Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130392e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3130392e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          Hl6IkaZbBKMmLErc5QgIg8dU+66j5jYDM+fZNzqGwE0=
Subject key identifier:   EC:34:FD:BD:F5:EB:E0:C9:40:20:3E:BC:EC:47:1C:4C:6F:FE:E3:42
Certificate issuer:       /CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
Certificate serial:       4D9699E308B1C48285EBC3DD195DD3284FD5610C
Authority key identifier: C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130392e302f32342d3234203d3e203533313533.roa
Signing time:             Thu 25 Sep 2025 13:35:25 +0000
ROA not before:           Thu 25 Sep 2025 13:30:25 +0000
ROA not after:            Thu 24 Sep 2026 13:35:25 +0000
asID:                     53153
IP address blocks:        186.209.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:96:99:e3:08:b1:c4:82:85:eb:c3:dd:19:5d:d3:28:4f:d5:61:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
        Validity
            Not Before: Sep 25 13:30:25 2025 GMT
            Not After : Sep 24 13:35:25 2026 GMT
        Subject: CN=EC34FDBDF5EBE0C940203EBCEC471C4C6FFEE342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8a:67:d0:1a:bf:63:97:52:6d:fb:52:09:2a:
                    68:f6:7f:42:11:06:cf:3b:b9:87:32:58:40:b8:2a:
                    ce:95:13:b6:6c:3d:d8:72:b5:ef:6a:7c:2f:aa:ff:
                    a9:73:33:fe:63:30:ba:eb:48:ec:a3:4d:6e:55:23:
                    ea:c7:a3:93:05:e4:55:12:be:5f:35:76:c6:45:a5:
                    01:96:94:31:68:41:1e:35:db:9e:c6:64:6e:f2:09:
                    fe:6e:d4:39:12:26:b9:3a:47:d4:b9:0f:be:de:06:
                    d0:39:b1:25:ae:74:6a:40:bd:b3:74:35:22:42:f5:
                    43:62:f3:ef:1e:6e:4c:c1:78:b3:86:5b:51:52:26:
                    09:d1:42:31:2c:9e:d5:79:5c:45:73:1c:7d:3d:23:
                    48:33:a3:60:5c:ef:5a:bd:02:03:1e:ad:fd:e1:c7:
                    4e:46:b8:34:85:3e:e4:9b:c9:2d:a0:b8:3f:41:2e:
                    b2:0f:02:a0:7a:24:cc:77:34:ae:3c:b1:22:43:f4:
                    14:e8:24:a1:72:0f:e6:68:2a:ac:b5:0e:3d:52:91:
                    f4:8c:13:4b:44:84:e8:91:15:2d:78:b7:7a:ea:40:
                    17:f1:60:93:ca:8f:65:4b:e6:30:98:83:cb:b6:64:
                    94:7c:e0:b6:c1:22:fd:4b:4f:ef:40:fb:18:6f:5c:
                    5f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:34:FD:BD:F5:EB:E0:C9:40:20:3E:BC:EC:47:1C:4C:6F:FE:E3:42
            X509v3 Authority Key Identifier:
                keyid:C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130392e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:76:21:18:44:c0:d5:35:d2:7c:80:a1:26:d5:0c:34:39:ad:
         75:05:42:a2:b8:ae:52:cb:57:bb:f5:c6:86:9d:74:0e:24:8e:
         9e:a0:a7:9a:fa:17:97:e9:c7:60:c4:54:ff:66:49:02:3a:0b:
         d5:54:c7:74:3e:27:9f:ca:5e:03:0a:1a:d8:a0:44:29:31:c8:
         0a:d0:c5:a4:84:e1:64:ae:a9:1e:05:94:a6:aa:92:42:d6:38:
         cd:ad:c1:36:cc:55:5b:fc:29:3f:48:9c:46:9e:9f:98:00:d5:
         0c:20:2c:aa:33:73:b1:fd:f8:0d:04:56:09:69:3e:b9:e7:7d:
         b3:d0:f7:f8:af:55:41:ce:6b:7f:b3:80:3e:68:fe:46:9d:2e:
         0c:f8:d0:31:1a:e4:66:b5:77:ba:ab:17:f1:c5:f5:50:c2:9e:
         82:9e:00:b4:7a:c7:fd:68:fa:0c:49:41:2b:c4:ce:b6:bc:cb:
         c6:96:14:8d:35:ae:df:88:12:46:3e:c7:f4:4e:bd:05:88:08:
         e4:d7:a8:6d:65:25:1e:6c:cc:85:3d:34:36:8c:d1:03:01:32:
         21:af:b3:f9:24:65:eb:62:91:c3:4f:d7:d4:12:13:30:3f:78:
         24:e4:fd:26:c7:c7:0b:05:1b:06:7c:0b:d5:50:48:c5:d1:c8:
         0c:b5:04:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:37 2025 by rpki-client