Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39302e302f32332d3233203d3e20323632343434.roa
File:                     3138372e36332e39302e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          2APSQfjWIY0XIGg6Y+nxGAncFERIgp5ZjOY6m5hU5kc=
Subject key identifier:   37:10:DC:F0:61:35:57:78:13:07:CF:D8:E2:E3:D1:14:F2:5A:B8:63
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       7B297976FCE5601E202B86117ECFCC46DFB8DDBD
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39302e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 09 Jul 2025 14:04:43 +0000
ROA not before:           Wed 09 Jul 2025 13:59:43 +0000
ROA not after:            Wed 08 Jul 2026 14:04:43 +0000
asID:                     262444
IP address blocks:        187.63.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:29:79:76:fc:e5:60:1e:20:2b:86:11:7e:cf:cc:46:df:b8:dd:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jul  9 13:59:43 2025 GMT
            Not After : Jul  8 14:04:43 2026 GMT
        Subject: CN=3710DCF0613557781307CFD8E2E3D114F25AB863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:89:94:90:21:30:06:1d:16:4c:c9:ff:bb:
                    7a:94:62:18:04:84:0c:a2:17:65:ac:38:7f:9b:9c:
                    44:1a:45:7f:a6:01:9d:34:90:96:ec:fd:72:d3:9f:
                    ad:20:2c:42:29:27:76:f2:e0:c5:44:f6:11:18:10:
                    ac:49:a6:60:ec:c3:60:49:b4:82:37:14:78:e0:3d:
                    32:6f:df:4b:28:20:e5:ef:82:a5:77:1d:72:59:53:
                    be:5e:14:e0:cf:0d:45:81:93:17:47:35:07:09:65:
                    ad:0f:0e:1f:02:e8:8b:8a:b7:f4:50:bb:f5:30:cf:
                    e6:83:e1:48:f7:92:e6:f3:95:c3:d6:10:75:7f:a3:
                    e8:60:f1:e7:b3:9d:13:00:ba:ed:08:7a:f9:54:c2:
                    46:58:28:e7:65:46:d6:16:e2:00:60:32:b1:5b:9b:
                    31:78:66:64:0a:b7:74:a9:ee:5b:d6:a3:e3:95:80:
                    a2:49:7a:f3:8b:bf:da:10:59:ad:b9:7b:35:0c:54:
                    7f:30:43:d8:98:aa:ef:ba:2e:9c:ac:5b:c4:f1:f7:
                    50:58:b3:b1:b7:e4:7b:73:ae:f8:a2:1d:9f:4a:8a:
                    01:36:f3:99:a5:8c:25:4e:4b:e9:44:b6:2c:56:1d:
                    60:c3:5a:57:9d:b6:4c:4c:c4:10:87:e3:9f:d3:1b:
                    97:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:10:DC:F0:61:35:57:78:13:07:CF:D8:E2:E3:D1:14:F2:5A:B8:63
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39302e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:9c:f5:72:5e:09:08:3c:ce:80:66:a3:b1:ea:27:a8:a9:02:
         a3:68:9c:38:4b:2a:46:e9:23:1f:4a:52:48:a6:38:b3:30:8d:
         62:ce:7a:da:a5:da:b8:c1:de:6a:06:23:00:17:2f:47:66:3b:
         d7:24:59:22:67:bf:48:e8:e1:1d:53:b9:01:ca:0e:1c:ed:e4:
         14:98:1b:71:94:4c:56:ac:9c:17:0e:d9:68:3a:37:c6:9b:b1:
         45:84:45:29:ae:9f:66:8f:72:03:6f:16:1e:b4:1e:70:a3:15:
         ae:c3:12:7e:af:b7:44:df:e3:7b:8a:ac:a4:a5:cd:06:57:80:
         9c:1a:9c:9c:e9:db:0f:37:59:93:96:b1:66:34:08:a1:e0:9d:
         6b:79:30:8c:b9:c0:a7:63:c3:3d:d7:91:47:10:3c:1e:74:4c:
         26:34:93:89:11:d6:c1:03:c3:ca:22:8a:bb:f3:7e:b9:62:1e:
         1a:b1:49:01:cc:22:c0:d6:1e:f5:e6:d0:51:e0:06:04:c5:3a:
         bd:66:99:63:2a:b5:5f:e1:cd:ae:a3:5f:97:a4:42:f5:7d:24:
         1b:f8:1c:3e:68:9b:af:ab:6f:d0:1a:e6:e0:04:f3:36:d0:bf:
         df:27:2e:8b:f1:77:44:cd:af:43:bd:68:67:7f:4f:40:b8:65:
         9a:ee:70:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:57:15 2025 by rpki-client