Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39382e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e39382e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          KzfTsmXZA5Dylw/rx4fBn3QNTJSBZGhkWcunj59lB4o=
Subject key identifier:   C8:C1:5F:96:D5:F9:61:56:73:D2:0D:E9:20:15:CB:00:E2:AB:2B:D7
Certificate issuer:       /CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
Certificate serial:       4EE58D4B9B10D591DCAFBFF833CBD779909D4464
Authority key identifier: C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39382e302f32342d3234203d3e203533313533.roa
Signing time:             Thu 25 Sep 2025 13:35:21 +0000
ROA not before:           Thu 25 Sep 2025 13:30:21 +0000
ROA not after:            Thu 24 Sep 2026 13:35:21 +0000
asID:                     53153
IP address blocks:        186.209.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e5:8d:4b:9b:10:d5:91:dc:af:bf:f8:33:cb:d7:79:90:9d:44:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
        Validity
            Not Before: Sep 25 13:30:21 2025 GMT
            Not After : Sep 24 13:35:21 2026 GMT
        Subject: CN=C8C15F96D5F9615673D20DE92015CB00E2AB2BD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7f:16:32:84:1d:46:87:c6:98:59:58:ab:ec:
                    a9:b7:6c:6f:83:bd:a4:c0:53:49:50:84:4d:ae:7b:
                    e3:ed:d5:8d:21:f8:0c:a5:ec:e7:17:c6:a1:55:38:
                    3d:82:49:43:d8:16:70:5a:ed:6b:83:11:42:cb:f3:
                    69:97:86:bd:41:29:a5:59:c0:8f:5d:bc:7a:06:70:
                    64:59:3c:28:c3:b7:97:79:4f:ad:15:50:eb:88:e1:
                    80:c3:59:72:ca:7d:bf:a9:87:1b:46:3a:3b:6f:48:
                    8c:7c:54:c3:39:fe:8e:bb:9f:9e:c9:3b:48:41:48:
                    dd:48:4e:75:93:09:dd:57:9d:4d:b7:5c:fa:3e:1b:
                    0b:03:ef:75:c4:81:c0:ee:3a:36:24:1c:fd:71:e3:
                    a4:b6:19:37:ec:95:6d:38:73:97:6f:fc:8c:df:0f:
                    bd:e1:7b:45:ba:e8:f5:58:25:f3:dd:1f:d9:80:40:
                    c4:60:2a:cc:fa:bb:75:fa:49:4a:57:3a:bf:5f:ad:
                    5e:14:fb:a3:92:95:de:a5:5c:24:4c:cd:eb:0d:28:
                    22:1b:3b:27:90:38:eb:6d:5b:41:08:a4:c9:83:7f:
                    59:13:81:ed:ad:88:12:7e:7f:a3:c7:0f:48:fb:5f:
                    78:6d:9e:1f:9f:66:40:af:e5:02:1a:ab:66:ca:d7:
                    78:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C1:5F:96:D5:F9:61:56:73:D2:0D:E9:20:15:CB:00:E2:AB:2B:D7
            X509v3 Authority Key Identifier:
                keyid:C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39382e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:c6:20:67:af:51:9d:d5:4e:6a:3f:ef:47:61:49:5e:b6:45:
         78:ec:c8:99:15:c3:dc:bb:0e:49:33:3f:42:32:4d:41:b5:e6:
         3d:2d:4f:a7:92:78:e3:df:7d:60:0f:cd:5c:4a:52:e7:7f:c5:
         42:99:5f:5c:92:11:73:34:28:7d:e3:64:64:55:c1:a1:30:c3:
         67:c9:60:20:0a:83:24:91:62:95:54:50:de:9f:dd:3c:f6:d5:
         68:e2:a1:f5:3c:6e:f5:9d:88:91:b9:d0:ac:c0:0c:cb:e4:a1:
         6b:0d:83:55:b1:77:59:f8:95:9f:58:30:3b:89:ac:e1:57:0a:
         b0:87:a4:3a:27:e1:21:3c:65:40:9f:55:05:ac:c8:6a:49:9f:
         3c:64:6e:b3:2e:19:21:40:80:78:cb:54:66:67:43:20:e6:53:
         20:9b:15:df:0f:7c:a0:0c:38:06:6b:14:dd:23:b5:fa:bd:d7:
         28:ec:c5:31:16:1f:f2:4e:37:06:87:50:cb:6f:80:d0:e6:ad:
         f2:53:95:91:f5:61:cf:22:b6:5e:a8:a1:5a:33:5f:e6:87:70:
         d8:f1:9e:82:b2:47:3e:2d:b5:60:f0:a9:f1:15:3c:4b:2b:7f:
         c2:f0:56:9e:ae:8f:9f:53:e6:1f:d1:8a:90:40:11:75:59:50:
         08:59:1c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:42 2025 by rpki-client