Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130312e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3130312e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          bsFQlG54KJfD7YjHhXyZcFra9wGEFd+3exxxlmA+tmM=
Subject key identifier:   3A:E5:9C:F4:49:3B:A2:91:16:B8:CF:10:D9:29:B7:10:5F:02:19:60
Certificate issuer:       /CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
Certificate serial:       29D46BF2D098F5EA8EA6E0D2A6002116E2873842
Authority key identifier: C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130312e302f32342d3234203d3e203533313533.roa
Signing time:             Thu 25 Sep 2025 13:35:24 +0000
ROA not before:           Thu 25 Sep 2025 13:30:24 +0000
ROA not after:            Thu 24 Sep 2026 13:35:24 +0000
asID:                     53153
IP address blocks:        186.209.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d4:6b:f2:d0:98:f5:ea:8e:a6:e0:d2:a6:00:21:16:e2:87:38:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
        Validity
            Not Before: Sep 25 13:30:24 2025 GMT
            Not After : Sep 24 13:35:24 2026 GMT
        Subject: CN=3AE59CF4493BA29116B8CF10D929B7105F021960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:ac:34:f4:71:7f:cb:90:8b:e5:89:94:7c:
                    dc:49:a2:46:d6:63:86:74:ea:ff:6d:6b:3e:07:ea:
                    87:b1:a2:bc:85:d9:53:0e:92:d1:43:26:a1:e8:e6:
                    3c:4c:0f:f5:03:5e:9c:75:75:71:55:61:50:9e:75:
                    25:6f:f9:82:a4:b8:13:7f:39:fb:a3:8c:15:cd:92:
                    ee:d3:c2:fc:22:cf:a1:2d:52:73:9f:46:b8:7b:b6:
                    0d:bd:13:30:0f:4f:9c:b3:0c:16:cc:68:b8:42:40:
                    d1:b0:47:06:63:e8:d2:f4:8e:d8:a1:32:5b:e2:48:
                    f5:4e:85:bf:5e:58:10:9e:dd:ed:4d:11:c9:de:31:
                    93:cd:e3:b2:b4:75:a7:15:27:ec:f9:a1:0f:18:62:
                    63:69:1e:68:78:ed:11:82:7a:8a:26:5e:85:80:15:
                    c0:0f:98:ca:10:17:9c:26:d4:2c:46:63:02:93:cd:
                    3e:e2:90:d8:7f:98:5a:a8:72:b4:9b:74:c3:8a:36:
                    06:11:71:84:fc:f9:71:e0:0f:31:9a:fd:ab:11:c9:
                    4b:70:33:4f:e7:fb:66:50:af:da:d0:f2:7f:96:8d:
                    bd:3b:47:37:ba:71:55:d7:b1:75:1e:3b:0a:82:e2:
                    ac:9d:f6:85:c4:12:c5:e7:c5:a9:27:ed:04:23:05:
                    07:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E5:9C:F4:49:3B:A2:91:16:B8:CF:10:D9:29:B7:10:5F:02:19:60
            X509v3 Authority Key Identifier:
                keyid:C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130312e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:d3:b8:cb:4a:93:2c:15:4d:4d:bd:3e:cf:19:6b:ba:38:1d:
         9f:8d:93:ff:6e:16:a0:73:9d:f4:4f:7a:e4:48:96:38:6f:ec:
         f2:e5:08:b7:29:dd:2f:96:c2:dd:d1:4c:da:5e:5d:6c:75:d5:
         6c:8f:58:af:8b:4c:5e:78:89:4e:41:14:79:c7:82:bf:f7:a5:
         05:92:f9:b3:b3:64:48:bf:d5:66:57:8a:3c:41:8d:ed:7e:29:
         ea:9b:25:47:ad:82:6c:4a:2c:00:4d:d5:40:d4:4a:06:0e:47:
         9a:39:5f:21:09:4e:aa:5c:89:53:97:06:c8:f4:17:00:36:0c:
         18:a0:4c:8e:c5:3f:a5:bc:aa:0c:66:8d:39:6d:db:fa:d8:1a:
         fe:75:7f:aa:25:09:cf:2f:83:ef:c2:b3:ea:fd:d6:a5:6b:00:
         c8:46:4c:f1:99:d3:7c:49:37:12:9c:10:5d:f7:68:35:ed:a7:
         e4:a9:10:2c:96:4c:cd:7b:c9:95:13:4d:0c:7c:47:b0:e1:a2:
         68:08:43:fa:f4:e9:5d:41:1c:19:35:14:ef:bb:ee:19:5d:fb:
         29:3e:5c:16:90:57:05:ac:f7:17:df:4a:47:d0:54:9f:3b:43:
         97:6c:ee:5e:ee:3d:f0:f1:28:cd:63:05:ed:92:5c:17:42:de:
         d0:ce:6b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:39 2025 by rpki-client