Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/3230312e3138322e3138362e302f32332d3233203d3e20323637353438.roa
File:                     3230312e3138322e3138362e302f32332d3233203d3e20323637353438.roa (raw, json)
Hash identifier:          +zdhNo049oXBaoNvrbsHwG/dTmpVC4L1rolfSOS4uEE=
Subject key identifier:   00:20:4C:BD:CF:DB:11:EE:82:E8:0E:60:A4:8D:91:74:66:F0:F2:54
Certificate issuer:       /CN=E36722E12D3D74530F7B920A984B1FD5187151B6
Certificate serial:       7B223AD78147DB0749C0684886A10E3846C7C6D4
Authority key identifier: E3:67:22:E1:2D:3D:74:53:0F:7B:92:0A:98:4B:1F:D5:18:71:51:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E36722E12D3D74530F7B920A984B1FD5187151B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/3230312e3138322e3138362e302f32332d3233203d3e20323637353438.roa
Signing time:             Wed 29 Oct 2025 15:05:21 +0000
ROA not before:           Wed 29 Oct 2025 15:00:21 +0000
ROA not after:            Wed 28 Oct 2026 15:05:21 +0000
asID:                     267548
IP address blocks:        201.182.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/E36722E12D3D74530F7B920A984B1FD5187151B6.crl
                          rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/E36722E12D3D74530F7B920A984B1FD5187151B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E36722E12D3D74530F7B920A984B1FD5187151B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 02:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:22:3a:d7:81:47:db:07:49:c0:68:48:86:a1:0e:38:46:c7:c6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E36722E12D3D74530F7B920A984B1FD5187151B6
        Validity
            Not Before: Oct 29 15:00:21 2025 GMT
            Not After : Oct 28 15:05:21 2026 GMT
        Subject: CN=00204CBDCFDB11EE82E80E60A48D917466F0F254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:1e:27:a3:02:d3:31:ff:f8:de:d6:2b:bf:
                    ab:ee:61:f4:5e:c8:26:62:8d:bb:85:05:ab:d3:0e:
                    d5:94:52:9e:12:9e:4f:8a:8c:f2:76:01:f7:2a:49:
                    4e:0b:58:28:43:37:f1:16:71:7d:c4:6f:14:37:54:
                    22:3b:0b:59:a1:b1:b1:d9:e7:f9:3a:6a:66:1f:59:
                    b5:4c:d2:f4:e1:95:a9:ad:22:c1:ce:91:56:00:f8:
                    3d:e0:be:8c:f8:f4:05:2e:63:59:fc:5b:18:bb:6a:
                    8f:41:7c:b4:ab:ae:ca:70:77:8c:35:6a:3d:87:aa:
                    91:df:02:c6:b1:0d:26:88:17:c1:39:27:00:d6:8a:
                    0c:4c:15:23:68:e6:f6:ef:b1:7d:bf:45:92:4e:87:
                    bc:41:4a:c2:e4:4b:59:be:da:10:42:ea:0a:02:72:
                    cc:5d:91:4c:cb:df:aa:31:2f:24:60:ad:6d:40:a1:
                    c6:b1:b1:55:25:4e:cf:d9:da:a0:68:4b:a2:c7:3b:
                    54:bc:78:4f:06:bf:d5:07:12:36:3a:69:fd:d0:cc:
                    29:80:4b:e7:dc:34:c8:7e:6b:43:fa:6e:6b:f5:ae:
                    b1:58:ee:48:48:73:aa:e3:06:dc:3f:4f:3e:e4:b1:
                    fc:9e:8b:6d:db:bd:5f:66:ff:05:2e:77:85:e0:32:
                    43:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:20:4C:BD:CF:DB:11:EE:82:E8:0E:60:A4:8D:91:74:66:F0:F2:54
            X509v3 Authority Key Identifier:
                keyid:E3:67:22:E1:2D:3D:74:53:0F:7B:92:0A:98:4B:1F:D5:18:71:51:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/E36722E12D3D74530F7B920A984B1FD5187151B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E36722E12D3D74530F7B920A984B1FD5187151B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/3230312e3138322e3138362e302f32332d3233203d3e20323637353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:52:61:8b:e6:5f:8f:fe:c0:6c:a5:32:9b:67:3d:53:89:5c:
         93:40:61:5f:0d:9f:b9:f1:5b:24:5e:c8:02:43:f6:e2:3a:5f:
         2b:3e:b7:82:0b:2d:0a:bd:ae:be:b7:81:fd:88:14:49:c7:0b:
         72:79:64:1c:11:a7:1c:99:6e:41:f6:61:6d:04:48:9e:ab:ac:
         f2:30:d9:0b:e9:4a:e6:3d:f2:e7:43:f1:59:b8:f5:94:3a:05:
         96:be:d5:02:81:cf:9f:65:9a:bc:98:85:fc:62:dc:ce:40:11:
         dc:e4:40:68:6d:28:9f:2f:2f:43:b3:2e:c3:e4:5f:e1:71:8c:
         c3:dc:7b:26:9f:28:39:b6:3c:ae:9d:aa:9f:f2:a8:17:26:60:
         dc:64:61:d2:4d:e5:ed:bb:53:df:66:6a:2e:b1:25:1c:5f:2e:
         0d:86:ea:9c:15:86:cc:64:c6:38:2e:f7:a3:e2:a5:c8:ee:d8:
         f2:11:7d:44:c0:14:38:34:88:f8:51:41:1c:68:7f:02:dd:ea:
         78:2a:87:e8:eb:7c:dd:5c:87:f3:c7:ac:b7:51:69:78:31:ae:
         32:da:94:f3:fe:e4:5b:ed:f5:d0:0c:6b:70:ee:1c:b6:8b:82:
         1f:80:c3:19:e2:f6:4f:8c:56:a1:ad:9e:69:a0:4e:db:eb:d7:
         f9:44:a4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:41:42 2025 by rpki-client