Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e322e302f32332d3233203d3e20323632373937.roa
File:                     3138362e3233372e322e302f32332d3233203d3e20323632373937.roa (raw, json)
Hash identifier:          moO+cKSuOPs73USXdPkRgPE8JJ85BFY9bzF5BB+C9Fo=
Subject key identifier:   DF:4B:A3:BC:F8:71:CC:E9:0E:4D:BF:ED:BC:96:91:E1:7A:3F:1B:7F
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       4624D1F4795C3A614DEA7D112D15996A901A45F0
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e322e302f32332d3233203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:15 +0000
ROA not before:           Thu 23 Oct 2025 14:08:15 +0000
ROA not after:            Thu 22 Oct 2026 14:13:15 +0000
asID:                     262797
IP address blocks:        186.237.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:24:d1:f4:79:5c:3a:61:4d:ea:7d:11:2d:15:99:6a:90:1a:45:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:15 2025 GMT
            Not After : Oct 22 14:13:15 2026 GMT
        Subject: CN=DF4BA3BCF871CCE90E4DBFEDBC9691E17A3F1B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5a:c8:ab:9d:25:84:d1:ef:75:a9:ed:4d:cf:
                    b2:2c:07:fe:22:ac:b7:f8:a4:b8:52:f8:89:de:52:
                    de:a3:ae:cb:ed:c0:ca:41:8c:b4:fe:aa:d9:b1:01:
                    e9:85:5a:cc:fa:76:56:5b:d5:97:c5:5c:de:9d:e0:
                    4e:07:f7:68:92:90:f7:aa:76:c7:bd:1b:af:25:ea:
                    90:10:e9:80:7e:41:b6:96:39:f4:2d:23:a7:c0:fa:
                    04:52:bb:ed:f7:da:c7:8e:97:43:9b:6e:af:90:16:
                    17:d6:a5:d9:11:be:f9:f8:b1:15:18:fb:a4:2b:0a:
                    b8:f6:ef:9a:be:58:64:41:26:9f:a5:e2:f1:c1:c2:
                    46:9e:2f:54:c4:66:f3:09:c6:39:84:79:e7:1b:7d:
                    1d:67:78:57:e1:01:42:6e:8c:72:5b:fd:65:23:f0:
                    de:da:aa:de:6e:12:74:60:45:35:cc:cd:51:fe:66:
                    3e:fc:f2:04:35:eb:15:fd:ba:4c:3f:72:3f:4b:7d:
                    13:3f:88:45:17:6e:84:6b:32:7a:55:47:3a:80:a0:
                    03:3e:72:f5:39:d8:3f:30:ff:d3:e2:4b:a2:2b:61:
                    f6:7e:17:2c:d4:a9:71:44:ef:d7:58:a6:f2:c4:92:
                    e0:1b:5c:c9:03:a7:7c:5e:fa:7d:65:e7:3c:59:8d:
                    7f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4B:A3:BC:F8:71:CC:E9:0E:4D:BF:ED:BC:96:91:E1:7A:3F:1B:7F
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e322e302f32332d3233203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:d4:5a:b3:9b:c0:77:fb:3e:7b:46:04:4e:7b:11:61:f9:7e:
         ab:35:5e:00:57:fd:ea:cc:84:37:87:56:92:60:ae:2b:09:0e:
         68:c2:2a:04:d4:96:05:80:ce:ce:54:d8:b9:76:33:ec:f6:96:
         e7:83:0b:bd:8a:ad:90:30:e9:c8:17:46:df:f9:ec:ee:4a:27:
         e6:a9:5b:23:48:2c:6e:76:2c:83:53:ed:d4:18:77:20:ea:e3:
         f3:60:b5:8d:57:9a:88:ad:83:47:cc:5b:92:b2:c0:43:18:d6:
         13:e4:39:78:d8:15:8d:77:6f:5d:7a:ba:c6:60:3e:f1:4e:65:
         a0:f0:bd:80:4d:59:4c:b1:7d:94:95:f2:08:9e:f7:d3:f0:07:
         3b:84:5d:37:ef:46:fb:41:dd:95:b3:63:fc:f6:fc:b0:0e:d5:
         99:0b:2d:e4:25:1e:56:f0:0d:88:60:af:be:d9:af:bf:7f:b9:
         1d:cd:6a:b2:47:08:f5:01:78:3a:4b:a9:e5:d0:ec:2e:12:f2:
         88:bd:d6:dd:3b:f7:9e:be:b6:f6:70:bb:a0:86:9e:d3:b7:0d:
         f5:ef:04:34:e7:25:2f:f3:ca:43:2f:b3:7b:01:7f:29:a0:34:
         99:14:62:03:8e:ee:dd:41:9d:52:64:9d:df:f3:f2:37:37:27:
         d6:fb:91:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:35:29 2025 by rpki-client