Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130352e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e3130352e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          5PM8MAXJzFt9HcayZAVkoWJFeWJHA3wQDFPrNvpPsTs=
Subject key identifier:   D5:44:05:6D:11:73:E5:CF:7B:BA:11:97:99:1A:30:7C:40:50:7C:E3
Certificate issuer:       /CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
Certificate serial:       717E51124715DDA3C4B3180140EB7ED18C617AA8
Authority key identifier: C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130352e302f32342d3234203d3e203533313533.roa
Signing time:             Thu 25 Sep 2025 13:35:25 +0000
ROA not before:           Thu 25 Sep 2025 13:30:25 +0000
ROA not after:            Thu 24 Sep 2026 13:35:25 +0000
asID:                     53153
IP address blocks:        187.61.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7e:51:12:47:15:dd:a3:c4:b3:18:01:40:eb:7e:d1:8c:61:7a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
        Validity
            Not Before: Sep 25 13:30:25 2025 GMT
            Not After : Sep 24 13:35:25 2026 GMT
        Subject: CN=D544056D1173E5CF7BBA1197991A307C40507CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:fc:32:e7:eb:0a:91:8c:eb:8b:98:52:15:
                    30:63:a9:10:1c:04:e4:58:23:06:bf:04:84:3c:8f:
                    af:07:6a:7a:b8:fd:71:03:ca:33:bc:95:82:2e:76:
                    82:14:a6:7a:82:5e:5a:02:98:01:43:75:7b:84:f4:
                    59:d0:11:cc:01:06:8d:de:f4:f1:71:e9:02:86:f2:
                    87:23:fb:91:0d:cd:3c:c4:31:b7:82:32:86:32:53:
                    f5:fe:f8:80:46:de:cf:34:d0:e9:f9:9b:a4:d3:5f:
                    e2:f7:67:fb:5c:3f:bd:86:df:df:6c:32:9a:e8:6c:
                    44:b4:bb:62:94:46:8c:93:14:76:4d:dd:42:f7:be:
                    20:d0:1e:f0:ae:c2:be:64:a7:bc:ea:14:65:52:54:
                    4c:b5:39:cd:10:49:d8:a6:77:af:5d:ce:0d:0d:e5:
                    7b:83:a8:27:77:c2:06:a7:83:5e:e6:d5:24:80:2f:
                    75:a8:b8:7a:5b:c0:aa:c3:22:29:ed:4a:95:37:05:
                    9d:24:ec:35:e0:d7:e6:19:39:ae:ea:fa:2e:c5:1a:
                    11:a6:5c:66:71:be:ef:17:0b:b2:66:17:65:d3:73:
                    0c:3c:6a:51:6f:e3:20:09:64:74:55:79:7e:5e:00:
                    90:18:35:1c:3d:3a:f5:55:38:1e:26:f3:84:85:02:
                    2f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:44:05:6D:11:73:E5:CF:7B:BA:11:97:99:1A:30:7C:40:50:7C:E3
            X509v3 Authority Key Identifier:
                keyid:C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130352e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:cb:0e:ce:d7:bf:ec:6f:23:a3:96:2d:cb:1c:1d:0e:23:49:
         9a:78:3f:e6:7b:e0:4c:a9:bf:58:fb:0e:e1:3a:d2:01:f1:65:
         e3:73:a4:63:02:69:fa:2a:49:c5:b6:13:b3:d9:ba:08:2d:31:
         39:85:ae:44:26:28:62:57:ff:e7:4d:fb:1b:a0:f4:88:89:19:
         b7:4c:5a:c3:06:68:50:fe:86:e1:94:c8:98:c4:cd:0a:5a:8c:
         0f:59:b2:4e:d5:c9:00:68:7e:05:78:1f:e1:ab:cd:cb:d1:f2:
         c9:ca:6d:7c:61:91:62:00:4d:ad:63:1c:d8:b8:36:2c:59:b4:
         80:e3:bd:a7:cb:6c:50:c7:54:c4:43:1e:d3:53:13:92:b0:b3:
         f7:9e:9a:2e:b1:24:b1:3b:35:b3:99:16:31:6d:de:3a:bf:94:
         a8:e1:37:8b:ad:6a:a5:1e:bb:7a:17:fb:16:11:16:e0:ec:a5:
         4e:4b:e5:0c:3c:29:46:d1:f9:1b:ee:86:5b:45:11:f7:d7:2f:
         00:ad:a6:1c:6a:bf:72:da:e3:04:a6:02:20:ba:12:78:ec:d5:
         5b:66:b4:9c:b5:16:a2:dc:40:40:f5:21:9a:c3:2b:85:cc:fc:
         03:98:c4:10:c1:18:25:2d:4c:e3:58:d2:1c:8f:16:5c:81:59:
         93:bd:ce:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:49 2025 by rpki-client