Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e352e302f32342d3234203d3e20323632373937.roa
File:                     3138362e3233372e352e302f32342d3234203d3e20323632373937.roa (raw, json)
Hash identifier:          av7/1T+6qbXHIp7czeMGzuee0KZXqzymi0GxHcUDHhE=
Subject key identifier:   A2:4C:E1:B1:63:1B:A5:39:E2:D9:14:30:C5:D5:03:4B:32:93:95:0B
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       48FBDDAFCB8350248A5D3035B3AFAD4916B8C017
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e352e302f32342d3234203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:17 +0000
ROA not before:           Thu 23 Oct 2025 14:08:17 +0000
ROA not after:            Thu 22 Oct 2026 14:13:17 +0000
asID:                     262797
IP address blocks:        186.237.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:fb:dd:af:cb:83:50:24:8a:5d:30:35:b3:af:ad:49:16:b8:c0:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:17 2025 GMT
            Not After : Oct 22 14:13:17 2026 GMT
        Subject: CN=A24CE1B1631BA539E2D91430C5D5034B3293950B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f8:4f:e2:52:b8:76:7e:43:62:db:23:96:d6:
                    3e:78:f6:47:97:c2:bd:fe:9c:f7:1e:63:ff:7f:94:
                    3d:af:7f:d6:78:54:55:1b:f1:fa:a9:93:e1:2c:73:
                    7b:a5:bc:9c:f3:c3:46:69:99:27:f7:a5:24:89:0a:
                    80:79:9a:fa:11:06:83:21:6b:34:9f:0d:cd:72:aa:
                    b7:d2:ce:92:06:40:12:40:8f:69:66:91:77:5d:ce:
                    33:d1:36:72:bd:12:7e:8a:a3:96:b5:12:7b:53:9f:
                    9d:d7:36:c5:d5:69:16:ec:30:51:ae:a9:df:99:70:
                    89:ff:9f:8d:dc:fc:b8:d5:95:c3:7c:03:0c:9d:2b:
                    a4:f4:d1:e5:bb:f1:e0:d5:a2:e5:55:18:de:56:e2:
                    ba:c3:40:6b:5a:59:17:e9:24:67:aa:f1:8c:04:5f:
                    56:63:8e:5d:d1:ea:a9:42:bd:fa:0a:3b:88:b9:fb:
                    f3:e6:8d:2b:55:a0:c1:c8:ab:3e:98:cd:12:78:be:
                    70:c3:d0:fa:f5:2f:e0:78:9d:01:ba:e3:7c:f7:cc:
                    cb:43:72:b0:57:5d:02:69:18:78:eb:9f:5f:06:75:
                    fa:84:08:c1:a2:75:00:13:ec:3f:e7:5a:0e:b7:b0:
                    60:07:3f:2f:59:9b:1f:4c:9e:18:6a:f0:a6:b1:18:
                    6c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4C:E1:B1:63:1B:A5:39:E2:D9:14:30:C5:D5:03:4B:32:93:95:0B
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e352e302f32342d3234203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:61:a7:58:a6:b1:4f:65:73:f7:bd:bb:b4:2a:59:2c:fe:80:
         c3:53:f8:ac:62:54:4d:ce:a4:68:6f:08:28:9e:37:85:09:0f:
         36:6f:64:ea:45:c4:5d:f8:60:33:08:10:d3:7b:25:4a:31:4a:
         85:6a:43:a7:32:48:32:08:17:50:2f:61:7f:3e:5d:e9:13:9c:
         3a:d1:a8:b8:c5:ca:5c:74:f1:8b:af:4a:7f:d2:15:fd:88:7b:
         03:89:09:f5:8c:fd:b2:65:26:69:b4:1d:f8:a0:26:a7:0d:63:
         cd:ea:64:1d:df:2a:7d:9f:29:a1:c5:44:a6:58:06:a0:43:c7:
         bf:7c:ec:23:fb:e6:7e:db:dd:1b:ad:7b:fc:92:fd:82:2f:2a:
         78:44:d3:71:ab:8b:2e:72:74:f9:fc:72:b5:5b:ee:9d:7a:c7:
         96:fa:03:8e:a2:5d:0d:91:83:65:8c:22:cf:f6:68:81:89:cf:
         ab:5e:83:96:61:47:87:93:24:10:e1:b6:b1:b3:2d:41:fc:70:
         18:70:70:78:7b:9f:09:51:f5:7e:43:42:21:ad:1b:80:76:58:
         ff:94:5e:ca:79:db:32:bd:c7:b4:82:ab:02:34:35:ec:fc:84:
         cb:71:a9:0f:55:2f:f1:2a:81:b4:b1:c1:16:1c:f2:9b:c6:2d:
         c8:32:e4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:47 2025 by rpki-client