Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e342e302f32322d3232203d3e20323632373937.roa
File:                     3138362e3233372e342e302f32322d3232203d3e20323632373937.roa (raw, json)
Hash identifier:          F6dadAMCow7kpjfuuquGskQN7aEZ669GsRjqt+q0Bng=
Subject key identifier:   E6:CF:ED:60:2A:19:AD:A1:66:57:BC:0D:F4:42:52:55:2F:58:8D:6E
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       17AF6E35C2183A074CB0B2A7150EB9A73B484AB0
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e342e302f32322d3232203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:21 +0000
ROA not before:           Thu 23 Oct 2025 14:08:21 +0000
ROA not after:            Thu 22 Oct 2026 14:13:21 +0000
asID:                     262797
IP address blocks:        186.237.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:af:6e:35:c2:18:3a:07:4c:b0:b2:a7:15:0e:b9:a7:3b:48:4a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:21 2025 GMT
            Not After : Oct 22 14:13:21 2026 GMT
        Subject: CN=E6CFED602A19ADA16657BC0DF44252552F588D6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:9b:c7:06:ce:ba:20:ee:f7:88:1c:f7:50:09:
                    88:79:d4:8d:51:10:e6:a8:de:f3:f8:3e:8e:d2:5c:
                    8e:e4:b3:b8:73:76:f1:21:99:52:20:3e:1c:c9:ec:
                    51:44:e4:1d:9a:a7:01:c4:85:c5:5e:e8:71:59:ab:
                    cd:c9:d5:77:80:76:3d:c7:a3:94:b7:31:88:bf:f5:
                    37:e3:2b:53:eb:43:5e:14:e7:7a:83:cd:23:51:05:
                    cd:fb:a8:be:24:be:85:18:34:7f:d5:ed:a9:78:fd:
                    88:0a:54:ce:c7:58:39:75:fc:9a:b2:ce:d2:2d:70:
                    1c:6c:34:9c:30:27:d4:dd:fa:66:f9:0a:12:43:94:
                    f8:47:80:cc:7f:e0:28:ff:26:09:aa:11:35:9d:1d:
                    6f:6d:37:8f:e2:7e:d8:b5:85:0f:1b:91:16:6b:df:
                    1a:3d:68:d9:c4:9f:a9:72:ef:ca:a1:d0:9b:9c:66:
                    24:83:49:8f:3c:2c:c3:cf:e0:df:c1:ff:16:4e:80:
                    cc:fd:92:94:9e:7f:17:c1:11:2b:47:ce:59:65:05:
                    ce:63:fa:d4:2c:2d:d5:29:ec:2d:dc:43:ee:49:05:
                    48:f0:7f:8e:e2:f3:34:75:3b:28:a9:dd:b0:b3:2c:
                    f8:d3:b5:bf:6a:1d:4a:42:4f:bd:9f:26:16:5c:52:
                    51:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CF:ED:60:2A:19:AD:A1:66:57:BC:0D:F4:42:52:55:2F:58:8D:6E
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e342e302f32322d3232203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:21:44:68:6a:5c:13:0e:f4:b8:14:d7:43:18:4f:dc:fb:bc:
         e2:79:94:94:2d:53:e4:28:cc:67:07:53:75:64:8d:a1:a8:84:
         48:a8:fd:d1:07:1b:40:f7:a0:3d:fb:53:cb:f4:cc:42:b2:60:
         3d:49:9c:37:10:29:96:d9:a7:34:f3:ef:9b:81:07:b1:31:94:
         3f:06:94:15:80:7d:58:53:de:68:36:9d:20:94:1f:b7:17:63:
         65:1c:7d:e7:c3:60:6d:a0:8a:1c:d1:67:a5:07:a6:43:f0:27:
         2a:89:68:8e:47:85:3e:59:ea:6d:5a:b5:d0:c3:ad:47:7a:c4:
         48:5f:b7:3f:78:f6:0e:26:d4:a4:fa:88:71:43:96:2b:87:f7:
         dc:eb:41:4d:54:64:b0:08:90:2d:5f:c3:b7:e0:bd:2d:c3:2b:
         bb:02:03:59:e5:29:14:ad:91:d4:c8:2b:2f:60:1c:e9:8b:a7:
         23:72:3b:6b:55:d8:22:ce:d7:cc:d7:83:b3:b3:d1:2c:a7:7d:
         07:6f:47:2c:c2:0d:c7:05:de:43:4e:ab:a0:30:9c:cf:61:db:
         9e:90:65:11:98:58:31:bc:52:2b:13:6e:5a:de:fe:46:78:c6:
         e7:41:e7:60:5a:d0:15:a8:21:cf:ae:22:86:8d:60:5b:6d:a5:
         43:6d:c6:96
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUF69uNcIYOgdMsLKnFQ65pztISrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYyQ0RBNEFFNEI1Q0FENzNCMDY4Q0Y2MUQyRUU4MkNC
RTkwQzIwQjAeFw0yNTEwMjMxNDA4MjFaFw0yNjEwMjIxNDEzMjFaMDMxMTAvBgNV
BAMTKEU2Q0ZFRDYwMkExOUFEQTE2NjU3QkMwREY0NDI1MjU1MkY1ODhENkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5m8cGzrog7veIHPdQCYh51I1R
EOao3vP4Po7SXI7ks7hzdvEhmVIgPhzJ7FFE5B2apwHEhcVe6HFZq83J1XeAdj3H
o5S3MYi/9TfjK1PrQ14U53qDzSNRBc37qL4kvoUYNH/V7al4/YgKVM7HWDl1/Jqy
ztItcBxsNJwwJ9Td+mb5ChJDlPhHgMx/4Cj/JgmqETWdHW9tN4/ifti1hQ8bkRZr
3xo9aNnEn6ly78qh0JucZiSDSY88LMPP4N/B/xZOgMz9kpSefxfBEStHzlllBc5j
+tQsLdUp7C3cQ+5JBUjwf47i8zR1Oyip3bCzLPjTtb9qHUpCT72fJhZcUlH3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5s/tYCoZraFmV7wN9EJSVS9YjW4wHwYDVR0j
BBgwFoAUpizaSuS1ytc7Boz2HS7oLL6QwgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1lwUHNCdEV0YTlKTDhTMlNnb1Ruejl2Mnk0QzU2Rkg4OWJXZ1ZCRlRO
UFMvMi9BNjJDREE0QUU0QjVDQUQ3M0IwNjhDRjYxRDJFRTgyQ0JFOTBDMjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MkNEQTRBRTRCNUNBRDcz
QjA2OENGNjFEMkVFODJDQkU5MEMyMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NZcFBzQnRFdGE5Skw4UzJTZ29Ubno5djJ5NEM1NkZIODliV2dWQkZUTlBTLzIv
MzEzODM2MmUzMjMzMzcyZTM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMy
MzczOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCuu0EMA0GCSqGSIb3DQEBCwUAA4IBAQA4IURoalwT
DvS4FNdDGE/c+7zieZSULVPkKMxnB1N1ZI2hqIRIqP3RBxtA96A9+1PL9MxCsmA9
SZw3ECmW2ac08++bgQexMZQ/BpQVgH1YU95oNp0glB+3F2NlHH3nw2BtoIoc0Wel
B6ZD8CcqiWiOR4U+WeptWrXQw61HesRIX7c/ePYOJtSk+ohxQ5Yrh/fc60FNVGSw
CJAtX8O34L0twyu7AgNZ5SkUrZHUyCsvYBzpi6cjcjtrVdgiztfM14Ozs9Esp30H
b0cswg3HBd5DTqugMJzPYduekGURmFgxvFIrE25a3v5GeMbnQedgWtAVqCHPriKG
jWBbbaVDbcaW
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:35:31 2025 by rpki-client