Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32342d3234203d3e20323639363136.roa
File:                     3138372e36312e39362e302f32342d3234203d3e20323639363136.roa (raw, json)
Hash identifier:          /yQuFSL0FIBIC4Yq4wH91bc23ETLp27OhHfIaYWrH8M=
Subject key identifier:   B7:C3:E2:06:66:89:93:D1:7E:F1:73:25:11:29:09:A7:D4:BE:D3:0A
Certificate issuer:       /CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
Certificate serial:       43A05EF3D926FEC352B2CC58B9F920DD265177E3
Authority key identifier: C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32342d3234203d3e20323639363136.roa
Signing time:             Thu 25 Sep 2025 13:35:25 +0000
ROA not before:           Thu 25 Sep 2025 13:30:25 +0000
ROA not after:            Thu 24 Sep 2026 13:35:25 +0000
asID:                     269616
IP address blocks:        187.61.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a0:5e:f3:d9:26:fe:c3:52:b2:cc:58:b9:f9:20:dd:26:51:77:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
        Validity
            Not Before: Sep 25 13:30:25 2025 GMT
            Not After : Sep 24 13:35:25 2026 GMT
        Subject: CN=B7C3E206668993D17EF17325112909A7D4BED30A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:90:23:e8:cc:ae:e2:ea:c0:a3:c1:55:d7:8a:
                    cc:fc:14:30:4c:81:c3:db:e7:25:87:89:8d:18:e1:
                    89:13:f9:15:3c:6c:d7:c6:85:cb:0d:63:c2:f5:fc:
                    f8:df:08:9d:2b:41:56:7b:10:d3:94:ee:cd:74:37:
                    9b:96:0d:e3:4d:3c:7c:39:c0:b3:88:13:06:a4:7a:
                    d2:4a:44:dd:40:d8:2a:6e:ed:e7:83:bc:34:94:7f:
                    a2:9e:a0:2e:52:2c:d0:7a:3f:5c:77:48:a2:90:61:
                    e4:f6:3a:6e:a9:3c:ea:fd:0f:15:ee:d4:a1:c3:99:
                    ae:d9:ee:77:d6:90:55:4c:2e:32:55:98:42:73:2c:
                    b8:3b:d7:60:2e:c6:d8:95:57:38:39:30:65:8c:da:
                    10:b1:ab:ed:0a:ae:e5:92:97:81:92:be:eb:f7:7b:
                    91:b0:a9:93:38:43:5e:91:7a:48:6f:b2:8c:21:3d:
                    2d:8a:0f:fa:90:70:32:1e:32:f1:fd:6a:07:65:21:
                    74:67:f4:c2:80:d3:e8:f7:0c:9a:f3:b1:74:10:98:
                    0b:be:1a:a5:8b:b6:09:5d:0f:30:25:de:71:ae:d8:
                    3b:00:0e:b5:63:84:1b:6e:5d:d4:e9:f9:88:21:8c:
                    3b:7a:10:79:1b:4f:ec:4b:0b:52:48:df:1b:18:8f:
                    fc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C3:E2:06:66:89:93:D1:7E:F1:73:25:11:29:09:A7:D4:BE:D3:0A
            X509v3 Authority Key Identifier:
                keyid:C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32342d3234203d3e20323639363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d0:07:f1:08:89:81:1d:c0:74:87:1a:4b:5b:08:81:98:09:
         08:ee:38:d2:42:e4:04:fa:8e:37:34:fc:4f:77:8b:c7:dd:04:
         d5:0e:96:4f:bb:d3:a0:af:cb:a1:ae:b5:38:3a:0e:43:33:5c:
         86:24:c7:6d:73:bf:75:ab:e3:98:ac:06:d6:7b:b1:fd:23:8c:
         ca:f0:70:5f:a7:eb:96:45:7a:a9:13:9b:d5:17:1c:b4:87:b9:
         ae:b0:a3:c1:4f:31:93:cf:4c:1a:9f:14:f9:8d:0a:a2:ee:b0:
         ab:31:e8:f4:9f:78:8b:bc:1c:84:1a:54:08:0b:79:30:8c:34:
         45:5f:4e:c1:32:71:0a:97:9c:12:10:75:67:0d:58:2d:a7:f4:
         7c:f8:8f:8e:4a:f6:c3:f9:2b:2b:20:d0:ac:a1:f4:9f:ae:b3:
         96:a4:d6:ef:b7:dc:83:56:a2:1d:26:19:d1:57:c5:9a:85:33:
         ce:bb:1e:d6:c2:37:94:60:ef:d0:7b:16:64:70:ae:d3:38:54:
         9b:d7:db:f0:ef:d5:e6:b9:c7:96:d0:9b:f2:6e:57:ec:06:4e:
         88:e2:5d:c1:46:a4:36:58:ae:2f:25:f1:66:5c:22:8b:66:a5:
         24:99:55:b7:79:73:e2:03:f0:af:79:c3:cd:be:49:bd:b2:b7:
         e9:26:a5:12
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQ6Be89km/sNSssxYufkg3SZRd+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzkyRTdCREMwQzg2NjlDODZGQkNDQUU2RjM0MjREQkY2
OUQ3NzU2RDAeFw0yNTA5MjUxMzMwMjVaFw0yNjA5MjQxMzM1MjVaMDMxMTAvBgNV
BAMTKEI3QzNFMjA2NjY4OTkzRDE3RUYxNzMyNTExMjkwOUE3RDRCRUQzMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTkCPozK7i6sCjwVXXisz8FDBM
gcPb5yWHiY0Y4YkT+RU8bNfGhcsNY8L1/PjfCJ0rQVZ7ENOU7s10N5uWDeNNPHw5
wLOIEwaketJKRN1A2Cpu7eeDvDSUf6KeoC5SLNB6P1x3SKKQYeT2Om6pPOr9DxXu
1KHDma7Z7nfWkFVMLjJVmEJzLLg712AuxtiVVzg5MGWM2hCxq+0KruWSl4GSvuv3
e5GwqZM4Q16RekhvsowhPS2KD/qQcDIeMvH9agdlIXRn9MKA0+j3DJrzsXQQmAu+
GqWLtgldDzAl3nGu2DsADrVjhBtuXdTp+YghjDt6EHkbT+xLC1JI3xsYj/zTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUt8PiBmaJk9F+8XMlESkJp9S+0wowHwYDVR0j
BBgwFoAUyS573AyGachvvMrm80JNv2nXdW0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC9DOTJFN0JEQzBDODY2OUM4NkZCQ0NBRTZGMzQyNERCRjY5RDc3NTZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5MkU3QkRDMEM4NjY5Qzg2
RkJDQ0FFNkYzNDI0REJGNjlENzc1NkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzODM3MmUzNjMxMmUzOTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzYzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuz1gMA0GCSqGSIb3DQEBCwUAA4IBAQB80AfxCImB
HcB0hxpLWwiBmAkI7jjSQuQE+o43NPxPd4vH3QTVDpZPu9Ogr8uhrrU4Og5DM1yG
JMdtc791q+OYrAbWe7H9I4zK8HBfp+uWRXqpE5vVFxy0h7musKPBTzGTz0wanxT5
jQqi7rCrMej0n3iLvByEGlQIC3kwjDRFX07BMnEKl5wSEHVnDVgtp/R8+I+OSvbD
+SsrINCsofSfrrOWpNbvt9yDVqIdJhnRV8WahTPOux7WwjeUYO/QexZkcK7TOFSb
19vw79XmuceW0JvyblfsBk6I4l3BRqQ2WK4vJfFmXCKLZqUkmVW3eXPiA/CvecPN
vkm9srfpJqUS
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:58:06 2025 by rpki-client