Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/3138372e34342e3132382e302f31372d3234203d3e203238313836.roa
File:                     3138372e34342e3132382e302f31372d3234203d3e203238313836.roa (raw, json)
Hash identifier:          lC5HtA8pYksxocklhbuUzjpcT5tyy683QBUWEvMuNhk=
Subject key identifier:   CC:A7:F5:F6:2F:43:28:9C:93:78:4C:A9:DA:29:1C:7E:18:2A:E2:83
Certificate issuer:       /CN=8CAC75CE2881CD7669B1A00B98185D6B35836A16
Certificate serial:       1804E56C5F0BD2C777AF5E2173A17453A93DEE3C
Authority key identifier: 8C:AC:75:CE:28:81:CD:76:69:B1:A0:0B:98:18:5D:6B:35:83:6A:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAC75CE2881CD7669B1A00B98185D6B35836A16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/3138372e34342e3132382e302f31372d3234203d3e203238313836.roa
Signing time:             Wed 27 Aug 2025 21:00:05 +0000
ROA not before:           Wed 27 Aug 2025 20:55:05 +0000
ROA not after:            Wed 26 Aug 2026 21:00:05 +0000
asID:                     28186
IP address blocks:        187.44.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/8CAC75CE2881CD7669B1A00B98185D6B35836A16.crl
                          rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/8CAC75CE2881CD7669B1A00B98185D6B35836A16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAC75CE2881CD7669B1A00B98185D6B35836A16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:04:e5:6c:5f:0b:d2:c7:77:af:5e:21:73:a1:74:53:a9:3d:ee:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CAC75CE2881CD7669B1A00B98185D6B35836A16
        Validity
            Not Before: Aug 27 20:55:05 2025 GMT
            Not After : Aug 26 21:00:05 2026 GMT
        Subject: CN=CCA7F5F62F43289C93784CA9DA291C7E182AE283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:89:2d:75:94:15:b1:b0:bf:9d:94:9e:fe:51:
                    c0:83:dc:31:6a:da:8a:6d:a2:7c:8e:c8:e6:b3:00:
                    36:82:9e:17:53:e8:bd:54:99:a7:0f:ec:70:eb:a5:
                    fc:2d:b4:0a:7c:31:38:3c:2a:f0:89:c3:e4:86:f3:
                    b9:3e:e9:0b:60:15:76:e6:8b:4c:df:e3:d1:5e:7a:
                    35:08:a2:7e:6d:f6:85:fd:09:7a:2d:9c:ee:72:1a:
                    d9:20:59:3b:0b:b5:2e:89:a8:3c:c2:7b:97:1c:fd:
                    2e:e4:ab:d2:71:21:f6:e5:3f:c7:c8:3b:c1:64:1b:
                    bc:d6:ff:70:11:a7:f7:82:df:18:e4:fb:61:78:f5:
                    4f:f5:97:0d:c7:96:61:21:43:35:3f:21:a2:c0:46:
                    91:db:7f:6e:e5:d0:a3:7f:66:eb:5f:46:ce:b0:35:
                    3a:16:31:6b:99:b5:78:2c:81:33:9d:e2:cf:f9:8b:
                    28:93:5d:c7:40:1f:5c:22:7b:19:f4:4f:e4:e4:ec:
                    a5:3f:9f:21:b6:ad:ac:19:25:2b:27:c9:09:ef:a7:
                    0e:46:f8:3d:5f:88:f9:ee:74:2c:3f:ee:5e:a4:32:
                    ba:44:a4:6d:e2:fa:5a:7c:e2:79:b6:f0:74:66:d2:
                    ad:e7:68:e2:32:f7:f1:9b:2a:a2:26:25:89:00:92:
                    16:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A7:F5:F6:2F:43:28:9C:93:78:4C:A9:DA:29:1C:7E:18:2A:E2:83
            X509v3 Authority Key Identifier:
                keyid:8C:AC:75:CE:28:81:CD:76:69:B1:A0:0B:98:18:5D:6B:35:83:6A:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/8CAC75CE2881CD7669B1A00B98185D6B35836A16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAC75CE2881CD7669B1A00B98185D6B35836A16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/3138372e34342e3132382e302f31372d3234203d3e203238313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         43:c0:74:7f:a8:b2:d3:34:0a:d3:60:17:f4:65:9e:60:3c:e1:
         f4:5e:ef:a7:83:1a:dc:15:af:ff:b5:96:4e:f3:18:5f:dc:fc:
         f3:5c:c8:c7:77:cf:99:1d:54:6f:a6:81:5f:7f:6d:a4:f7:ef:
         16:47:81:f8:64:eb:68:34:ab:3d:a5:d3:3b:9e:e5:69:38:a7:
         ed:6f:45:a9:29:a3:b1:aa:f2:6f:d5:16:7c:6a:68:78:e3:49:
         04:8c:5b:ca:17:db:d8:48:6b:ba:7b:cc:0c:9e:41:6a:95:08:
         f3:a0:dc:ed:98:75:17:ca:24:aa:92:6d:e4:48:c2:a3:81:51:
         2b:19:eb:33:e0:86:d2:ba:88:23:12:56:23:0a:11:97:d0:59:
         d8:aa:b1:90:2f:65:4b:d2:81:2f:40:f3:5a:b0:da:68:02:db:
         9f:d0:b0:68:9f:f2:bb:1a:79:64:52:4b:c2:56:76:d4:82:8c:
         6c:c0:a5:de:e3:a7:f9:73:00:78:dd:f4:2b:49:ee:d6:ee:67:
         e9:4e:fe:25:2d:f5:e2:11:56:b4:b6:36:1f:ab:32:48:1e:a3:
         65:23:3e:48:28:c2:c1:33:7f:9e:5b:cf:ab:3e:b5:22:0c:40:
         0f:dd:2f:4c:c1:8f:0c:74:95:92:33:8d:7a:8d:03:8e:59:f3:
         f6:3d:38:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:40:28 2025 by rpki-client