Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39392e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e39392e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          pWs3btWKQhSt6zsNrG62/4HelLFbW3AutuEymBDQxVw=
Subject key identifier:   BC:4A:B0:91:CA:5B:91:7F:45:68:D1:6F:83:27:A0:B8:7A:17:E7:1F
Certificate issuer:       /CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
Certificate serial:       3A4C3B3FF464537E5A761D1AC026ABCD35885E0A
Authority key identifier: C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39392e302f32342d3234203d3e203533313533.roa
Signing time:             Thu 25 Sep 2025 13:35:23 +0000
ROA not before:           Thu 25 Sep 2025 13:30:23 +0000
ROA not after:            Thu 24 Sep 2026 13:35:23 +0000
asID:                     53153
IP address blocks:        186.209.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4c:3b:3f:f4:64:53:7e:5a:76:1d:1a:c0:26:ab:cd:35:88:5e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
        Validity
            Not Before: Sep 25 13:30:23 2025 GMT
            Not After : Sep 24 13:35:23 2026 GMT
        Subject: CN=BC4AB091CA5B917F4568D16F8327A0B87A17E71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:40:4d:6d:6a:46:cd:50:3d:34:ec:b3:60:
                    84:03:9c:d4:20:59:8b:11:0a:4e:3e:55:d9:45:b0:
                    0a:ba:bd:50:3f:2b:33:5f:3f:ff:f9:4c:8e:0f:4e:
                    fa:7d:0b:e0:bb:3e:5f:6b:50:76:24:f7:69:6d:93:
                    f6:40:6c:5e:5a:a2:64:fa:0f:a1:6a:a3:5a:88:23:
                    4a:3a:3c:08:7c:be:18:12:bf:ba:16:aa:74:7e:cc:
                    66:7c:16:b3:09:7c:0a:3a:01:a3:fb:2a:2e:d4:d2:
                    e7:90:0b:6c:2f:d3:10:26:76:a0:d2:dd:25:85:09:
                    b7:7e:f3:1c:22:40:79:80:9d:4b:55:28:0d:14:7c:
                    29:af:d3:60:e6:06:05:65:3e:d7:3c:ff:67:e3:e8:
                    83:53:bb:82:59:0b:a7:ed:6e:9b:ef:33:69:7b:4e:
                    a4:d4:41:f6:9a:84:97:77:02:0d:8e:ee:8e:af:43:
                    03:c3:6a:9a:0c:61:14:00:c2:b4:cb:91:12:e5:f0:
                    07:6b:96:83:12:19:35:c5:11:95:3c:8b:15:9f:d7:
                    2e:b4:18:49:76:6f:7a:d9:7d:d4:40:17:19:8b:9d:
                    2e:70:22:49:fd:50:df:46:73:c3:74:c5:23:9f:df:
                    09:84:81:a4:1f:6e:a6:9e:ad:f7:31:a5:4b:1a:53:
                    04:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4A:B0:91:CA:5B:91:7F:45:68:D1:6F:83:27:A0:B8:7A:17:E7:1F
            X509v3 Authority Key Identifier:
                keyid:C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39392e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:f1:25:7e:cd:ea:e7:2b:c9:9a:19:2c:89:7f:f0:f9:40:f7:
         fc:82:dc:ab:0d:9b:ce:d6:2e:db:df:a7:f8:20:6a:9f:c3:a4:
         87:12:cd:7a:22:b1:38:f6:27:8c:26:e4:0d:2e:49:b0:cb:ea:
         a3:c4:2c:49:41:79:88:bf:49:3e:97:bd:8d:13:69:0b:e3:d7:
         4f:09:e5:3d:2d:e1:af:58:f9:7a:bf:22:4c:dc:0a:62:ad:3f:
         7a:d9:5b:aa:42:58:b5:00:20:15:7e:30:48:cf:d7:18:40:93:
         b1:4f:6b:c4:68:36:47:03:45:f1:41:4d:00:fe:2e:9a:0d:16:
         10:06:ab:4a:32:18:45:c7:16:46:d1:e9:19:e5:95:8f:00:e3:
         78:55:b7:29:53:b4:5a:5b:5b:a4:ae:3a:10:97:8d:11:4f:80:
         73:70:d8:58:aa:1f:69:b2:c7:1f:62:c3:05:53:4a:96:fa:29:
         59:f3:9d:d5:31:03:0a:3c:36:14:ba:a8:2b:50:34:78:aa:8b:
         42:d9:f2:63:27:66:bf:e6:31:1f:be:66:3c:02:34:ba:8e:e0:
         f7:85:d5:f6:69:11:6a:c3:c2:3c:5e:f0:ab:5f:ab:ec:ca:84:
         bd:d0:23:73:9c:1a:d3:32:8a:4d:f5:64:3b:49:ea:73:ff:35:
         c8:52:08:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:46 2025 by rpki-client