Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e342e302f32322d3234203d3e20313938393439.roa
File:                     3138362e3139342e342e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          VK0YOUlad72iB3v7rg0MJF1t8TZDRdDjziTPLtqSb84=
Subject key identifier:   38:0A:81:64:20:B5:6E:C7:F8:D0:76:FF:E2:8A:D5:1C:2D:E1:9B:45
Certificate issuer:       /CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
Certificate serial:       3AEF1FA411B62EDE712327EB29E214735633E36B
Authority key identifier: 6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e342e302f32322d3234203d3e20313938393439.roa
Signing time:             Tue 04 Nov 2025 19:55:26 +0000
ROA not before:           Tue 04 Nov 2025 19:50:26 +0000
ROA not after:            Tue 03 Nov 2026 19:55:26 +0000
asID:                     198949
IP address blocks:        186.194.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.crl
                          rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 14:29:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ef:1f:a4:11:b6:2e:de:71:23:27:eb:29:e2:14:73:56:33:e3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
        Validity
            Not Before: Nov  4 19:50:26 2025 GMT
            Not After : Nov  3 19:55:26 2026 GMT
        Subject: CN=380A816420B56EC7F8D076FFE28AD51C2DE19B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:79:79:55:83:1c:70:ac:83:1a:c5:5e:55:c1:
                    b0:b6:a5:92:54:83:eb:13:08:5c:b0:7d:0d:50:99:
                    96:5c:a0:b9:7c:98:3b:32:19:cf:b0:95:bd:ce:fa:
                    a3:73:54:a3:74:d4:d3:7c:83:e4:5d:9f:a1:c9:c7:
                    71:72:1f:3f:a9:69:5a:66:5f:5a:fa:1e:bf:ab:82:
                    7d:46:41:a3:8b:0e:a3:0a:8d:29:50:ad:31:5c:71:
                    f4:3e:9b:9e:9f:53:da:8b:4f:96:6a:a1:ec:aa:90:
                    33:17:d5:8d:d2:e9:f7:8d:0b:93:cf:13:c1:28:6a:
                    12:84:53:0b:6b:a5:b7:f6:b1:9d:e9:b7:9d:c7:cc:
                    22:9e:d3:0e:44:24:1e:5f:79:ec:a7:f9:37:40:07:
                    bb:3e:49:45:79:e3:21:66:df:67:23:3c:e5:fe:0a:
                    b4:b7:ee:90:28:f4:e5:b4:20:57:9c:51:dd:26:a7:
                    21:34:59:96:63:23:e0:d6:25:90:c7:a5:6e:9f:67:
                    ed:96:04:fd:f3:81:93:31:eb:2a:e8:4d:3c:8c:31:
                    9c:3a:fd:8b:c5:6b:6e:bc:55:7d:9d:f1:65:27:14:
                    15:1d:35:5b:ef:c0:a3:77:78:94:0a:df:ee:76:81:
                    08:b4:2b:11:6c:cd:ad:2e:90:96:ce:0c:24:5c:68:
                    86:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0A:81:64:20:B5:6E:C7:F8:D0:76:FF:E2:8A:D5:1C:2D:E1:9B:45
            X509v3 Authority Key Identifier:
                keyid:6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e342e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:21:18:0f:b7:7e:10:c7:2b:98:e2:2a:29:4d:71:04:1b:86:
         01:1a:0b:85:14:42:95:81:37:eb:6c:f5:d0:51:37:1e:96:8d:
         e6:6b:bf:1e:da:e9:7a:e2:eb:aa:9f:d5:17:2b:17:25:46:0d:
         ff:4f:f6:08:9e:2a:01:ec:8e:5d:46:89:95:91:0f:4d:a6:58:
         a7:b6:f5:1c:18:c3:90:83:ff:09:aa:be:9c:65:03:a8:e8:e1:
         09:c0:76:96:ab:e9:7a:77:de:d8:15:b8:fa:fd:39:5b:46:af:
         0c:61:c2:3a:e9:e0:f0:94:45:f2:f5:73:44:ba:0c:55:bf:8d:
         44:e5:9d:85:d7:68:d2:3e:a9:38:af:8d:4c:c7:d9:a0:ab:4f:
         93:81:d1:b3:c5:dc:29:14:dc:80:cc:4d:f0:98:40:e7:ef:dc:
         9b:fa:8b:07:00:f4:44:86:22:5e:b0:52:5e:64:00:25:db:23:
         44:85:e6:e9:f9:67:4e:ba:19:77:c9:19:44:af:c7:79:57:26:
         fe:d1:7a:4d:2c:bb:97:24:1f:6d:29:db:5e:c7:96:a9:91:39:
         94:01:4c:d3:5b:7d:06:d1:f4:c9:f5:55:da:8f:57:f2:fd:5e:
         e0:b9:11:56:1e:36:12:62:52:9c:bd:d4:0a:ec:07:50:78:48:
         b8:80:52:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:09:52 2025 by rpki-client