Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3138392e37362e3234302e302f32302d3234203d3e20323632343037.roa
File:                     3138392e37362e3234302e302f32302d3234203d3e20323632343037.roa (raw, json)
Hash identifier:          DUj1K5LnurzjpM+hh7YuZvkBQhU7xEq2i81AglFV78U=
Subject key identifier:   EA:33:73:59:3D:9D:74:74:C5:D3:73:DF:69:46:69:34:21:57:EC:14
Certificate issuer:       /CN=6D31497D50F2E7BCADD55F9BBCC79046B5989FD9
Certificate serial:       4134981EFE63CA0695B66429C4C49DAF608C9048
Authority key identifier: 6D:31:49:7D:50:F2:E7:BC:AD:D5:5F:9B:BC:C7:90:46:B5:98:9F:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3138392e37362e3234302e302f32302d3234203d3e20323632343037.roa
Signing time:             Thu 11 Sep 2025 20:13:11 +0000
ROA not before:           Thu 11 Sep 2025 20:08:11 +0000
ROA not after:            Thu 10 Sep 2026 20:13:11 +0000
asID:                     262407
IP address blocks:        189.76.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.crl
                          rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 10:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:34:98:1e:fe:63:ca:06:95:b6:64:29:c4:c4:9d:af:60:8c:90:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D31497D50F2E7BCADD55F9BBCC79046B5989FD9
        Validity
            Not Before: Sep 11 20:08:11 2025 GMT
            Not After : Sep 10 20:13:11 2026 GMT
        Subject: CN=EA3373593D9D7474C5D373DF694669342157EC14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:91:c5:72:42:c1:3f:52:c7:c8:ed:79:7b:f6:
                    d8:5b:17:b8:26:03:3f:d3:7e:3a:a8:c8:e6:d4:68:
                    f8:67:18:8f:72:13:b3:fe:83:cd:fb:66:31:8f:85:
                    40:7b:05:01:0d:7a:8f:7f:66:f6:d7:8d:84:1b:de:
                    bd:f4:32:84:a3:ad:57:cf:81:5b:0b:51:ad:b8:bd:
                    f6:70:76:0e:a6:65:f4:7f:94:07:6a:36:d4:bb:46:
                    ad:0d:d7:44:d5:ca:78:51:d9:b7:70:cd:e5:81:e2:
                    e8:f4:df:4c:cd:2f:36:c2:09:05:a8:52:4c:76:d2:
                    25:1a:b9:1c:8c:fe:9f:24:cd:1e:27:ac:28:9e:6e:
                    c5:f7:15:2c:bf:96:89:55:dd:e2:b9:38:84:a3:cf:
                    56:5d:b1:7a:66:a8:e1:98:86:55:0f:08:ef:0d:e7:
                    2e:31:5e:dd:36:7a:6a:55:19:97:4c:11:9e:1a:ff:
                    56:05:2a:0c:1a:b7:51:4b:e5:43:33:87:16:d6:2d:
                    66:3a:5a:73:90:79:36:51:98:cb:bf:d6:95:b0:c0:
                    56:d9:da:e8:53:09:48:78:78:8e:65:33:38:d7:7c:
                    9b:30:31:29:76:e9:68:ac:fb:46:dc:b8:d8:99:a5:
                    23:a3:d9:45:d0:12:56:cb:46:e7:0e:71:66:8f:02:
                    fe:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:33:73:59:3D:9D:74:74:C5:D3:73:DF:69:46:69:34:21:57:EC:14
            X509v3 Authority Key Identifier:
                keyid:6D:31:49:7D:50:F2:E7:BC:AD:D5:5F:9B:BC:C7:90:46:B5:98:9F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3138392e37362e3234302e302f32302d3234203d3e20323632343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:e8:6c:0a:65:72:1a:71:76:71:48:02:f6:fb:89:16:fb:3f:
         ad:fb:aa:d8:3e:c7:4a:aa:f7:79:14:ca:6d:13:6c:02:a0:31:
         5f:6e:6d:c6:76:86:60:83:b8:b5:9f:71:1b:8e:ff:53:7c:34:
         38:0c:52:de:53:55:65:38:9a:27:75:c7:f4:64:16:9f:e8:c6:
         96:60:69:cc:18:83:41:23:d1:30:b4:54:ea:77:de:3f:82:9d:
         37:8a:a4:b0:21:4c:ea:58:83:d5:5d:a6:18:4e:21:5c:51:26:
         92:a3:3c:0d:f1:ad:15:2d:8f:48:be:fa:a2:18:b1:68:61:90:
         7e:44:f0:e0:5a:1b:1a:9f:12:0e:ed:fe:0a:12:81:b6:22:1e:
         c0:cf:e0:90:f2:1e:ea:f7:08:34:4d:cc:9d:96:68:bb:b8:ea:
         21:24:d2:66:e0:a6:f9:2d:17:19:7d:19:cc:30:3d:b9:0e:1a:
         1e:83:85:59:ef:03:f0:c7:5a:fd:6f:33:f2:71:49:d8:01:b2:
         6e:06:6d:e0:81:58:44:df:ce:e3:72:fb:ec:22:94:64:ff:45:
         d9:01:c4:4e:8b:bc:fb:da:87:7d:14:d6:e3:5e:43:3d:e0:b4:
         46:e4:d8:88:89:cd:8e:b7:ea:f7:6d:c6:50:08:c1:35:ab:96:
         e1:08:e9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:04:31 2025 by rpki-client