Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3138372e3130322e3234372e302f32342d3234203d3e20333936353039.roa
File:                     3138372e3130322e3234372e302f32342d3234203d3e20333936353039.roa (raw, json)
Hash identifier:          ZGjli36pmLPXhyeRn06oosIWkx7GCjby+M6OA/f+W4o=
Subject key identifier:   46:5C:0C:E4:59:FA:5A:00:FE:5F:04:DB:60:C6:79:E8:54:F6:F4:7A
Certificate issuer:       /CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1
Certificate serial:       099AAF58BE2CCB55B50A1C6DEBD86CE7C1B410B9
Authority key identifier: E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3138372e3130322e3234372e302f32342d3234203d3e20333936353039.roa
Signing time:             Wed 24 Sep 2025 01:45:33 +0000
ROA not before:           Wed 24 Sep 2025 01:40:33 +0000
ROA not after:            Wed 23 Sep 2026 01:45:33 +0000
asID:                     396509
IP address blocks:        187.102.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl
                          rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Oct 2025 02:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9a:af:58:be:2c:cb:55:b5:0a:1c:6d:eb:d8:6c:e7:c1:b4:10:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1
        Validity
            Not Before: Sep 24 01:40:33 2025 GMT
            Not After : Sep 23 01:45:33 2026 GMT
        Subject: CN=465C0CE459FA5A00FE5F04DB60C679E854F6F47A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c6:20:9c:51:76:27:9a:54:51:0c:68:3f:8a:
                    39:a4:cc:9a:c0:12:f1:37:ba:d0:db:d8:03:08:19:
                    d5:76:36:e0:4c:cb:b3:a7:64:2d:09:42:83:c1:65:
                    09:91:b6:74:26:4e:09:e9:c2:80:e6:87:ce:58:eb:
                    41:31:16:8e:4c:44:70:79:ad:b3:cd:5d:ab:08:e8:
                    e4:11:80:a3:18:64:37:f8:46:88:79:3b:9c:60:b3:
                    01:54:ba:10:1d:28:d0:f5:e0:da:61:85:5e:55:d2:
                    f4:7e:bb:2c:07:9b:50:ca:76:21:72:50:7b:c4:44:
                    46:40:96:9f:f3:63:e6:b6:5a:fc:d1:a4:9e:10:b5:
                    e2:70:21:52:f9:22:ee:9f:4e:44:d0:f0:bd:b3:05:
                    03:eb:1a:bd:7d:25:5e:1a:a9:16:8e:c7:1c:48:e5:
                    03:d9:49:e8:64:77:53:61:7a:81:b4:20:1d:78:d9:
                    a2:d4:9d:e2:d0:d0:8b:df:dd:43:71:84:5d:f3:ce:
                    b9:9b:e4:52:58:70:b5:bc:a3:e3:38:9f:97:d7:d4:
                    2e:32:45:c6:74:42:42:8d:87:fc:b1:51:61:96:1c:
                    10:82:47:40:dd:c6:be:24:bb:be:81:cf:94:f7:aa:
                    7f:76:73:55:af:20:6f:ff:c3:0d:7b:5c:cf:a9:ac:
                    b8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5C:0C:E4:59:FA:5A:00:FE:5F:04:DB:60:C6:79:E8:54:F6:F4:7A
            X509v3 Authority Key Identifier:
                keyid:E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3138372e3130322e3234372e302f32342d3234203d3e20333936353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:87:67:e3:6b:c8:53:ef:37:1b:cf:4c:2a:43:36:0d:e7:47:
         cf:33:27:30:8f:14:2a:21:61:a0:2b:c8:dd:f5:ac:46:50:94:
         54:cd:15:56:a3:e4:de:22:74:1c:d5:60:c9:6a:04:6d:b1:eb:
         4a:21:f1:59:1d:fe:29:0d:8d:e7:54:08:b2:93:9c:5e:d4:63:
         41:26:3e:9c:66:88:d3:38:5f:c3:cf:ce:22:b9:9a:a3:2b:98:
         0c:f7:86:1d:6a:04:ce:bc:0b:db:9f:a0:17:ca:5d:4d:db:bd:
         3f:dc:37:62:52:5e:a0:33:7a:21:29:57:9e:77:6a:3d:3b:44:
         9e:f8:e5:23:25:f0:6e:52:9c:84:4d:5e:af:54:ee:6f:f5:83:
         52:a7:42:83:e3:a0:56:7a:29:ee:5c:f7:1a:85:3f:fd:be:5a:
         e7:e2:fd:a2:f1:2a:ac:0f:6c:21:b6:b2:2f:2d:36:a1:8e:33:
         65:da:b7:ea:2e:55:56:9f:ea:58:8e:70:cf:03:05:e5:84:11:
         8c:92:47:42:e4:14:bd:25:e6:25:ff:80:f1:c6:7c:f9:32:6e:
         0d:25:07:4b:b8:90:32:46:58:67:15:8d:73:d4:76:54:ff:b3:
         a2:55:14:a9:12:8d:0f:cd:b5:5a:72:91:fd:ff:c4:2c:ff:1e:
         1a:b1:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 08:10:42 2025 by rpki-client