Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34332e302f32342d3234203d3e203533303532.roa
File:                     3138372e38342e34332e302f32342d3234203d3e203533303532.roa (raw, json)
Hash identifier:          9wBAR6EySCOoaeFgP1A76cbE58LPawf6gcKLInE4pnU=
Subject key identifier:   85:2E:5D:F2:38:E3:4C:6C:D9:54:B3:4D:15:8D:98:A5:4D:D3:C6:08
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       B6ECFBCEF6C345F58D464B081DCEE11CD9223D
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34332e302f32342d3234203d3e203533303532.roa
Signing time:             Mon 01 Sep 2025 18:45:36 +0000
ROA not before:           Mon 01 Sep 2025 18:40:36 +0000
ROA not after:            Mon 31 Aug 2026 18:45:36 +0000
asID:                     53052
IP address blocks:        187.84.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 13:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b6:ec:fb:ce:f6:c3:45:f5:8d:46:4b:08:1d:ce:e1:1c:d9:22:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Sep  1 18:40:36 2025 GMT
            Not After : Aug 31 18:45:36 2026 GMT
        Subject: CN=852E5DF238E34C6CD954B34D158D98A54DD3C608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:b2:f1:f5:7e:5a:74:66:6e:6e:da:af:b4:
                    cf:13:e7:ea:7c:e6:0c:90:51:67:d1:7d:24:5a:a9:
                    39:80:73:9a:c2:79:13:aa:27:e3:df:dc:37:9e:99:
                    d9:ef:81:95:43:4f:42:6b:72:27:fc:1c:19:06:22:
                    0f:6f:50:a0:dc:b8:21:f5:b1:79:65:21:23:c0:7d:
                    c2:2d:68:44:cf:7e:ac:5c:b5:14:5c:59:3c:c1:35:
                    57:77:6e:6c:f7:e6:88:45:1a:d6:4f:90:bf:f9:53:
                    24:92:22:e3:a7:e0:2a:30:67:c9:34:28:a4:3e:cc:
                    ef:ef:f7:f3:69:66:24:fa:9f:00:72:a0:45:f5:64:
                    23:79:bb:67:20:65:f8:57:37:21:56:a6:57:0c:0e:
                    d3:6e:c1:a9:8e:e4:3a:01:be:fd:3f:1f:26:99:c5:
                    56:5d:47:f3:03:83:89:0f:d5:22:99:af:a1:1f:95:
                    e7:2b:fd:e6:b1:26:3b:a0:b5:64:0a:76:01:bb:20:
                    35:ab:44:f8:41:94:b3:f6:de:d6:57:b3:16:c7:ad:
                    5b:c8:da:7c:fb:e2:04:06:7e:e0:12:ab:d8:94:7a:
                    1d:1a:81:6d:0d:42:8d:29:5a:2f:03:a0:4a:fa:7d:
                    53:20:26:0c:e5:ab:16:ec:d5:78:fa:4d:a4:7d:ea:
                    55:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2E:5D:F2:38:E3:4C:6C:D9:54:B3:4D:15:8D:98:A5:4D:D3:C6:08
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34332e302f32342d3234203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:bf:9a:c6:65:4a:79:8a:00:2a:14:7b:c3:9d:b9:1d:f8:88:
         ed:f9:fa:22:dc:ae:f1:e8:51:61:d7:76:1e:ab:e6:7a:0d:9f:
         a6:b4:f5:dd:42:4d:3a:bd:a3:2b:ed:59:a0:ed:11:ae:60:7f:
         fb:4e:96:80:3c:b1:23:a7:cc:a2:3f:2a:ac:da:cf:ab:92:a4:
         db:48:28:98:ab:4a:72:25:c0:5d:81:92:c6:08:4e:90:f3:a8:
         d8:10:06:1a:7b:b1:79:e0:87:58:03:af:49:f2:8d:ae:1f:ad:
         51:83:e7:72:85:41:fc:49:97:51:5c:c3:5a:61:c7:43:a5:9c:
         8d:e6:f7:06:37:c1:3a:9c:58:ab:e4:fd:87:82:26:93:a9:95:
         e0:c1:0d:aa:2a:94:a1:42:61:21:52:18:40:0f:28:ea:c9:7f:
         a8:b0:84:e8:3d:6b:bb:7b:a3:73:52:87:ed:22:e3:85:fa:a5:
         4f:cd:9f:31:22:dd:15:50:93:c2:9b:f1:b0:6b:55:9f:c7:07:
         57:37:71:25:ef:aa:3c:f2:5e:b6:35:b4:ed:99:4d:b1:f4:b3:
         03:6b:97:78:1c:d2:6a:33:79:ae:f4:da:82:68:0f:32:f6:26:
         24:4c:d2:40:fa:1d:35:48:3a:6d:89:92:bf:6e:3c:d6:8f:ff:
         f5:01:84:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:38:15 2025 by rpki-client