Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e31352e302f32342d3234203d3e20323632373937.roa
File:                     3138362e3233372e31352e302f32342d3234203d3e20323632373937.roa (raw, json)
Hash identifier:          0UoMkesPULydvE7J5M1Y3VFm9nY28GWE+X4XQImSczI=
Subject key identifier:   ED:7D:1B:A6:7C:74:84:90:E2:EA:7C:51:A0:B4:BE:CF:7F:40:35:83
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       3376736DD1D714C117585926A9806F5F07CD8B65
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e31352e302f32342d3234203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:15 +0000
ROA not before:           Thu 23 Oct 2025 14:08:15 +0000
ROA not after:            Thu 22 Oct 2026 14:13:15 +0000
asID:                     262797
IP address blocks:        186.237.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:76:73:6d:d1:d7:14:c1:17:58:59:26:a9:80:6f:5f:07:cd:8b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:15 2025 GMT
            Not After : Oct 22 14:13:15 2026 GMT
        Subject: CN=ED7D1BA67C748490E2EA7C51A0B4BECF7F403583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f4:00:8b:0b:a1:5c:ea:6c:0f:09:c3:36:48:
                    4c:97:ab:ce:12:6a:a9:77:06:ad:dd:0a:8a:cd:4b:
                    92:26:31:c9:6c:13:07:2b:af:71:d8:94:27:d5:21:
                    b0:54:57:b5:aa:ea:63:1b:8e:2a:96:93:c4:74:4a:
                    4f:e1:4d:b7:44:a0:72:be:eb:b0:0f:6e:b3:cb:bb:
                    a2:c4:52:b1:d5:79:07:11:91:22:e4:4b:90:c6:d0:
                    40:7c:77:12:04:70:29:d1:f0:0d:90:c3:ff:b2:53:
                    da:97:0e:fd:d2:29:5d:8f:42:cb:dd:c5:c7:19:23:
                    e3:ec:48:c1:92:f2:ca:c6:66:db:33:1d:47:c3:5a:
                    65:1e:15:b9:07:16:03:43:d6:e9:05:11:14:7d:bc:
                    9f:93:5f:09:9a:00:18:af:e1:55:35:21:ff:74:5e:
                    e8:cd:ad:7e:fd:88:d7:4c:bf:80:e1:5c:26:2d:f3:
                    f5:f1:ca:ea:a5:05:56:81:a0:e1:ea:dc:dc:66:6a:
                    3e:2d:6f:d2:da:21:21:ef:f2:2a:22:e7:9f:40:74:
                    ae:ce:c6:2f:2a:8c:75:3b:ad:86:f8:06:82:99:3a:
                    fd:51:1e:ac:5f:62:44:d8:ba:c9:48:16:4c:ec:01:
                    46:9f:d8:40:0b:de:16:eb:7e:5f:d3:b7:1a:8f:dd:
                    ea:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7D:1B:A6:7C:74:84:90:E2:EA:7C:51:A0:B4:BE:CF:7F:40:35:83
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e31352e302f32342d3234203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:8e:93:c2:28:7d:03:ca:45:69:83:59:59:c5:20:05:0a:71:
         71:ef:ef:fc:14:81:b8:2e:db:cb:0b:00:51:4e:2c:ca:9a:85:
         52:7b:92:1c:ae:fc:ce:2e:79:d4:ec:ef:dc:fe:e2:10:73:7c:
         58:fc:59:39:f2:25:68:d2:6e:c6:f9:3b:06:28:45:d3:22:ec:
         f9:6c:0d:7b:5b:e6:d9:b8:2f:f7:bd:d9:09:68:e5:43:9c:2e:
         fa:21:cd:71:98:5c:8e:03:8a:c5:7a:43:58:7c:a2:13:73:d3:
         38:d0:38:72:49:b4:5e:81:44:a7:85:dd:a0:58:ff:a5:17:81:
         77:80:fd:b1:b3:ce:fa:bb:eb:65:2a:da:06:11:04:e7:1d:e8:
         fe:35:8d:ad:c4:d6:a8:e9:85:49:29:00:08:f7:07:a2:44:71:
         ea:06:84:d4:53:fc:82:df:8d:0c:54:b0:11:6b:45:f0:ee:77:
         23:28:a3:49:7d:e2:84:1d:3b:46:b4:76:b7:3a:a8:2c:33:a8:
         6a:17:f6:ab:45:90:4b:10:b0:0e:1a:ce:fb:7a:e9:e0:23:14:
         0c:e9:24:19:aa:ea:f6:2e:90:52:3b:25:9c:a1:42:f0:cf:c8:
         aa:9d:02:ac:bc:59:63:33:25:11:5c:36:8d:87:4c:78:3d:35:
         e1:9e:2a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:44 2025 by rpki-client