Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e31342e302f32342d3234203d3e20323632373937.roa
File:                     3138362e3233372e31342e302f32342d3234203d3e20323632373937.roa (raw, json)
Hash identifier:          gWb3eME0HQr59aWq5xmCWdPSKwuJsXPY4yepzA28pN4=
Subject key identifier:   70:C2:39:E0:B3:7D:5C:B5:86:BE:DB:54:31:AE:92:59:9E:F2:A3:02
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       3FF674A330823EE25B3AB8D686566D620859222A
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e31342e302f32342d3234203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:20 +0000
ROA not before:           Thu 23 Oct 2025 14:08:20 +0000
ROA not after:            Thu 22 Oct 2026 14:13:20 +0000
asID:                     262797
IP address blocks:        186.237.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f6:74:a3:30:82:3e:e2:5b:3a:b8:d6:86:56:6d:62:08:59:22:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:20 2025 GMT
            Not After : Oct 22 14:13:20 2026 GMT
        Subject: CN=70C239E0B37D5CB586BEDB5431AE92599EF2A302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a1:bd:65:01:4a:24:28:43:e0:22:41:30:57:
                    4b:33:66:49:9b:db:38:39:b8:04:9a:bd:04:a6:87:
                    00:47:b5:2d:da:b9:e2:6c:10:1e:b8:c9:d8:ec:52:
                    8c:9b:13:67:d0:e3:7d:11:49:ca:e0:0e:27:39:42:
                    61:7d:19:0b:c1:c9:08:56:36:43:27:70:e3:3a:81:
                    14:d1:eb:2e:09:d7:de:f2:64:d4:9a:50:08:ae:cb:
                    b1:e2:e3:68:d5:f1:4e:74:5e:72:b8:46:cb:a9:bb:
                    44:45:27:e6:be:ba:1a:c2:01:3a:f1:85:d3:9f:94:
                    9b:fd:b6:53:5f:ff:bb:d4:bb:0c:b2:34:1a:76:f8:
                    0b:24:56:3f:c5:d5:ed:91:92:5f:dd:52:56:21:ac:
                    22:80:70:0d:62:ff:de:a5:ee:2e:7e:e0:20:3a:4b:
                    37:24:95:77:26:cc:22:53:16:5c:7d:25:06:37:99:
                    66:ef:5b:b9:e3:ca:0d:e8:22:d6:41:fe:04:bf:f7:
                    2d:7c:c2:37:83:20:4e:92:dd:14:74:4e:d7:53:dc:
                    ff:90:a3:e7:fe:97:78:f1:94:ca:14:59:7b:50:d8:
                    48:51:62:86:48:79:59:28:5c:64:99:1b:fa:c4:06:
                    8d:c7:39:73:3c:91:15:bb:b2:66:35:f1:ca:02:e6:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C2:39:E0:B3:7D:5C:B5:86:BE:DB:54:31:AE:92:59:9E:F2:A3:02
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e31342e302f32342d3234203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:97:14:01:b4:a1:2b:5d:14:33:4f:d0:a4:28:81:d5:dc:84:
         37:25:42:1a:50:78:df:51:f7:f4:93:04:bd:a2:66:6c:ad:e2:
         1f:47:1b:13:82:ba:12:91:10:8d:52:96:fa:84:4a:f8:d9:47:
         40:3e:70:c9:30:46:a8:7e:76:9c:11:ae:85:dd:c4:f4:ef:0e:
         b9:21:9f:53:bc:4f:e7:64:f9:f6:9a:fd:81:57:38:4c:79:7f:
         b1:32:01:57:1c:72:9e:2e:17:53:20:02:14:74:61:c7:f3:c3:
         31:e3:4b:4c:4f:e5:17:2b:3b:86:8c:01:59:91:7c:27:78:ba:
         26:a3:1a:8b:75:09:a1:5d:8d:5a:1a:b3:00:aa:d9:b2:42:9c:
         86:5d:6e:09:76:f2:3c:af:7c:6c:e1:2c:88:c4:ef:94:69:31:
         b9:c8:2c:46:0a:2a:68:33:0c:43:2e:c4:ed:ab:7a:06:0a:07:
         39:db:cc:fe:89:fc:83:5f:14:3d:9b:62:93:82:ae:f2:52:39:
         51:06:37:9f:16:6d:46:43:60:64:20:bf:79:7b:98:f4:40:da:
         01:9c:b5:ce:2d:bc:f0:77:b8:dc:86:d7:84:88:18:9b:30:48:
         2c:5b:50:68:8b:df:9a:f6:e4:eb:66:c9:d4:55:35:78:05:48:
         6a:4b:73:81
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUP/Z0ozCCPuJbOrjWhlZtYghZIiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYyQ0RBNEFFNEI1Q0FENzNCMDY4Q0Y2MUQyRUU4MkNC
RTkwQzIwQjAeFw0yNTEwMjMxNDA4MjBaFw0yNjEwMjIxNDEzMjBaMDMxMTAvBgNV
BAMTKDcwQzIzOUUwQjM3RDVDQjU4NkJFREI1NDMxQUU5MjU5OUVGMkEzMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoob1lAUokKEPgIkEwV0szZkmb
2zg5uASavQSmhwBHtS3aueJsEB64ydjsUoybE2fQ430RScrgDic5QmF9GQvByQhW
NkMncOM6gRTR6y4J197yZNSaUAiuy7Hi42jV8U50XnK4Rsupu0RFJ+a+uhrCATrx
hdOflJv9tlNf/7vUuwyyNBp2+AskVj/F1e2Rkl/dUlYhrCKAcA1i/96l7i5+4CA6
SzcklXcmzCJTFlx9JQY3mWbvW7njyg3oItZB/gS/9y18wjeDIE6S3RR0TtdT3P+Q
o+f+l3jxlMoUWXtQ2EhRYoZIeVkoXGSZG/rEBo3HOXM8kRW7smY18coC5rvDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcMI54LN9XLWGvttUMa6SWZ7yowIwHwYDVR0j
BBgwFoAUpizaSuS1ytc7Boz2HS7oLL6QwgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1lwUHNCdEV0YTlKTDhTMlNnb1Ruejl2Mnk0QzU2Rkg4OWJXZ1ZCRlRO
UFMvMi9BNjJDREE0QUU0QjVDQUQ3M0IwNjhDRjYxRDJFRTgyQ0JFOTBDMjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MkNEQTRBRTRCNUNBRDcz
QjA2OENGNjFEMkVFODJDQkU5MEMyMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NZcFBzQnRFdGE5Skw4UzJTZ29Ubno5djJ5NEM1NkZIODliV2dWQkZUTlBTLzIv
MzEzODM2MmUzMjMzMzcyZTMxMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC67Q4wDQYJKoZIhvcNAQELBQADggEBALSXFAG0
oStdFDNP0KQogdXchDclQhpQeN9R9/STBL2iZmyt4h9HGxOCuhKREI1SlvqESvjZ
R0A+cMkwRqh+dpwRroXdxPTvDrkhn1O8T+dk+faa/YFXOEx5f7EyAVcccp4uF1Mg
AhR0YcfzwzHjS0xP5RcrO4aMAVmRfCd4uiajGot1CaFdjVoaswCq2bJCnIZdbgl2
8jyvfGzhLIjE75RpMbnILEYKKmgzDEMuxO2regYKBznbzP6J/INfFD2bYpOCrvJS
OVEGN58WbUZDYGQgv3l7mPRA2gGctc4tvPB3uNyG14SIGJswSCxbUGiL35r25Otm
ydRVNXgFSGpLc4E=
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:45 2025 by rpki-client