Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3138372e3130322e3234342e302f32322d3232203d3e20333936353039.roa
File:                     3138372e3130322e3234342e302f32322d3232203d3e20333936353039.roa (raw, json)
Hash identifier:          56213pXdidgjoUV3p3CktCNJXfMaONHH3rPep+IMQt4=
Subject key identifier:   E5:8E:D5:34:1E:0F:7E:87:75:17:ED:42:F9:59:68:FF:A9:7A:54:E0
Certificate issuer:       /CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1
Certificate serial:       7E384280EB9A9C1FD844B6FB4A6762785242C6E0
Authority key identifier: E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3138372e3130322e3234342e302f32322d3232203d3e20333936353039.roa
Signing time:             Wed 24 Sep 2025 01:43:34 +0000
ROA not before:           Wed 24 Sep 2025 01:38:34 +0000
ROA not after:            Wed 23 Sep 2026 01:43:34 +0000
asID:                     396509
IP address blocks:        187.102.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl
                          rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Oct 2025 02:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:38:42:80:eb:9a:9c:1f:d8:44:b6:fb:4a:67:62:78:52:42:c6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1
        Validity
            Not Before: Sep 24 01:38:34 2025 GMT
            Not After : Sep 23 01:43:34 2026 GMT
        Subject: CN=E58ED5341E0F7E877517ED42F95968FFA97A54E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:2c:ac:b4:36:9e:fd:c6:a2:43:2b:8d:23:
                    0a:8f:ec:5c:89:df:dd:70:7e:55:cf:11:c2:e3:c7:
                    8d:a4:c1:46:5c:7e:dc:40:ba:8f:de:0e:a8:4c:a2:
                    a1:36:42:02:31:61:33:28:da:fa:97:8a:4d:a4:65:
                    c2:66:bf:a4:79:4c:5f:fd:09:0d:07:48:55:c4:9a:
                    26:b3:64:50:9e:c3:b3:c9:65:86:21:f7:64:84:b1:
                    e4:fa:43:34:58:14:83:a1:5d:ec:50:e3:9b:d1:28:
                    fc:2f:00:e8:0c:f7:9e:27:aa:78:a1:0d:8b:49:ca:
                    b3:ac:d5:6b:7a:6c:92:48:6b:1f:32:ce:35:95:34:
                    b4:5f:45:dc:f4:81:c5:02:b4:61:a6:af:e7:4e:8e:
                    aa:c5:07:2e:e9:6d:e9:1c:b5:ac:46:01:d6:76:96:
                    4d:2e:bb:ca:96:e8:c1:b1:a4:36:bf:07:e9:fe:2e:
                    8e:3b:1c:4f:be:2b:bb:74:19:12:fe:8e:ef:0c:a5:
                    79:8b:34:e4:3a:ac:56:15:c1:61:94:ed:f3:a0:ad:
                    07:94:0c:f6:44:fc:6a:39:2a:a0:97:eb:55:9f:1c:
                    74:c7:9e:ee:15:1c:94:2f:e5:f7:49:16:c0:91:e6:
                    fa:eb:4f:7a:09:ae:fb:be:2c:f3:93:e8:5e:35:5c:
                    1f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8E:D5:34:1E:0F:7E:87:75:17:ED:42:F9:59:68:FF:A9:7A:54:E0
            X509v3 Authority Key Identifier:
                keyid:E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3138372e3130322e3234342e302f32322d3232203d3e20333936353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:8b:7f:84:39:79:77:68:5e:c8:ef:98:76:15:a7:6a:9b:17:
         93:2f:c7:af:b6:a8:b6:4d:5e:92:db:4f:a4:4b:86:1c:6f:70:
         e3:44:9c:80:ee:ab:f2:32:fa:9e:28:36:16:1a:22:76:e0:54:
         d3:d0:50:50:f7:ff:c2:0e:87:da:b2:a9:d2:e8:f9:28:6a:b3:
         6a:30:52:65:0b:de:66:23:af:40:dd:3b:13:e2:20:28:52:84:
         cc:ef:6c:36:8d:d2:39:cf:47:a8:d4:64:58:da:7b:56:ca:d5:
         d1:4b:0d:b2:32:a3:78:9b:28:3e:fd:d4:95:fd:85:75:60:05:
         d1:43:22:e7:71:40:27:ec:61:e0:fe:8c:15:59:54:e6:cf:19:
         d2:5c:16:a8:bd:0d:15:d6:40:41:e4:f0:cf:46:45:0d:5b:73:
         c4:5a:8d:5a:e6:26:58:5e:96:eb:fb:83:51:d0:da:ca:82:d7:
         09:c8:7a:f7:0f:bf:33:9e:59:f6:d5:47:70:5a:b0:b9:35:28:
         5e:b8:f1:8a:23:ee:e2:56:c1:92:25:e3:60:21:45:26:4f:3c:
         bb:85:e5:61:da:b6:fa:11:65:f2:78:08:68:fa:dc:7d:e6:99:
         da:38:3c:c5:cf:97:c3:e1:6a:a2:ef:f2:88:cb:c4:74:f1:35:
         02:61:e7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 08:09:15 2025 by rpki-client