Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa
File:                     3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa (raw, json)
Hash identifier:          PI6uee/p1Ramj26D10M3jU89LeRKTlorFrsbNuyui2k=
Subject key identifier:   CB:0B:C8:C2:7A:0F:74:47:20:90:8B:8C:47:70:4C:E0:D5:7B:7A:36
Certificate issuer:       /CN=F369B880738FA6C66F931D123DE6542D4B42FD29
Certificate serial:       13BD13F11938F2AFD40276D7B42783AADD9C3F4F
Authority key identifier: F3:69:B8:80:73:8F:A6:C6:6F:93:1D:12:3D:E6:54:2D:4B:42:FD:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F369B880738FA6C66F931D123DE6542D4B42FD29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa
Signing time:             Mon 21 Jul 2025 15:57:40 +0000
ROA not before:           Mon 21 Jul 2025 15:52:40 +0000
ROA not after:            Mon 20 Jul 2026 15:57:40 +0000
asID:                     270579
IP address blocks:        189.126.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F369B880738FA6C66F931D123DE6542D4B42FD29.crl
                          rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F369B880738FA6C66F931D123DE6542D4B42FD29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F369B880738FA6C66F931D123DE6542D4B42FD29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 22:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:bd:13:f1:19:38:f2:af:d4:02:76:d7:b4:27:83:aa:dd:9c:3f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B880738FA6C66F931D123DE6542D4B42FD29
        Validity
            Not Before: Jul 21 15:52:40 2025 GMT
            Not After : Jul 20 15:57:40 2026 GMT
        Subject: CN=CB0BC8C27A0F744720908B8C47704CE0D57B7A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:28:ab:ec:84:fd:9a:74:f3:65:4d:64:f7:57:
                    16:f8:d5:9a:ba:59:56:b3:ea:21:5d:c4:69:bc:1f:
                    6b:39:15:70:0b:51:f1:08:be:d0:45:64:c0:96:f2:
                    77:c2:55:b7:38:7a:be:f0:eb:49:3f:1b:9d:10:a5:
                    63:02:8c:88:0c:2e:27:fa:9c:79:db:1f:c4:39:25:
                    be:54:fd:55:0b:b0:a1:71:5c:ce:5e:5c:5a:36:1e:
                    0a:81:76:5d:99:e5:13:b9:7d:a7:6c:c5:1c:a5:ac:
                    ae:3b:85:63:6c:0c:26:1e:af:51:31:5e:04:79:cb:
                    f0:aa:21:74:5c:db:c3:a2:b7:b2:f5:ab:3a:11:3f:
                    04:5b:dc:64:98:4c:fd:ae:5c:06:aa:0b:29:ad:ac:
                    81:c2:15:03:80:26:1b:3e:74:0d:f3:41:90:4f:b1:
                    3c:37:bd:76:0d:59:39:e9:0f:01:6d:14:f2:f6:7e:
                    39:ec:c4:bb:c7:df:c3:c3:d2:32:59:3f:17:39:c2:
                    80:09:b8:46:db:ec:0e:84:57:1a:13:7e:b9:62:63:
                    2c:e5:e6:7f:0c:8d:d0:cb:46:6e:5b:a1:bf:62:67:
                    1d:1b:ea:e7:8f:b9:2c:ef:e0:6d:36:2b:90:14:cd:
                    7c:95:2c:d3:a7:2e:c3:3b:d3:0b:69:f4:fd:c2:c7:
                    4e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0B:C8:C2:7A:0F:74:47:20:90:8B:8C:47:70:4C:E0:D5:7B:7A:36
            X509v3 Authority Key Identifier:
                keyid:F3:69:B8:80:73:8F:A6:C6:6F:93:1D:12:3D:E6:54:2D:4B:42:FD:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F369B880738FA6C66F931D123DE6542D4B42FD29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F369B880738FA6C66F931D123DE6542D4B42FD29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:ac:e7:ee:a2:d3:5d:d8:1b:79:2d:e0:41:20:57:88:66:34:
         dc:86:03:f9:a5:ac:79:30:d5:72:14:49:f2:2a:0e:38:56:d1:
         1a:0c:d2:be:ea:12:2e:76:96:46:6e:f8:54:b7:8e:fe:12:dd:
         61:12:8a:e2:d1:4e:44:a0:e4:4a:ee:fa:e6:b8:7d:ce:f0:f3:
         59:bf:f9:f7:2f:ee:cb:56:71:58:d0:2f:e9:ac:ca:97:5d:01:
         e6:28:60:87:8c:a9:68:d7:2a:d9:2a:d5:1e:bf:2d:ba:14:0c:
         ae:4a:5d:44:70:5a:1f:e6:cc:9c:e0:e9:de:ef:47:62:7d:86:
         df:de:53:19:43:e6:11:d4:0e:5a:95:da:58:6f:e0:bc:81:44:
         ea:86:09:2d:2e:92:9f:db:e4:f6:2e:04:bf:1f:b6:22:4c:a3:
         1c:2e:bf:d7:4e:c3:23:aa:f4:04:2f:98:c7:26:22:b3:aa:fe:
         fd:63:1b:7f:52:92:18:3f:37:a8:47:e7:10:c2:9a:8c:aa:75:
         2c:5f:b4:4f:ab:48:3a:64:66:59:1b:bc:13:8b:4d:14:19:b4:
         ca:29:b9:15:b5:93:c7:86:29:8b:30:70:3a:94:5d:26:46:12:
         b7:ae:df:56:05:21:40:d2:20:45:bb:51:74:ff:fc:c1:9a:24:
         32:d0:bb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:23:48 2025 by rpki-client