Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3138372e3130322e3234342e302f32342d3234203d3e20333936353039.roa
File:                     3138372e3130322e3234342e302f32342d3234203d3e20333936353039.roa (raw, json)
Hash identifier:          mgjCciTfK7zVrQwbvtk8aORBSOEWzBXftvQGz0c8JaQ=
Subject key identifier:   03:8E:3F:91:9A:6F:CA:0C:2E:A2:6B:19:8B:58:6F:DD:A2:65:76:BE
Certificate issuer:       /CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1
Certificate serial:       69637A4BB1E6A6869AF389F0A7B391637A15DECD
Authority key identifier: E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3138372e3130322e3234342e302f32342d3234203d3e20333936353039.roa
Signing time:             Wed 24 Sep 2025 01:44:24 +0000
ROA not before:           Wed 24 Sep 2025 01:39:24 +0000
ROA not after:            Wed 23 Sep 2026 01:44:24 +0000
asID:                     396509
IP address blocks:        187.102.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl
                          rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Oct 2025 02:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:63:7a:4b:b1:e6:a6:86:9a:f3:89:f0:a7:b3:91:63:7a:15:de:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1
        Validity
            Not Before: Sep 24 01:39:24 2025 GMT
            Not After : Sep 23 01:44:24 2026 GMT
        Subject: CN=038E3F919A6FCA0C2EA26B198B586FDDA26576BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:af:11:39:d0:d9:f3:2e:28:92:b9:3c:12:
                    7b:7d:98:82:51:ff:e1:a0:89:6f:3d:97:43:83:06:
                    18:b1:9c:ca:37:b2:49:28:0d:5a:98:12:75:e2:e2:
                    f3:87:5b:3a:ba:a7:b8:29:ae:3b:46:6a:60:5d:0f:
                    b7:cd:07:80:61:de:e6:fc:4e:72:f2:a2:af:3c:9c:
                    9e:92:69:5e:58:be:7b:7c:23:90:3a:01:be:40:11:
                    d2:6c:f7:f6:76:a6:a9:39:a7:5c:3e:63:2d:a3:4a:
                    bf:3e:eb:be:56:05:14:72:24:b6:ac:f4:09:2a:5e:
                    f4:b5:06:d1:50:dc:94:69:f1:cd:d9:87:47:d9:6c:
                    2a:a9:4c:a6:01:98:1a:f6:1a:dc:95:c6:30:b3:38:
                    a4:76:76:12:15:ef:6a:ed:58:60:4c:f9:8e:ce:aa:
                    ec:0c:9f:ab:08:32:6a:be:02:c9:d7:59:80:c6:05:
                    d7:60:00:f5:24:e1:6d:f2:8f:97:cd:71:3e:31:cb:
                    88:b8:07:8b:9b:6a:15:20:bd:cb:32:ed:f7:a9:b5:
                    98:6d:bf:12:18:f4:b8:5c:0c:d7:76:f8:1f:cb:32:
                    64:ea:57:ec:fa:43:56:79:98:15:9a:bd:42:37:34:
                    9c:6d:0a:1a:59:89:71:92:08:90:75:63:4e:af:c5:
                    9f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8E:3F:91:9A:6F:CA:0C:2E:A2:6B:19:8B:58:6F:DD:A2:65:76:BE
            X509v3 Authority Key Identifier:
                keyid:E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3138372e3130322e3234342e302f32342d3234203d3e20333936353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:b5:11:d6:00:35:b8:1c:b3:e4:a7:3a:d3:5c:0a:b0:7c:70:
         9c:77:57:8b:80:45:d8:a4:fd:84:84:db:8d:c1:a1:c8:3a:de:
         2a:46:e0:92:41:86:6b:4b:14:9c:73:bb:70:79:70:85:71:9f:
         ec:9f:b4:05:01:72:ef:65:97:b6:78:01:dd:9a:22:f0:16:45:
         7e:b8:d4:6d:23:33:e6:c4:2d:89:25:22:32:b0:bb:25:e2:e6:
         0c:9e:a2:82:2e:0e:00:31:85:70:fd:7f:67:34:8d:e5:05:0a:
         ff:3f:b8:a0:71:f8:fa:00:ce:ac:e8:9e:b7:36:55:48:d7:d1:
         9b:fa:93:8c:06:7f:4c:74:81:31:0e:d3:f7:f0:17:10:fe:e1:
         14:18:fb:8b:5d:79:f3:eb:c4:4a:36:a3:30:56:11:cb:0b:80:
         67:09:52:06:3f:9c:dd:51:74:cf:56:be:8f:bc:dc:75:69:7d:
         4c:e8:c2:41:af:9b:03:9f:e6:c0:ce:4d:b6:d6:5d:28:23:c8:
         81:94:2c:51:01:4a:30:0b:3e:1d:f9:bf:3f:ff:fc:1c:f6:7d:
         68:c1:dd:54:5d:92:70:38:ab:44:f1:26:68:b9:37:bc:27:c3:
         91:6b:7a:e5:11:c9:cd:db:83:0f:a3:49:a1:e9:c7:f4:0d:c2:
         a4:0d:3e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 08:10:43 2025 by rpki-client