Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130372e302f32342d3234203d3e203533313037.roa
File:                     3138362e3230392e3130372e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier:          ezomgIn+hd9za3tPZk0eaYjh4EfRZIw2fxSPT7N9mV4=
Subject key identifier:   63:FC:7A:D1:79:9A:18:0A:97:30:61:3A:1D:36:EC:37:B7:EB:CA:8B
Certificate issuer:       /CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
Certificate serial:       150F486CE2416E7CEDB09A4E645D71A87B7459E9
Authority key identifier: C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130372e302f32342d3234203d3e203533313037.roa
Signing time:             Thu 25 Sep 2025 13:35:22 +0000
ROA not before:           Thu 25 Sep 2025 13:30:22 +0000
ROA not after:            Thu 24 Sep 2026 13:35:22 +0000
asID:                     53107
IP address blocks:        186.209.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0f:48:6c:e2:41:6e:7c:ed:b0:9a:4e:64:5d:71:a8:7b:74:59:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
        Validity
            Not Before: Sep 25 13:30:22 2025 GMT
            Not After : Sep 24 13:35:22 2026 GMT
        Subject: CN=63FC7AD1799A180A9730613A1D36EC37B7EBCA8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6e:47:cb:28:02:37:94:5a:23:b7:18:0e:ce:
                    02:81:a8:2d:c1:ac:cd:ea:0e:b2:0b:00:81:be:9f:
                    43:17:1f:93:82:81:5b:2c:72:40:ff:ce:9a:94:f8:
                    a5:58:07:89:0a:83:b7:a2:f9:d5:98:71:68:94:df:
                    29:d3:9e:3f:5e:62:63:21:2b:52:a9:cb:05:ea:e1:
                    47:50:f9:a9:58:ab:46:04:e2:4a:ce:d3:39:05:d8:
                    c4:65:5e:45:a6:b4:4c:e2:4e:77:dd:12:bd:f1:e1:
                    9c:dd:22:99:09:80:46:86:2a:9e:24:f3:fb:f8:e4:
                    6d:e5:f6:ed:ba:d2:29:76:48:d3:a2:39:dc:ee:0c:
                    44:70:7a:00:84:c5:01:72:9f:7e:e3:4c:af:2b:50:
                    77:8a:27:02:5f:59:d3:92:9d:a1:49:01:39:68:18:
                    09:6b:af:65:61:1e:3a:d0:05:87:9f:80:6d:0c:64:
                    07:ce:65:05:62:55:6d:e4:90:0f:16:36:dd:21:95:
                    a7:d7:16:ee:bc:ba:15:08:3c:e1:e9:ca:1e:85:8a:
                    b9:01:e2:ca:16:1d:09:ca:5c:b4:ba:03:0d:b1:a1:
                    34:2a:75:74:6a:30:51:c0:d2:41:85:6a:3d:9d:d4:
                    af:33:84:8d:65:6f:03:e8:b6:f7:45:93:da:83:ca:
                    53:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FC:7A:D1:79:9A:18:0A:97:30:61:3A:1D:36:EC:37:B7:EB:CA:8B
            X509v3 Authority Key Identifier:
                keyid:C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130372e302f32342d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:af:53:ea:2e:67:4f:18:77:41:f3:ea:54:78:a4:ef:02:7b:
         db:9e:42:f4:00:41:6a:67:dc:5b:86:57:c3:fc:fe:78:7f:7f:
         96:40:e5:22:6a:1b:81:a5:68:06:01:49:b7:29:96:d0:77:a2:
         08:7c:95:94:cf:a7:76:e5:1e:03:1f:33:31:44:06:4c:99:fc:
         4c:e8:fd:99:75:a5:f3:7b:74:cb:02:5d:28:18:88:3c:12:78:
         82:f5:b6:cb:00:ff:36:67:8f:70:c0:3e:8e:f1:c2:e4:72:ea:
         dd:1d:ae:48:a7:2a:4a:b6:49:fc:3b:80:9c:f4:f2:7d:ce:1d:
         29:c8:42:47:99:da:e8:6b:53:34:10:9d:d4:7b:2d:7a:c7:64:
         88:dc:5f:20:01:0b:f0:df:12:dc:4f:3f:88:d1:75:46:6d:1b:
         51:ad:c9:55:f0:3d:cc:9a:12:3e:74:f9:48:22:66:8a:dd:c6:
         00:45:6c:8c:34:61:0a:b6:68:f1:de:ad:f3:21:d1:4f:b7:8b:
         4c:17:27:8d:cf:c9:d6:7e:71:df:77:e0:84:d2:aa:26:cd:d6:
         2b:79:c2:32:57:51:f3:98:28:12:8c:37:7e:85:d1:46:3f:ea:
         7c:c9:37:d8:d3:e4:2f:2e:12:14:f7:ac:ef:04:8c:bd:61:86:
         e0:03:cc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:42 2025 by rpki-client