Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e382e302f32312d3231203d3e20323632373937.roa
File:                     3138362e3233372e382e302f32312d3231203d3e20323632373937.roa (raw, json)
Hash identifier:          7lVpWXGvx8MWQrj00CgM+1jthztDaKB7lIPIHZ/WFrY=
Subject key identifier:   2D:88:9B:D5:84:3C:5E:0B:CE:A5:73:44:EC:D9:15:9F:F4:30:5F:F7
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       7162C37CC2595F6B159D795423B116775D039450
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e382e302f32312d3231203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:17 +0000
ROA not before:           Thu 23 Oct 2025 14:08:17 +0000
ROA not after:            Thu 22 Oct 2026 14:13:17 +0000
asID:                     262797
IP address blocks:        186.237.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:62:c3:7c:c2:59:5f:6b:15:9d:79:54:23:b1:16:77:5d:03:94:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:17 2025 GMT
            Not After : Oct 22 14:13:17 2026 GMT
        Subject: CN=2D889BD5843C5E0BCEA57344ECD9159FF4305FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:07:27:a1:46:0c:d7:bb:6a:08:28:11:6c:4c:
                    5d:92:22:c8:df:e0:fa:49:12:a5:7f:34:2a:00:a6:
                    f7:63:ef:19:09:b8:0e:80:67:53:5c:d5:d8:af:62:
                    5b:70:e2:91:21:48:9a:fe:b8:fe:31:86:8a:b8:20:
                    c0:1d:36:73:a8:98:c7:6e:a3:04:7d:cd:9e:da:89:
                    c6:a9:44:e5:0f:5f:a2:96:3e:d9:17:9c:92:59:ad:
                    d7:20:0a:6d:83:5c:46:3a:d5:89:65:95:12:8f:c5:
                    6d:b9:1f:4e:be:b0:92:98:46:a8:18:66:c1:e1:df:
                    c2:f6:0d:69:cb:c4:79:fb:05:7d:b4:74:43:59:5d:
                    4e:a9:62:11:d5:45:74:8e:c4:4f:d7:95:dc:aa:03:
                    73:11:82:18:61:ae:4f:67:58:da:a4:64:77:f5:24:
                    e9:24:ca:99:25:e2:26:66:f5:d6:63:b7:29:99:6e:
                    39:03:e2:4e:e2:bd:59:34:b1:9c:ba:12:2c:5e:a6:
                    e2:63:85:18:37:6a:d9:fc:8b:fa:77:be:d5:64:47:
                    e9:6a:5b:92:66:b9:0b:3f:de:02:48:d6:c0:46:7b:
                    86:74:dd:39:18:6b:c9:eb:46:a1:07:2e:47:8e:df:
                    29:26:47:81:5c:e8:71:30:17:7d:4b:5c:f3:74:9b:
                    85:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:88:9B:D5:84:3C:5E:0B:CE:A5:73:44:EC:D9:15:9F:F4:30:5F:F7
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e382e302f32312d3231203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:ff:cf:a6:4f:7a:18:e6:18:16:6b:66:da:d0:b8:da:de:26:
         74:dd:c4:69:5d:cb:93:6e:8b:87:16:d9:b0:9e:dd:92:e1:d7:
         16:ae:a7:4b:11:c9:27:47:a9:41:5d:05:7c:41:4d:fb:c4:f2:
         22:bd:df:a6:84:79:a7:6b:db:45:11:98:9a:42:a0:73:da:a3:
         88:93:ff:da:ab:83:07:1e:3a:a0:66:d9:b5:d9:3d:5a:15:65:
         25:9e:df:d5:38:c2:1d:29:3c:bc:04:4e:61:68:c8:53:48:65:
         28:9e:b5:d1:44:61:27:1e:ec:46:bc:2a:b1:64:6d:a6:b2:6c:
         5c:02:07:af:a4:50:59:5a:26:62:5a:43:fe:df:4c:c5:3c:08:
         53:ec:32:82:6b:fb:66:a3:4d:5a:49:5d:e8:ad:5c:a3:4b:13:
         17:6e:fb:6d:99:0d:45:06:48:af:5b:be:b8:77:9b:dc:27:36:
         88:04:f1:eb:bf:55:14:45:f6:dd:a8:6b:48:e8:27:28:5a:55:
         dc:90:0f:72:4c:66:eb:d4:f3:b4:c9:8b:14:3e:7b:7b:33:4a:
         d9:0f:f0:62:53:5e:a4:2f:99:16:59:63:b7:21:2e:8c:25:46:
         57:0f:b2:96:6b:0b:3e:4e:e6:ff:1a:a1:68:a1:e9:7d:0c:92:
         59:d7:3b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:48 2025 by rpki-client