Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32322d3232203d3e203533303532.roa
File:                     3138372e38342e33322e302f32322d3232203d3e203533303532.roa (raw, json)
Hash identifier:          vOhIqgDTIadDaon1gt7fCVy/mpXJQkIz6qG3ekLd3T0=
Subject key identifier:   5F:14:33:B5:4C:E7:BE:13:06:B1:B2:7B:B2:FC:DE:A9:76:EA:B1:C8
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       332FA5D8573EBCA4B2AC7DB7ABFF575C64911006
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32322d3232203d3e203533303532.roa
Signing time:             Mon 01 Sep 2025 18:45:34 +0000
ROA not before:           Mon 01 Sep 2025 18:40:34 +0000
ROA not after:            Mon 31 Aug 2026 18:45:34 +0000
asID:                     53052
IP address blocks:        187.84.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 13:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2f:a5:d8:57:3e:bc:a4:b2:ac:7d:b7:ab:ff:57:5c:64:91:10:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Sep  1 18:40:34 2025 GMT
            Not After : Aug 31 18:45:34 2026 GMT
        Subject: CN=5F1433B54CE7BE1306B1B27BB2FCDEA976EAB1C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e0:ea:04:ae:f1:ff:93:35:63:94:21:0c:70:
                    7f:16:6d:7f:dc:1a:41:e7:e6:eb:e3:79:8b:ca:e0:
                    55:29:44:a8:d3:7f:86:6b:18:49:4d:bf:22:ac:4d:
                    69:d9:fb:75:48:61:a5:81:15:f4:d7:09:2e:16:93:
                    57:fd:f7:89:36:e5:74:a6:54:50:ac:e7:71:27:e2:
                    06:a8:4d:75:09:9e:37:33:b2:5e:f6:cf:b7:85:57:
                    02:c7:e4:41:3d:c0:e7:98:93:66:f4:20:bf:7b:db:
                    ee:55:ac:68:0d:23:2d:11:88:40:c7:2d:7e:cc:07:
                    93:35:b7:e2:8f:fc:a2:09:1f:ef:86:00:d0:b3:01:
                    e7:2c:26:5d:f7:be:bf:5e:6c:61:4d:b9:20:95:f5:
                    ed:20:d1:2c:c3:41:8b:74:e5:63:51:0f:69:f5:23:
                    dd:fc:3d:a8:f4:75:65:37:40:70:6a:af:05:9d:c0:
                    d8:4c:1a:9d:ba:ec:8e:03:09:05:48:1c:a4:81:f9:
                    62:78:10:9b:b5:9c:fd:41:b0:2e:49:0b:7c:49:0a:
                    5d:ae:63:89:21:1f:b6:fb:f7:32:c5:57:d4:d4:a5:
                    8b:33:69:9b:cd:52:0a:d8:7c:75:d4:47:2e:8d:f5:
                    41:15:73:8f:be:e0:ab:93:d7:23:85:54:85:4b:2b:
                    9b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:14:33:B5:4C:E7:BE:13:06:B1:B2:7B:B2:FC:DE:A9:76:EA:B1:C8
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32322d3232203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:ee:19:af:26:c1:bd:b7:6d:4a:89:72:2b:9a:f6:ba:48:ac:
         4e:96:72:19:0a:4a:40:15:f7:69:4a:d4:50:7b:f2:f3:9a:64:
         d7:bd:b4:f6:b0:b7:f8:f8:52:19:5b:d1:00:1c:bf:0d:15:e6:
         e7:fa:0f:ab:0e:7e:0c:17:53:64:bc:ac:a6:a4:28:7d:67:0b:
         41:ec:c3:d0:05:ba:b6:43:5c:39:9f:11:39:57:ff:92:42:ce:
         00:52:35:25:1b:f0:8a:56:d9:0f:e8:b4:e6:d2:c5:92:cb:77:
         34:ae:d0:bf:4e:7b:7d:68:c9:dc:12:e2:fc:ce:8f:75:85:cc:
         00:18:79:dd:d2:ae:f8:48:b4:6a:95:31:bb:4c:6e:f0:69:c9:
         34:f3:ab:da:06:de:20:28:73:2b:73:77:02:ef:a4:5b:bf:46:
         93:cb:f2:a9:e6:85:e4:90:72:ab:99:37:08:1b:4d:79:06:11:
         f4:93:f3:6a:b9:fc:c1:cf:bb:a8:29:48:30:ac:c1:09:a0:17:
         4a:49:da:d8:5f:e1:43:73:f2:13:ac:b7:80:68:e8:d3:22:18:
         b0:93:fb:41:04:7d:5d:c5:9e:a0:2e:13:96:2b:cd:55:30:5d:
         40:e4:f9:fc:b7:48:95:e1:4c:7b:0d:be:a2:65:e7:80:39:fc:
         a8:d5:4d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:51:05 2025 by rpki-client