Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33332e302f32342d3234203d3e203533303532.roa
File:                     3138372e38342e33332e302f32342d3234203d3e203533303532.roa (raw, json)
Hash identifier:          btC3yb2gw201qNYvn2GqTUoBvBbe/gJJzsej3Db9zs4=
Subject key identifier:   C8:D6:1E:6A:EE:EB:03:B3:F6:33:F1:E6:8B:8F:05:A5:11:88:7C:DF
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       020D079F32DBA38E745D4477552A13BAB94A3282
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33332e302f32342d3234203d3e203533303532.roa
Signing time:             Mon 01 Sep 2025 18:45:35 +0000
ROA not before:           Mon 01 Sep 2025 18:40:35 +0000
ROA not after:            Mon 31 Aug 2026 18:45:35 +0000
asID:                     53052
IP address blocks:        187.84.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 13:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0d:07:9f:32:db:a3:8e:74:5d:44:77:55:2a:13:ba:b9:4a:32:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Sep  1 18:40:35 2025 GMT
            Not After : Aug 31 18:45:35 2026 GMT
        Subject: CN=C8D61E6AEEEB03B3F633F1E68B8F05A511887CDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:36:58:08:6c:62:8d:5d:f5:f9:c9:6d:b6:f5:
                    0e:32:18:4e:c5:0c:a9:3b:b4:68:4d:90:c8:06:94:
                    93:fb:fb:16:8c:19:c3:8a:d8:49:32:28:9d:15:b9:
                    9a:17:f2:5e:fe:77:eb:5f:60:73:6f:71:d2:11:36:
                    99:55:4f:65:f8:07:6a:cc:05:f0:40:33:0c:ea:8c:
                    4c:d1:7c:c6:e2:a2:93:b4:8c:a3:47:c5:10:47:9e:
                    cd:5f:02:91:41:24:a0:11:7b:f7:73:34:b3:00:aa:
                    db:f8:47:84:9d:1b:50:1e:07:86:08:36:fe:85:06:
                    1c:de:9f:11:bb:3e:58:3f:ad:60:4d:4c:cb:d4:3b:
                    5e:95:29:af:23:da:44:ca:91:c2:80:63:fb:cd:0e:
                    3c:24:52:09:00:79:20:16:bd:45:e2:c7:3c:e3:66:
                    70:2c:c5:44:2f:cc:04:41:5a:f4:22:61:cf:8d:f2:
                    59:27:28:43:e6:61:ec:05:0c:7d:1e:16:31:47:18:
                    3a:70:17:3d:70:2a:23:b1:52:51:c8:4f:09:89:0b:
                    70:6c:7a:61:1b:d3:09:2d:2b:d8:76:6a:d3:34:e6:
                    4a:58:c0:04:2c:d9:50:bb:e9:8e:ca:d6:3a:b2:26:
                    5f:ce:c9:9e:10:5c:34:f8:64:d9:1a:4b:e0:3a:6d:
                    88:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D6:1E:6A:EE:EB:03:B3:F6:33:F1:E6:8B:8F:05:A5:11:88:7C:DF
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33332e302f32342d3234203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:51:d0:cf:a4:8b:54:35:3c:ed:55:14:b6:2f:fb:e9:9d:f2:
         b9:6b:86:b7:af:79:59:dd:60:36:08:75:19:1c:8c:13:da:aa:
         fa:ea:b7:b3:c8:99:a9:f3:a3:19:18:b7:b8:88:20:27:94:1f:
         1c:bc:d5:40:f0:a6:32:b0:1c:80:55:00:14:41:7c:76:08:bd:
         22:80:62:05:21:3b:7a:3e:e9:07:06:3a:e1:7d:e7:5b:c1:8b:
         17:b6:a8:36:05:77:4d:46:2a:31:4b:15:04:2a:29:17:af:64:
         63:d1:77:4d:dd:d8:51:ec:5d:fc:90:57:13:2a:7b:fe:e5:97:
         c6:93:36:22:c9:da:53:77:8e:df:26:67:df:66:64:7c:45:c0:
         e4:ac:83:12:fc:37:b1:7a:8c:c4:6d:e2:37:48:32:a4:e6:66:
         7b:2d:95:7a:61:34:d5:49:9d:13:c6:90:23:bb:f5:37:5a:2d:
         d4:54:ed:69:85:0b:46:33:00:ae:09:8e:ca:a4:53:65:08:ee:
         0b:57:5a:73:97:bf:f1:b7:86:7b:a2:15:09:22:cd:e2:77:c4:
         e5:3b:ad:fb:28:03:11:26:6f:40:d3:46:71:ab:4f:56:49:06:
         af:21:bc:48:46:a7:7f:d1:92:ba:2c:24:45:a6:d7:e0:ba:03:
         3d:31:94:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:23:40 2025 by rpki-client