Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3138362e3139342e302e302f32332d3233203d3e20323730383738.roa
File:                     3138362e3139342e302e302f32332d3233203d3e20323730383738.roa (raw, json)
Hash identifier:          IVV/yjcy/49y/Al6L8S/zkrPVlja55+OvjSsyQO2OFI=
Subject key identifier:   F3:BD:0A:1F:25:D3:EB:4F:C0:0F:95:1F:D7:56:C7:DD:1D:04:B8:67
Certificate issuer:       /CN=F323C8A2CD672636B55EC43AB298AEB42D849558
Certificate serial:       2437F5B520165F4F1C2D4FDF221BF7AE7A252A75
Authority key identifier: F3:23:C8:A2:CD:67:26:36:B5:5E:C4:3A:B2:98:AE:B4:2D:84:95:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F323C8A2CD672636B55EC43AB298AEB42D849558.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3138362e3139342e302e302f32332d3233203d3e20323730383738.roa
Signing time:             Tue 02 Sep 2025 22:20:04 +0000
ROA not before:           Tue 02 Sep 2025 22:15:04 +0000
ROA not after:            Tue 01 Sep 2026 22:20:04 +0000
asID:                     270878
IP address blocks:        186.194.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/F323C8A2CD672636B55EC43AB298AEB42D849558.crl
                          rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/F323C8A2CD672636B55EC43AB298AEB42D849558.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F323C8A2CD672636B55EC43AB298AEB42D849558.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 11:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:37:f5:b5:20:16:5f:4f:1c:2d:4f:df:22:1b:f7:ae:7a:25:2a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F323C8A2CD672636B55EC43AB298AEB42D849558
        Validity
            Not Before: Sep  2 22:15:04 2025 GMT
            Not After : Sep  1 22:20:04 2026 GMT
        Subject: CN=F3BD0A1F25D3EB4FC00F951FD756C7DD1D04B867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e7:01:31:3d:b6:06:f7:48:6c:72:3c:45:58:
                    71:f3:e5:26:7e:87:0a:2c:46:ac:aa:e1:05:56:05:
                    de:ec:43:7c:a9:45:d5:09:f1:49:c5:0a:36:b5:d6:
                    bd:39:5a:d6:0b:a3:e6:44:eb:1f:88:19:ba:db:23:
                    0d:90:c8:a1:50:3b:1b:76:90:5f:6d:06:d7:24:f8:
                    c8:57:9f:0a:71:37:02:b9:06:cf:2e:37:35:18:e0:
                    bf:1d:19:27:80:9f:23:1c:8a:e7:73:90:1c:81:20:
                    15:16:fa:b2:46:61:31:33:f7:85:f9:65:7a:b7:0e:
                    e1:3d:c0:87:e6:41:cf:56:01:62:88:24:ad:7e:07:
                    83:81:0b:45:96:8c:b1:a1:5d:41:65:2d:53:b2:54:
                    3e:eb:54:b5:14:da:58:47:b7:53:d9:e0:8b:66:8d:
                    2e:db:6b:42:bc:cd:fc:52:64:bc:b3:0a:df:7e:61:
                    77:bb:eb:ad:50:f7:9e:ec:6e:54:21:0b:24:59:9e:
                    cb:ad:ce:1b:69:7e:9f:a9:2a:c2:04:df:65:91:0a:
                    a2:29:1b:f7:c7:76:8a:7d:93:e1:48:3a:00:ec:97:
                    6b:0d:16:b6:35:9d:c7:2a:b5:7f:5d:2b:e8:c2:73:
                    4d:b3:c8:6e:89:ae:4e:c1:3a:1b:39:7c:d8:49:ce:
                    b4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BD:0A:1F:25:D3:EB:4F:C0:0F:95:1F:D7:56:C7:DD:1D:04:B8:67
            X509v3 Authority Key Identifier:
                keyid:F3:23:C8:A2:CD:67:26:36:B5:5E:C4:3A:B2:98:AE:B4:2D:84:95:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/F323C8A2CD672636B55EC43AB298AEB42D849558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F323C8A2CD672636B55EC43AB298AEB42D849558.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3138362e3139342e302e302f32332d3233203d3e20323730383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:c4:6d:5b:19:6f:2a:b3:7d:26:52:02:ac:6a:b6:09:37:01:
         b0:f0:b7:ee:1e:09:90:fd:58:34:9f:74:74:b0:f8:03:93:bf:
         c4:d6:6e:92:d4:13:d5:01:c0:70:67:29:b2:05:40:56:74:58:
         c3:62:63:39:69:00:10:56:81:86:7e:dd:d2:e1:81:90:7a:bb:
         fe:57:45:e8:44:cb:e7:be:5d:53:a1:b9:cd:03:ce:9b:f3:6c:
         f0:73:70:de:57:12:a4:0e:98:4b:69:80:e3:76:2a:7e:9c:ad:
         9b:f8:1b:d2:b8:4c:fa:d0:7a:13:c2:46:7a:54:fc:8f:d0:da:
         4a:d9:f8:38:41:38:10:92:b7:3e:bc:6e:0b:a0:3c:6a:aa:1a:
         8a:46:81:33:b1:7a:0a:4d:8f:d3:24:f4:76:e8:df:79:34:7d:
         b3:58:f1:4f:42:0c:c9:67:1b:10:95:43:5f:d6:ad:f9:a1:a1:
         43:80:81:38:16:c2:c6:27:7b:fe:70:e1:7b:5f:29:1b:99:58:
         25:9d:8a:d6:ce:b4:54:c9:92:e6:18:1b:6d:b1:7d:08:73:98:
         02:ec:0d:f5:84:50:74:c8:2b:a6:2d:25:72:89:3f:7c:5e:7a:
         7c:0a:98:ad:23:01:84:67:1a:b5:26:40:c5:87:75:d3:92:c8:
         aa:c4:f3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:46:12 2025 by rpki-client