Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3230342e302f32342d3234203d3e203238333532.roa
File:                     3138392e35312e3230342e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          MtOOqyMEDKgPrNmkttkr3GQVNhu19UfSApR1oba693A=
Subject key identifier:   18:7E:AB:A7:4C:13:4B:D8:39:F8:0E:36:50:58:FB:DE:F6:24:EC:B1
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       38F7A3FC3E2C2F2C3D86285C6FE8FA477AF3FF2B
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3230342e302f32342d3234203d3e203238333532.roa
Signing time:             Mon 08 Sep 2025 14:46:03 +0000
ROA not before:           Mon 08 Sep 2025 14:41:03 +0000
ROA not after:            Mon 07 Sep 2026 14:46:03 +0000
asID:                     28352
IP address blocks:        189.51.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f7:a3:fc:3e:2c:2f:2c:3d:86:28:5c:6f:e8:fa:47:7a:f3:ff:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Sep  8 14:41:03 2025 GMT
            Not After : Sep  7 14:46:03 2026 GMT
        Subject: CN=187EABA74C134BD839F80E365058FBDEF624ECB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:88:50:32:e5:63:f3:05:cc:2c:fa:cd:fc:52:
                    a0:ba:a2:f5:ef:ae:de:4b:55:9d:e9:a1:a3:92:5d:
                    d3:68:0a:2b:b5:ba:b9:53:d1:a5:ca:9c:6a:c1:6c:
                    6d:70:90:0a:48:08:a4:da:04:1f:3a:a7:e1:37:6c:
                    5c:2f:63:0b:ad:a4:4f:f9:e6:02:68:3c:33:71:9d:
                    cd:5a:ba:5d:e5:f5:be:25:50:fa:da:d7:84:18:5c:
                    c2:af:8f:14:0f:eb:8b:e6:36:b0:36:e5:7d:c4:d9:
                    a6:8f:46:9d:29:3e:dc:d6:e9:e2:b4:c1:25:24:e3:
                    33:1d:7a:53:d8:45:08:5b:a4:8b:1d:90:06:c5:d0:
                    53:db:f5:a8:44:43:a2:b9:31:33:5a:6a:a2:ab:e5:
                    d7:65:5c:28:db:c5:0b:3e:94:67:2d:71:33:ce:3f:
                    32:45:22:11:5d:c2:c6:16:d5:f5:64:2f:6d:06:bd:
                    b0:38:8a:2e:fe:dc:05:91:9d:8d:99:a6:e9:0f:63:
                    5d:1d:1c:73:75:13:ff:a2:39:01:35:c1:aa:77:0e:
                    69:f7:13:9e:17:bc:28:78:f1:c5:24:55:60:37:61:
                    e1:4b:37:e0:18:49:e4:a4:d7:97:80:88:0f:b1:17:
                    17:39:15:9b:3e:00:8e:94:ba:10:6d:57:53:4f:9c:
                    b4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7E:AB:A7:4C:13:4B:D8:39:F8:0E:36:50:58:FB:DE:F6:24:EC:B1
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3230342e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:eb:0a:4b:1c:e4:e1:e5:b3:62:fe:e0:f2:e3:e1:e4:e0:e8:
         5c:b9:c3:fb:6b:70:42:21:0e:f2:3e:a2:b9:ff:5c:d9:49:93:
         96:d4:2e:70:37:19:14:0f:67:35:02:3b:59:9c:78:dd:65:c4:
         bc:3b:51:6f:49:8d:b8:a2:ad:7f:5b:7d:6b:ed:38:ab:02:4e:
         54:6e:1a:2d:7c:ba:17:dc:97:4f:39:c0:61:8a:7e:70:99:66:
         29:d1:34:47:40:bb:e7:c7:31:bf:5b:fa:11:b9:e2:b1:94:16:
         0b:44:09:cf:35:7a:a0:eb:73:e6:68:61:bd:42:63:73:5c:76:
         a0:51:62:31:7e:90:be:ff:54:35:dc:ad:af:ac:6f:67:ed:91:
         bb:29:08:c1:60:0e:1d:70:34:63:cb:18:83:36:31:c7:c3:f3:
         cf:03:d1:e8:36:6d:46:dc:f0:87:15:02:24:be:dd:43:78:80:
         b3:34:fc:48:ab:0b:5b:c3:b3:97:14:9b:60:37:af:87:1a:a0:
         d6:e7:4b:cb:ff:f9:27:64:38:66:8a:0d:3c:d3:86:84:05:8c:
         58:21:e7:41:91:a8:bb:b1:e9:44:40:70:5e:25:05:2a:a0:61:
         2f:b9:c7:80:ed:4d:82:31:c6:4a:fa:f1:f4:56:47:bf:03:ee:
         d0:e5:3e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:10:30 2025 by rpki-client