Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34342e302f32342d3234203d3e203533303532.roa
File:                     3138372e38342e34342e302f32342d3234203d3e203533303532.roa (raw, json)
Hash identifier:          9Uw/JLq355+siGWWAMU/CgDbUsZIqm/MEzVaCAYKBtk=
Subject key identifier:   6D:1D:1A:B2:1D:B3:FD:0B:6C:BE:4A:EE:C7:C5:99:4D:B8:27:28:F7
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       2CC62ABACADC5630F5832C315EDEC489D01767E7
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34342e302f32342d3234203d3e203533303532.roa
Signing time:             Mon 01 Sep 2025 18:45:32 +0000
ROA not before:           Mon 01 Sep 2025 18:40:32 +0000
ROA not after:            Mon 31 Aug 2026 18:45:32 +0000
asID:                     53052
IP address blocks:        187.84.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 19:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c6:2a:ba:ca:dc:56:30:f5:83:2c:31:5e:de:c4:89:d0:17:67:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Sep  1 18:40:32 2025 GMT
            Not After : Aug 31 18:45:32 2026 GMT
        Subject: CN=6D1D1AB21DB3FD0B6CBE4AEEC7C5994DB82728F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:06:f8:e3:fc:8f:23:f5:c1:cd:2c:af:32:56:
                    8f:b4:6e:d1:b7:6a:42:26:7f:23:15:3e:13:14:97:
                    9b:ad:6a:a6:5c:d5:4d:8a:cf:06:7b:a2:b6:70:b9:
                    5b:68:bb:59:50:dd:c6:2e:41:57:6c:96:39:d0:7f:
                    11:36:60:95:0d:c4:37:62:95:5a:fb:be:29:71:3c:
                    28:b5:84:5f:59:23:d8:59:db:78:f9:4d:02:5b:7c:
                    c7:79:38:34:6b:71:27:27:d7:fb:e4:4a:fc:40:df:
                    3a:cb:5b:e0:ef:12:ae:51:7d:52:6e:92:3a:2c:a8:
                    51:7e:be:db:a9:78:b9:4d:da:7e:b4:34:28:1b:9b:
                    cb:3f:d1:4f:d9:d7:fa:1e:bf:12:fb:a5:b5:97:d3:
                    91:72:f9:92:ea:ea:6b:a8:ae:20:d3:92:5a:5d:65:
                    dd:3e:b1:19:d0:97:cd:3a:81:be:a7:90:1a:02:f7:
                    b4:a1:60:97:08:91:ab:a0:15:3c:31:f1:ca:ca:e4:
                    71:60:6c:99:dc:3d:cf:6e:0c:7a:a0:83:ab:8c:6f:
                    28:60:54:29:a4:37:ce:0a:93:50:c5:25:a0:45:ae:
                    73:0c:dd:2b:45:ea:d6:ca:2b:27:6e:86:02:4e:13:
                    2d:88:2b:9f:e8:2c:ff:3d:64:f2:4e:47:ab:13:3e:
                    4d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1D:1A:B2:1D:B3:FD:0B:6C:BE:4A:EE:C7:C5:99:4D:B8:27:28:F7
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34342e302f32342d3234203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:42:f1:e4:08:1e:81:e7:0e:bc:38:7c:d1:37:ad:b9:28:9e:
         97:7c:99:00:42:42:ad:53:f8:14:cd:53:e3:ca:f1:d9:fe:50:
         18:69:91:4f:f0:32:d4:3c:ce:54:a6:a1:78:a3:b5:23:0f:27:
         b4:4e:bb:39:2f:07:1b:c4:06:65:10:82:46:06:b2:d4:b8:20:
         d8:09:26:d6:de:79:fc:50:ad:4f:07:d7:e3:86:96:77:44:f8:
         a3:aa:17:9d:24:a6:bd:b1:14:0f:97:cf:2c:c6:d4:74:63:ad:
         4b:78:ba:ae:dc:93:33:cf:57:e7:c9:76:4c:ff:5d:6b:7b:9e:
         36:6e:7f:cd:d6:6b:12:6f:08:5f:03:48:32:9a:0a:67:13:69:
         40:e9:a5:74:b0:46:b3:6b:00:0a:fc:f7:9c:8d:cb:53:c7:a4:
         46:9b:be:de:58:5b:6e:11:42:f9:c1:e7:c5:24:14:bf:93:fd:
         21:62:af:94:76:74:68:00:e0:0d:b1:6a:d3:be:ca:00:88:e6:
         eb:a1:28:19:12:5e:64:ff:d6:28:4a:80:da:a3:c5:34:b1:97:
         bd:7a:62:02:fd:8a:00:10:7a:34:7b:7f:97:88:f5:46:58:8a:
         74:9e:18:b0:70:4f:ad:2a:78:33:04:98:27:f5:8d:ae:6c:83:
         8a:5c:e7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:36:05 2025 by rpki-client