad:ea:41:24:60:98:fc:7c:46:ee:85:85:54:ec:8e:59:
         83:0d:cd:cf:e6:db:8a:3e:92:05:6c:14:ca:30:39:a1:9b:f2:
         88:64:58:8c:e4:16:70:98:44:42:53:96:b8:63:1d:48:ce:8b:
         3f:ee:55:ef:de:ad:e0:78:c3:6f:70:91:24:50:03:7c:e2:46:
         20:2a:f9:b4:6a:68:5b:0b:d2:2b:5a:0f:08:5d:1a:e9:e4:1b:
         b3:15:ed:3b:66:4d:4f:d0:59:e7:db:4f:b9:ec:fb:38:2e:3b:
         96:72:b6:37:0f:e6:4c:2e:3c:77:9e:29:4c:23:ee:f1:31:d3:
         13:d8:d4:5a:9f:9b:e6:dd:6f:27:2e:df:ba:97:b8:5e:b2:f6:
         da:4c:af:1d:d7:fa:52:ed:6d:b1:e1:e5:4b:e6:19:2a:ee:b1:
         bf:cf:2f:6d:e9:44:c6:b2:af:59:6c:de:a7:a6:b3:2e:02:2f:
         c1:97:01:87:39:f5:28:45:ee:ef:59:f8:93:21:67:db:a9:c8:
         de:47:63:81:92:d0:6b:4c:25:25:60:f5:08:a6:91:33:27:d0:
         c2:d7:86:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:06:00 2025 by rpki-client