Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38362e302f32342d3234203d3e20323730353739.roa
File:                     3138392e3132362e38362e302f32342d3234203d3e20323730353739.roa (raw, json)
Hash identifier:          RQqjDo9m1PcWTbi4l3bT87FWC8Ms0g63P2+PfqO8goU=
Subject key identifier:   EA:37:47:3B:44:38:13:2E:94:2A:3A:11:22:54:A8:B9:A9:A9:DD:5E
Certificate issuer:       /CN=F369B880738FA6C66F931D123DE6542D4B42FD29
Certificate serial:       4801DA8041444B322B7ED568CD393C3F768EABC3
Authority key identifier: F3:69:B8:80:73:8F:A6:C6:6F:93:1D:12:3D:E6:54:2D:4B:42:FD:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F369B880738FA6C66F931D123DE6542D4B42FD29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38362e302f32342d3234203d3e20323730353739.roa
Signing time:             Mon 21 Jul 2025 15:57:40 +0000
ROA not before:           Mon 21 Jul 2025 15:52:40 +0000
ROA not after:            Mon 20 Jul 2026 15:57:40 +0000
asID:                     270579
IP address blocks:        189.126.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F369B880738FA6C66F931D123DE6542D4B42FD29.crl
                          rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F369B880738FA6C66F931D123DE6542D4B42FD29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F369B880738FA6C66F931D123DE6542D4B42FD29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 22:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:01:da:80:41:44:4b:32:2b:7e:d5:68:cd:39:3c:3f:76:8e:ab:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B880738FA6C66F931D123DE6542D4B42FD29
        Validity
            Not Before: Jul 21 15:52:40 2025 GMT
            Not After : Jul 20 15:57:40 2026 GMT
        Subject: CN=EA37473B4438132E942A3A112254A8B9A9A9DD5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:28:6a:8e:37:38:23:12:20:58:50:13:11:64:
                    14:0d:0f:8e:6b:6a:4c:e1:2b:ee:5b:b6:44:0a:e9:
                    32:3e:de:70:b7:ce:df:3d:2b:86:b6:ef:f0:33:9d:
                    3c:2d:18:79:2d:6e:40:19:af:6d:f7:e0:70:4a:ac:
                    b7:69:55:ef:8b:b1:3e:2c:ea:52:cf:7e:e6:5b:95:
                    06:37:6f:b7:26:56:9a:43:0d:6b:d1:98:80:8f:38:
                    d8:29:9a:d2:37:48:a5:85:2f:18:67:f5:5b:da:04:
                    78:31:4f:3a:b6:8c:89:82:d5:3c:5b:5b:3a:74:6a:
                    d9:9c:d9:8e:eb:51:9b:4b:3f:fb:6b:96:7e:08:22:
                    7f:db:0d:6f:26:13:b5:b1:af:88:b7:ba:a7:2c:30:
                    f7:6b:20:27:87:20:2a:1c:a8:d0:bb:94:58:fa:bc:
                    78:f2:7d:1f:4f:7c:f9:e6:0c:09:e8:84:1b:ef:ee:
                    96:c2:74:46:ed:99:e3:94:64:81:54:9f:1f:32:c9:
                    3b:77:c4:11:9b:3b:80:ee:ad:be:25:f5:4c:29:e0:
                    4e:15:3a:97:f2:50:6e:15:25:a6:f8:ca:79:44:5d:
                    39:5c:cc:d3:6d:ef:fb:6b:ef:a1:4e:39:f1:03:6d:
                    03:1c:9c:61:f6:4a:4e:a8:eb:75:eb:16:79:bd:de:
                    3d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:37:47:3B:44:38:13:2E:94:2A:3A:11:22:54:A8:B9:A9:A9:DD:5E
            X509v3 Authority Key Identifier:
                keyid:F3:69:B8:80:73:8F:A6:C6:6F:93:1D:12:3D:E6:54:2D:4B:42:FD:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F369B880738FA6C66F931D123DE6542D4B42FD29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F369B880738FA6C66F931D123DE6542D4B42FD29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38362e302f32342d3234203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:07:01:e2:69:89:80:e9:1d:95:1f:9d:c1:3d:77:72:4d:7f:
         3b:31:31:f1:5b:bc:2f:50:01:51:cd:94:a9:48:a4:e0:85:f3:
         ab:c9:e5:f6:6a:20:05:4f:ee:ca:4e:97:c2:33:cb:14:7b:6b:
         48:91:07:97:1a:a1:8d:b8:51:20:3a:2d:30:3b:52:dc:eb:7e:
         45:36:85:1e:83:8d:44:a2:37:97:62:2c:ad:e7:92:b6:4c:0b:
         da:13:c4:1f:b4:67:53:d0:48:cd:86:4a:da:89:0b:da:98:b2:
         c4:c2:7e:35:03:74:f9:e1:21:d5:c3:63:89:4c:72:d0:82:a3:
         5d:5c:ed:86:7c:ec:c5:cb:f9:69:51:46:1a:73:81:9c:77:1f:
         30:18:62:be:e2:f8:77:85:2e:bc:e1:e0:16:bf:12:c6:cf:76:
         fd:d1:94:37:83:87:5f:6b:69:d6:f9:64:4f:10:a5:4f:25:e9:
         30:1f:b1:78:58:cb:c7:e9:e1:14:1c:ad:03:b8:52:36:82:89:
         d8:40:f8:86:2a:54:3e:22:ea:7f:3d:53:4c:75:b7:6e:77:85:
         a9:5c:e3:2a:5a:db:55:1f:c9:50:60:c6:c3:a5:82:cb:b1:e5:
         68:ae:5a:2d:77:19:46:9d:59:3a:f9:99:e6:ac:0d:5a:69:83:
         02:13:b4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:23:48 2025 by rpki-client