Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33322e302f32302d3234203d3e203238323630.roa
File:                     3138372e39352e33322e302f32302d3234203d3e203238323630.roa (raw, json)
Hash identifier:          aEeRPTU9MMsoNjZ4MHFDDVhGJjPL8/DLn6hTIH4DDsY=
Subject key identifier:   82:D6:B0:5F:B2:64:F5:A7:25:D7:3E:6E:5F:F8:D1:7D:F0:40:2A:C0
Certificate issuer:       /CN=2A63119ED3171CA655D3DBACD89FA128C88760E9
Certificate serial:       25A7A5C3FDC24256F5A1EB0272009820AC5179A6
Authority key identifier: 2A:63:11:9E:D3:17:1C:A6:55:D3:DB:AC:D8:9F:A1:28:C8:87:60:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33322e302f32302d3234203d3e203238323630.roa
Signing time:             Wed 10 Sep 2025 18:49:01 +0000
ROA not before:           Wed 10 Sep 2025 18:44:01 +0000
ROA not after:            Wed 09 Sep 2026 18:49:01 +0000
asID:                     28260
IP address blocks:        187.95.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.crl
                          rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 04:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a7:a5:c3:fd:c2:42:56:f5:a1:eb:02:72:00:98:20:ac:51:79:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A63119ED3171CA655D3DBACD89FA128C88760E9
        Validity
            Not Before: Sep 10 18:44:01 2025 GMT
            Not After : Sep  9 18:49:01 2026 GMT
        Subject: CN=82D6B05FB264F5A725D73E6E5FF8D17DF0402AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:06:a3:a3:b6:77:47:8e:d0:0e:63:7f:82:
                    87:89:88:ed:19:76:37:48:b9:63:b0:d0:85:f9:8e:
                    50:5c:a1:2b:b7:ce:2b:75:fc:3b:a5:ca:89:14:ef:
                    9e:70:8b:25:d1:c1:a3:28:9e:42:48:2d:b2:5f:13:
                    10:5b:d2:96:e3:22:18:07:30:b5:6e:cd:5c:45:60:
                    19:0a:f0:3e:e0:bd:f8:c0:3a:01:65:5b:51:83:81:
                    3e:62:e1:89:d7:d4:4e:84:3f:c4:66:31:d2:52:3b:
                    20:dc:fd:5e:db:8a:9d:54:f4:a8:4d:de:9c:b8:c9:
                    98:c2:0b:14:cc:44:08:d6:89:56:a1:d1:ab:f3:b5:
                    42:b0:fa:f3:8d:98:50:30:33:10:13:f4:2b:c3:e4:
                    9a:5c:9c:e0:ba:35:74:3e:99:4d:f2:9d:2d:f1:77:
                    c0:85:1e:0d:6b:78:a2:2b:4c:8f:03:e0:a1:13:2e:
                    3f:31:76:86:b6:20:c4:96:e7:a8:74:78:39:b4:f8:
                    1c:ed:3a:e4:8d:cc:16:66:09:47:85:23:cd:13:4d:
                    fd:28:05:de:b5:a0:23:f5:89:09:1e:dd:89:9d:b3:
                    12:21:6b:7c:dc:f8:10:04:53:80:50:77:e9:38:c9:
                    e5:bc:95:80:dd:5f:cc:91:07:9a:de:8b:32:6d:6c:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D6:B0:5F:B2:64:F5:A7:25:D7:3E:6E:5F:F8:D1:7D:F0:40:2A:C0
            X509v3 Authority Key Identifier:
                keyid:2A:63:11:9E:D3:17:1C:A6:55:D3:DB:AC:D8:9F:A1:28:C8:87:60:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33322e302f32302d3234203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:05:e2:3c:5b:f7:e1:d1:90:10:86:0d:77:0a:a0:7c:54:b3:
         5a:87:15:1a:f9:2f:63:d9:d6:e4:03:a4:1d:49:fd:25:71:cc:
         f7:67:c4:a1:9a:91:d0:42:c2:0d:72:8f:3f:87:2d:ed:f2:fd:
         92:ad:4d:35:17:1d:d5:4b:08:16:76:e6:bc:80:80:d2:56:85:
         16:c3:5b:73:7f:05:9f:d5:fc:aa:fb:ef:9b:94:f7:2d:72:0a:
         a8:3a:64:3f:c6:0b:e9:56:61:60:01:3d:94:7d:d4:89:62:ab:
         98:bd:25:e7:83:1c:88:7e:68:27:4a:4f:f7:fc:67:72:a9:20:
         0d:f0:99:91:30:79:b0:f4:f9:54:96:a8:a9:09:d2:6a:b7:4c:
         f2:29:cf:dd:8a:5e:17:e9:77:d5:9f:09:ff:3f:df:84:eb:c1:
         4c:d9:57:cb:2c:64:ce:4b:f4:d1:95:d2:5b:1b:49:07:40:05:
         e1:fb:58:22:09:3c:80:9a:6c:ae:6d:1d:30:72:d9:e1:86:dc:
         75:a9:79:51:29:06:96:aa:ff:94:29:c9:76:a3:f7:ee:5b:d3:
         f0:2a:c0:2d:b9:5a:63:35:81:cd:bf:5a:b3:49:8f:f1:32:11:
         d9:a8:a6:06:98:9b:c1:26:06:bb:38:b3:68:c4:83:0b:b4:f9:
         aa:54:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:34:37 2025 by rpki-client