Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e31302e302f32332d3233203d3e20323632373937.roa
File:                     3138362e3233372e31302e302f32332d3233203d3e20323632373937.roa (raw, json)
Hash identifier:          nxR53WzpIhh/yfS6j7TPvief/rMNLi4ofTzSggd32Bk=
Subject key identifier:   E6:87:B1:25:36:15:42:13:73:2B:8F:9C:20:14:E3:3C:2D:FB:40:24
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       4592EB364E8F37F857FF3F11DECA52D7D97E1531
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e31302e302f32332d3233203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:19 +0000
ROA not before:           Thu 23 Oct 2025 14:08:19 +0000
ROA not after:            Thu 22 Oct 2026 14:13:19 +0000
asID:                     262797
IP address blocks:        186.237.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:92:eb:36:4e:8f:37:f8:57:ff:3f:11:de:ca:52:d7:d9:7e:15:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:19 2025 GMT
            Not After : Oct 22 14:13:19 2026 GMT
        Subject: CN=E687B12536154213732B8F9C2014E33C2DFB4024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bb:5d:54:0e:63:46:8f:6d:61:52:cb:ad:c9:
                    97:e0:58:47:d5:db:cf:ac:e1:6f:c5:74:98:d2:92:
                    39:ac:87:99:60:8f:79:c1:67:60:a8:84:c6:4a:5c:
                    cb:dd:f3:1e:91:90:be:f0:39:79:6f:0b:10:74:1c:
                    41:6d:64:20:a1:35:95:07:05:21:4b:e5:3d:81:05:
                    36:05:56:6c:41:79:23:69:e7:d8:5a:e0:f1:25:d8:
                    29:1c:bb:3d:3f:ce:9f:ab:36:a0:4a:28:66:bb:ca:
                    3a:ae:55:79:01:0c:0d:42:27:26:0c:e6:89:28:4b:
                    75:4c:02:3e:9f:c5:c0:88:3c:cf:93:f9:98:f6:ea:
                    99:f2:75:44:1a:2a:3b:60:32:fe:b4:89:c5:94:3f:
                    cc:44:60:e6:9f:06:43:59:98:41:f9:bb:44:a0:21:
                    17:00:21:0a:77:72:77:bb:e0:ef:53:de:09:10:09:
                    23:00:88:a7:01:6b:b2:aa:e9:18:14:37:20:64:03:
                    3e:b1:b4:3e:5f:6a:3c:2d:48:47:24:67:37:13:cc:
                    27:ed:0b:55:aa:35:e3:43:01:f1:a1:ed:5e:f9:44:
                    9a:e8:bc:7b:38:42:25:54:20:28:9e:77:22:07:7e:
                    02:d7:23:ff:89:18:3e:c8:67:0a:d3:48:fa:d7:49:
                    84:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:87:B1:25:36:15:42:13:73:2B:8F:9C:20:14:E3:3C:2D:FB:40:24
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e31302e302f32332d3233203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:74:1a:fd:cb:20:cf:a0:b3:2c:16:a6:de:29:5f:3c:da:b7:
         cc:35:2c:8c:ca:73:60:b6:0f:a3:3f:6e:97:33:74:5d:8c:6a:
         fe:65:2d:7b:40:14:3e:54:da:c1:00:df:80:9e:ff:56:e8:0c:
         e5:e7:36:ed:04:9c:f2:32:e2:9b:c4:84:cd:57:0a:3e:d0:ef:
         d3:48:ad:b7:3a:18:65:5d:95:78:41:0f:37:bd:7f:c9:47:10:
         a2:5f:ef:ea:93:7b:33:29:10:bd:b9:80:22:89:cb:3e:9b:4d:
         6b:53:94:c8:03:ae:c6:0a:8d:78:44:8a:c9:3d:3a:c1:a9:82:
         d5:59:fb:e9:28:81:c3:09:3f:05:ca:f3:df:da:fa:e3:2e:c9:
         b2:64:65:f6:38:41:d7:a5:9e:0e:55:25:55:3c:54:b1:ce:7b:
         2b:cb:13:40:b4:97:8f:ed:49:ad:53:27:5b:e5:b2:71:a2:71:
         e4:15:4d:8c:d4:e0:cb:55:eb:89:7b:3f:55:81:db:53:53:8c:
         bc:0e:15:d3:12:d9:56:d4:72:66:bd:44:38:be:38:49:bc:70:
         09:b4:9e:99:a8:46:fa:43:34:ab:73:9c:a3:0a:f4:3f:30:5f:
         b6:02:7e:8c:f7:4c:83:33:d7:b5:4f:31:36:18:a2:f4:a7:5a:
         a6:cf:e9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:50 2025 by rpki-client