Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e31302e302f32342d3234203d3e20323632373937.roa
File:                     3138362e3233372e31302e302f32342d3234203d3e20323632373937.roa (raw, json)
Hash identifier:          Z7WbCPRxzLNnliay0sUhOExpYV21mRjtndFmjz5g0z4=
Subject key identifier:   E4:F6:D4:A1:43:EC:0A:2B:08:6C:2F:68:65:5A:68:CC:57:F2:59:A9
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       561F6BF5DE0CC9D995307BA67C5DE77D4F8DFDC3
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e31302e302f32342d3234203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:12 +0000
ROA not before:           Thu 23 Oct 2025 14:08:12 +0000
ROA not after:            Thu 22 Oct 2026 14:13:12 +0000
asID:                     262797
IP address blocks:        186.237.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1f:6b:f5:de:0c:c9:d9:95:30:7b:a6:7c:5d:e7:7d:4f:8d:fd:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:12 2025 GMT
            Not After : Oct 22 14:13:12 2026 GMT
        Subject: CN=E4F6D4A143EC0A2B086C2F68655A68CC57F259A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5e:eb:45:f8:c6:4f:1a:b8:47:c4:1f:bc:20:
                    48:d0:f3:a0:ae:de:22:69:c0:a9:31:cc:e6:dc:ec:
                    9d:c3:39:2e:9b:5a:6c:f1:4b:af:4a:74:db:74:ca:
                    ed:c3:cd:3e:40:35:b5:f2:41:df:88:85:27:8a:b3:
                    f6:15:08:ab:eb:5d:c6:bb:6e:43:bd:7d:31:3a:88:
                    e7:8c:c8:8c:81:33:88:62:9a:bf:8d:9b:f7:e5:9f:
                    7d:ce:02:cd:cd:c2:df:72:b5:cf:d3:ce:c8:2a:fa:
                    da:1f:a5:f8:1e:ed:16:fd:f7:85:96:23:4f:25:dd:
                    53:17:33:99:08:fb:5c:70:6d:fa:4b:75:55:83:0b:
                    fa:bf:bc:5b:44:08:fb:dc:c0:3c:05:b8:bb:16:a1:
                    ed:09:05:db:ce:09:1b:34:96:9e:be:17:38:85:86:
                    e3:82:91:7e:3d:fa:ad:43:71:df:3b:f5:d8:d4:30:
                    ce:00:14:d3:9f:bc:fc:b0:20:a9:3b:ae:08:ad:3e:
                    fc:d6:67:1b:60:9f:fb:ca:76:0d:aa:45:ee:80:3e:
                    24:fe:2e:b5:07:4a:90:e8:2a:ca:ff:3e:4d:0c:a4:
                    96:3b:5b:f4:0a:3d:65:b0:74:f0:70:6f:28:b2:fe:
                    fd:ad:51:45:ce:02:06:04:75:3f:d7:f3:23:c7:f1:
                    cc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F6:D4:A1:43:EC:0A:2B:08:6C:2F:68:65:5A:68:CC:57:F2:59:A9
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e31302e302f32342d3234203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:d1:7b:29:4d:6b:22:6d:3c:42:e0:a8:56:24:2b:1e:76:5c:
         0c:36:5d:3c:3b:58:5d:b0:c4:90:c5:3c:be:d1:15:64:10:94:
         1e:44:76:86:8f:e3:03:4f:b9:da:6d:58:7d:93:15:02:c2:81:
         24:0a:0a:c7:a2:19:f1:ac:03:42:c3:77:2f:12:87:8c:f8:7e:
         0d:7c:0f:1e:75:ec:9d:39:03:08:26:dd:40:36:6d:75:d5:ec:
         f3:de:36:e1:c7:eb:56:8c:59:c8:4d:d3:48:e7:c8:a7:16:02:
         be:73:60:32:4d:71:53:21:44:b5:41:f4:be:9b:ec:c8:44:4b:
         0d:f1:f8:61:5f:5f:53:2d:f9:6b:8f:6a:27:ea:17:b5:0a:5b:
         3d:56:ff:9a:69:48:40:fe:97:8e:26:52:61:61:2d:73:21:bf:
         b1:6e:0a:67:06:12:ff:db:c5:63:4a:ef:19:5c:54:d0:9b:02:
         ae:6b:46:48:7f:15:dc:6c:cd:57:4a:be:a5:a1:5d:f4:66:c1:
         05:7d:7a:65:76:ef:88:2c:ec:e9:ee:79:1e:4b:23:6c:c3:79:
         35:0b:93:ae:5e:0c:6d:f8:33:f1:ef:d6:a3:b0:3e:c0:93:89:
         25:9d:85:90:ed:98:5f:a7:2f:22:f9:ce:01:05:ff:56:3a:0a:
         71:5e:4a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:45 2025 by rpki-client