Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35362e302f32322d3234203d3e20323731373030.roa
File:                     3138392e38342e35362e302f32322d3234203d3e20323731373030.roa (raw, json)
Hash identifier:          WsRvWAKCQNOIsm0C1lsBVbOZENPusbXf1xIpoJHlHhA=
Subject key identifier:   7B:2E:D8:DC:74:EF:3D:58:74:DC:0D:E1:E0:AE:ED:5C:49:76:99:C0
Certificate issuer:       /CN=9AF6029EF76F1AD94520E558CCE3B70BDEE40E73
Certificate serial:       5764CAE03A3C56CAD302A92F1B87D986076CCA1F
Authority key identifier: 9A:F6:02:9E:F7:6F:1A:D9:45:20:E5:58:CC:E3:B7:0B:DE:E4:0E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35362e302f32322d3234203d3e20323731373030.roa
Signing time:             Wed 29 Oct 2025 20:41:34 +0000
ROA not before:           Wed 29 Oct 2025 20:36:34 +0000
ROA not after:            Wed 28 Oct 2026 20:41:34 +0000
asID:                     271700
IP address blocks:        189.84.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.crl
                          rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 07:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:64:ca:e0:3a:3c:56:ca:d3:02:a9:2f:1b:87:d9:86:07:6c:ca:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF6029EF76F1AD94520E558CCE3B70BDEE40E73
        Validity
            Not Before: Oct 29 20:36:34 2025 GMT
            Not After : Oct 28 20:41:34 2026 GMT
        Subject: CN=7B2ED8DC74EF3D5874DC0DE1E0AEED5C497699C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:a8:c3:d6:2c:cb:08:3c:a9:80:4f:cc:d0:
                    99:d6:8b:4c:e3:9d:a9:e5:14:b8:f7:4f:a9:85:fc:
                    07:3d:2d:0f:34:63:43:af:5a:23:1e:af:19:0d:f3:
                    00:33:1b:d0:16:15:69:0e:da:f3:2d:b4:a4:12:b3:
                    18:6d:68:89:a0:22:bd:76:3f:0c:03:98:0e:7c:1e:
                    1c:81:cf:36:31:c2:86:06:05:b1:6b:49:d1:94:73:
                    10:c6:e5:3c:31:36:7f:6a:69:1b:03:5e:64:d0:51:
                    63:48:bb:f0:b9:e7:d9:f4:cb:72:59:db:79:56:4f:
                    95:6d:19:f7:f5:cc:00:23:56:7b:ab:93:b4:7c:08:
                    5b:f7:e9:17:ae:22:e5:e9:d4:57:e0:a7:92:f8:1f:
                    a8:4f:ec:4e:ca:fe:c6:15:cd:95:18:f2:8f:42:f6:
                    8c:64:89:b7:f7:bc:26:ba:ea:28:58:e5:9c:75:03:
                    21:6b:ce:c7:9c:0b:55:ea:1a:4c:43:f6:20:4e:3e:
                    3c:31:92:81:d9:53:02:0b:54:6c:47:8c:09:34:92:
                    0b:e0:42:4a:6f:64:87:e9:d8:94:bb:bf:5a:7b:54:
                    82:34:26:0c:bb:db:09:3e:90:72:55:8f:f8:1d:c9:
                    77:65:e0:62:eb:35:dd:3f:1e:e6:ae:2d:fd:29:f1:
                    b7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2E:D8:DC:74:EF:3D:58:74:DC:0D:E1:E0:AE:ED:5C:49:76:99:C0
            X509v3 Authority Key Identifier:
                keyid:9A:F6:02:9E:F7:6F:1A:D9:45:20:E5:58:CC:E3:B7:0B:DE:E4:0E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35362e302f32322d3234203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:5d:b0:39:4b:89:a0:07:91:67:db:e4:ea:be:24:14:7a:f2:
         5e:1f:3e:a5:a3:39:5c:88:f0:19:a9:53:2b:8d:24:70:c1:fb:
         35:36:cc:20:d1:79:69:c4:9b:6f:37:93:fc:d3:eb:e8:3e:9a:
         b0:c7:01:74:0c:4a:a3:ab:c6:9b:fe:64:4b:91:c7:d1:46:6c:
         5a:a2:3e:b2:af:41:3d:3e:05:ce:88:04:2e:da:c4:68:17:7f:
         a5:5c:c6:82:74:de:ca:6a:80:28:27:e3:e6:40:b2:70:a7:9c:
         d9:39:bd:bd:8e:50:92:59:83:b8:e3:b9:17:97:d3:fb:4b:0f:
         05:d3:8d:9b:c7:7a:1a:34:2a:62:fb:82:c9:d4:86:c7:a4:49:
         04:08:4c:29:9b:54:f0:3f:b6:0d:89:38:6a:1e:17:5d:5d:ec:
         e7:11:fe:d4:ae:03:77:ce:37:bf:de:c0:cc:35:47:85:cd:3b:
         6b:9d:4c:d1:c4:77:96:2a:62:6f:19:5d:1e:61:e1:33:a3:11:
         e0:2e:f9:6a:61:6c:72:f9:3e:27:60:ae:4d:aa:1b:76:4b:06:
         6d:bd:c3:cf:af:68:62:41:73:e2:05:ab:0b:7b:2f:b4:ba:dd:
         49:51:11:b8:7b:b7:b6:af:26:dd:2d:a5:05:fb:49:96:9b:ba:
         d2:91:d5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:26:47 2025 by rpki-client