Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34372e302f32342d3234203d3e203533303532.roa
File:                     3138372e38342e34372e302f32342d3234203d3e203533303532.roa (raw, json)
Hash identifier:          ptMqnRj8LqtTtDG+YnpbMJF32fawipWNhijOzS4MOEU=
Subject key identifier:   FD:E0:AA:F2:BA:A5:32:40:E9:6F:2D:6E:FD:E3:14:D6:9A:E9:23:F8
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       6EDE5FC7181B59FB9B1C3D799BDBC138CE4A499B
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34372e302f32342d3234203d3e203533303532.roa
Signing time:             Mon 01 Sep 2025 18:45:31 +0000
ROA not before:           Mon 01 Sep 2025 18:40:31 +0000
ROA not after:            Mon 31 Aug 2026 18:45:31 +0000
asID:                     53052
IP address blocks:        187.84.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 19:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:de:5f:c7:18:1b:59:fb:9b:1c:3d:79:9b:db:c1:38:ce:4a:49:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Sep  1 18:40:31 2025 GMT
            Not After : Aug 31 18:45:31 2026 GMT
        Subject: CN=FDE0AAF2BAA53240E96F2D6EFDE314D69AE923F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:c6:87:78:79:a3:41:fa:de:62:73:e6:7d:
                    da:02:f8:1e:18:0c:dc:e7:cc:58:05:77:2d:2e:e1:
                    78:e5:3e:d7:b4:65:4f:be:1c:31:20:17:98:4a:ea:
                    33:66:f7:cb:46:b4:85:42:db:05:e5:e0:45:c5:35:
                    54:c4:60:13:fe:e6:dd:aa:81:77:13:3a:c5:23:8e:
                    78:1d:23:fb:f7:9e:03:2c:e7:72:cf:2c:f9:cf:d0:
                    b5:6e:ce:f8:ad:48:1f:89:da:28:fd:ba:1f:12:92:
                    e3:20:d3:d2:89:b1:5d:31:82:df:29:3d:c5:ea:32:
                    ab:b1:1a:df:44:99:ae:c4:aa:59:04:a0:ba:96:16:
                    d2:12:e6:fa:d4:a5:54:5f:d8:40:cd:af:22:b9:9f:
                    eb:87:0a:50:18:3d:76:9f:45:0f:41:2c:57:46:1e:
                    9e:6f:a1:79:ed:be:6d:4c:87:4d:ef:0d:62:a9:a9:
                    2c:56:2a:42:ed:c6:bd:b3:1a:c5:0c:57:c5:c6:af:
                    95:ad:04:d5:d9:33:85:bb:c9:4c:a9:72:f6:9f:ad:
                    4e:14:a1:4c:5e:01:1f:e7:bd:46:82:94:e9:60:22:
                    58:e7:8f:e7:91:bd:a4:41:e7:1d:bf:ae:21:ef:d3:
                    66:94:82:31:4a:98:f5:9e:3a:06:b3:2e:3b:38:aa:
                    58:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E0:AA:F2:BA:A5:32:40:E9:6F:2D:6E:FD:E3:14:D6:9A:E9:23:F8
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34372e302f32342d3234203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:56:dc:55:9c:0a:61:d4:c8:de:42:17:46:13:49:ee:9f:b3:
         59:ff:78:e9:5b:7f:d7:e0:43:ca:21:88:63:6f:c8:6d:7b:e4:
         08:ed:de:8f:f6:5b:2d:f7:d1:1c:72:05:24:63:49:07:2a:49:
         a4:43:6a:4d:21:76:11:2a:d0:7a:4c:6b:0b:71:29:d6:32:49:
         4c:1d:d3:30:a4:e2:15:88:66:db:bc:a7:f5:b6:67:a5:7d:3b:
         7f:46:ca:a4:01:e0:fc:74:cb:0f:50:0c:c5:83:06:9f:88:1e:
         ad:da:4b:d9:a3:08:ef:e9:7d:7e:3c:78:f5:5d:5d:e6:84:35:
         11:3e:18:85:da:c3:f3:b5:b3:8b:15:40:7a:36:32:42:1f:ad:
         f4:45:b0:c1:50:64:ab:fe:75:81:0a:c9:ce:0f:c5:c8:8d:5c:
         f0:59:b5:39:3d:d4:51:9c:9f:f1:14:4f:fb:a3:e1:ec:b6:2d:
         09:f7:6e:76:cc:c3:26:22:8c:29:72:89:d3:68:4f:a5:07:27:
         68:ea:41:8a:06:f6:50:ef:f9:4f:d2:c0:15:55:54:03:08:2f:
         6a:ff:88:9a:0e:80:83:a6:1b:05:9b:b6:86:b5:9b:2d:b5:5c:
         76:e9:fb:db:8f:b1:27:2c:fa:1b:d3:29:f0:da:56:37:b5:ef:
         9d:83:ac:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:35:51 2025 by rpki-client