Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa
File:                     3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa (raw, json)
Hash identifier:          nRELJZE3syfky4kur5p+zS26o6KWtHyd5S7D3EsgqJc=
Subject key identifier:   15:CD:D1:60:E0:C9:AA:67:BD:DD:C7:0D:7E:FC:96:C3:18:7F:A1:0B
Certificate issuer:       /CN=F369B880738FA6C66F931D123DE6542D4B42FD29
Certificate serial:       4EA8464BC87991ABD00969B954FC640AB845428A
Authority key identifier: F3:69:B8:80:73:8F:A6:C6:6F:93:1D:12:3D:E6:54:2D:4B:42:FD:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F369B880738FA6C66F931D123DE6542D4B42FD29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa
Signing time:             Mon 21 Jul 2025 15:57:40 +0000
ROA not before:           Mon 21 Jul 2025 15:52:40 +0000
ROA not after:            Mon 20 Jul 2026 15:57:40 +0000
asID:                     270579
IP address blocks:        189.126.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F369B880738FA6C66F931D123DE6542D4B42FD29.crl
                          rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F369B880738FA6C66F931D123DE6542D4B42FD29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F369B880738FA6C66F931D123DE6542D4B42FD29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 22:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a8:46:4b:c8:79:91:ab:d0:09:69:b9:54:fc:64:0a:b8:45:42:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B880738FA6C66F931D123DE6542D4B42FD29
        Validity
            Not Before: Jul 21 15:52:40 2025 GMT
            Not After : Jul 20 15:57:40 2026 GMT
        Subject: CN=15CDD160E0C9AA67BDDDC70D7EFC96C3187FA10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:13:2a:06:7a:05:71:10:f6:b6:ff:5f:e9:4d:
                    b7:dc:5d:82:4f:ed:b2:36:73:a4:4d:09:01:39:37:
                    00:3c:65:f4:8b:9c:99:a9:d8:68:5b:27:12:a5:c5:
                    a1:36:41:47:6d:10:36:76:fd:e4:64:54:01:87:7a:
                    4e:de:01:4f:37:ea:00:4c:cb:f2:a8:5d:d4:b9:61:
                    26:7c:10:14:95:7a:d3:a3:25:2b:26:3a:37:74:9b:
                    f1:19:8e:ab:2b:71:7a:d0:82:9b:6b:3f:2d:40:53:
                    d6:06:f3:8b:d0:a5:dc:0c:cc:d9:c1:ef:1c:e7:c1:
                    52:70:e4:ce:7c:65:03:2e:35:ae:60:7f:97:77:fd:
                    80:04:95:44:f8:42:35:ac:cc:db:55:b4:af:f7:d0:
                    cd:de:01:ce:6c:71:fa:34:ab:f5:ca:29:9e:47:79:
                    63:b8:40:e7:49:02:c6:5f:dc:c7:21:d8:fc:5b:1e:
                    d5:a5:a4:60:37:31:2e:01:e5:ed:ef:d8:86:50:da:
                    75:43:36:e0:af:d5:31:ec:15:b6:ae:f0:37:23:2e:
                    cf:98:43:85:09:a6:93:a1:16:30:fc:60:f1:09:f7:
                    45:26:54:fb:bc:f2:1a:25:07:04:2d:fc:00:5d:d5:
                    77:42:bc:5f:4c:bd:ec:f2:bd:6d:fb:fe:6b:b0:3a:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CD:D1:60:E0:C9:AA:67:BD:DD:C7:0D:7E:FC:96:C3:18:7F:A1:0B
            X509v3 Authority Key Identifier:
                keyid:F3:69:B8:80:73:8F:A6:C6:6F:93:1D:12:3D:E6:54:2D:4B:42:FD:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F369B880738FA6C66F931D123DE6542D4B42FD29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F369B880738FA6C66F931D123DE6542D4B42FD29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:a6:0d:82:82:90:7c:50:30:1d:40:3a:9c:e9:b6:c6:c7:3d:
         ba:92:97:4f:0c:ff:6c:23:b8:25:3f:6c:f9:c1:04:9e:05:40:
         65:db:56:5a:a7:8f:c1:01:8b:d4:ee:3c:17:95:bc:5a:7d:12:
         fc:f6:d1:76:50:e3:73:09:29:75:39:aa:b1:ae:50:6c:74:f4:
         f2:b8:67:0c:58:17:7b:a2:ae:31:25:ad:ea:24:bb:fd:b0:2e:
         58:aa:4d:34:4d:58:61:10:0b:7d:81:e6:53:87:cf:6b:d6:86:
         2b:37:71:73:47:92:73:e2:b0:e5:8f:34:40:51:49:2d:33:63:
         f5:6b:28:2f:e7:59:92:e5:36:b0:d1:8a:ef:e9:38:9f:ab:2c:
         39:26:0f:e8:55:8d:51:f8:bb:59:87:0d:12:bd:fd:bd:92:43:
         37:17:ea:80:ba:a2:21:9a:1e:b7:63:d6:32:4c:29:7e:1d:c0:
         07:cb:5c:5e:6a:a2:43:1c:d5:28:cc:22:70:22:bc:8c:52:ac:
         96:d9:8e:59:01:7c:6d:0e:3f:e5:78:49:87:3a:eb:5b:1d:56:
         fc:dc:b6:27:fd:73:3c:69:d2:48:ef:2b:6e:ef:e7:99:e0:86:
         11:01:b0:8e:13:d3:d2:9b:6e:12:e8:e4:42:ec:aa:c8:bc:08:
         ee:21:5b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:23:51 2025 by rpki-client