Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa
File:                     3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa (raw, json)
Hash identifier:          3w6Krw4LoMGWshcuAXsLa2gVX7bnYMBso8HKpcrS0Ps=
Subject key identifier:   48:A6:12:8C:08:F9:D4:54:E6:65:74:48:97:EB:62:C4:AE:57:9B:5D
Certificate issuer:       /CN=6480808F2DB085F4192DC9A7B2841A9AB635552E
Certificate serial:       351FEC9B6A2B0B2CD45DD64DAF1C4EBF6CBC418A
Authority key identifier: 64:80:80:8F:2D:B0:85:F4:19:2D:C9:A7:B2:84:1A:9A:B6:35:55:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6480808F2DB085F4192DC9A7B2841A9AB635552E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa
Signing time:             Thu 02 Oct 2025 14:06:44 +0000
ROA not before:           Thu 02 Oct 2025 14:01:44 +0000
ROA not after:            Thu 01 Oct 2026 14:06:44 +0000
asID:                     262675
IP address blocks:        186.233.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/6480808F2DB085F4192DC9A7B2841A9AB635552E.crl
                          rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/6480808F2DB085F4192DC9A7B2841A9AB635552E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6480808F2DB085F4192DC9A7B2841A9AB635552E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1f:ec:9b:6a:2b:0b:2c:d4:5d:d6:4d:af:1c:4e:bf:6c:bc:41:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6480808F2DB085F4192DC9A7B2841A9AB635552E
        Validity
            Not Before: Oct  2 14:01:44 2025 GMT
            Not After : Oct  1 14:06:44 2026 GMT
        Subject: CN=48A6128C08F9D454E665744897EB62C4AE579B5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:31:4c:c0:7f:8a:e2:f6:cf:bd:a1:ed:1e:af:
                    fa:4d:2f:c4:3d:4f:cb:fe:b1:a5:c5:21:2f:e3:81:
                    1b:8c:8a:14:71:71:12:81:83:02:65:a9:2a:28:63:
                    ac:d7:c8:14:93:1e:c1:5b:fd:2c:bf:7a:f6:f6:5a:
                    ba:37:3a:d9:43:96:8b:07:da:1f:dd:90:2a:14:4e:
                    41:78:81:e9:a8:8b:86:28:f0:4a:3c:57:34:0c:29:
                    5b:b4:9c:4b:85:d8:a8:3b:df:7f:a8:89:97:f7:c2:
                    63:68:03:3a:36:82:c2:e4:7c:24:c4:b3:f3:e7:13:
                    74:a0:48:d0:2b:2b:30:71:cd:a9:ad:78:c6:be:47:
                    5f:04:ce:11:5f:8d:3a:c5:ef:1e:53:ab:dc:2a:9c:
                    98:73:f2:8b:3e:5f:9a:b4:9c:fe:23:8a:9a:1d:c0:
                    00:a9:52:3c:b2:4c:5b:48:0a:7b:d1:d0:b1:4c:d1:
                    0b:f9:1f:02:e3:6e:a1:7f:c5:bd:57:b0:5d:73:39:
                    b3:92:90:03:45:30:88:fe:77:91:19:84:2a:0f:c5:
                    59:a2:bd:07:34:cc:7b:97:87:2b:f5:f4:f8:98:d2:
                    0c:54:c9:40:04:24:dc:cc:37:b5:98:91:05:93:a1:
                    4f:28:c3:d0:07:dc:af:15:3c:4f:1e:dc:fc:49:d4:
                    c0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A6:12:8C:08:F9:D4:54:E6:65:74:48:97:EB:62:C4:AE:57:9B:5D
            X509v3 Authority Key Identifier:
                keyid:64:80:80:8F:2D:B0:85:F4:19:2D:C9:A7:B2:84:1A:9A:B6:35:55:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/6480808F2DB085F4192DC9A7B2841A9AB635552E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6480808F2DB085F4192DC9A7B2841A9AB635552E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:f2:63:33:ae:0d:3b:06:6a:8d:ea:fd:c8:7e:b1:0e:62:2c:
         88:d5:72:83:d9:65:b3:65:a2:cc:f1:95:8e:75:16:a2:ad:b6:
         31:cc:7e:46:4c:dc:d1:8b:c3:47:21:b0:fe:42:a6:ed:d5:c2:
         c8:d4:a0:df:7b:87:67:4f:3e:9d:7c:ff:17:e2:43:4e:4d:59:
         23:02:9b:a0:8c:ed:64:52:71:48:79:44:13:3b:8d:70:d5:9b:
         d6:76:54:3b:4e:c9:ff:dd:4b:f6:a0:bb:ed:37:e1:bf:ab:88:
         36:fd:a5:95:b6:6e:ec:78:80:da:7c:9b:f2:d7:32:7a:01:df:
         bd:95:ca:5b:33:28:7a:86:f3:38:a8:37:52:12:38:14:b1:3a:
         f5:42:47:91:9d:3b:90:6d:4f:e2:47:90:99:92:6e:94:a7:c4:
         45:db:b3:2f:18:f8:b9:0a:0a:98:d0:91:71:f7:c5:31:69:37:
         29:84:08:9c:01:a7:75:75:e4:ab:09:41:d5:c8:fa:3b:80:27:
         55:a4:2e:92:d7:c0:3f:1d:c4:20:97:49:36:5b:d8:09:6a:a9:
         a0:83:ff:9e:91:83:b4:e1:7b:0b:86:1a:9b:d1:34:40:34:76:
         dd:3a:59:70:46:cb:7e:62:cf:c0:03:b7:cf:32:26:6a:0f:f2:
         db:23:0e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:32:25 2025 by rpki-client