Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/3137302e3234362e3138342e302f32322d3234203d3e20323634383830.roa
File:                     3137302e3234362e3138342e302f32322d3234203d3e20323634383830.roa (raw, json)
Hash identifier:          K2cK3NZIFljKeOpvvpHj0lLcmC4oQ0tB2wi3PEj4Arg=
Subject key identifier:   6E:29:7E:D7:13:A9:15:40:14:4E:6A:9C:8F:BD:BA:53:AE:F1:D9:59
Certificate issuer:       /CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC
Certificate serial:       128B55B4602139AADDCDD5412C4CEDD6BD0D7C28
Authority key identifier: 9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/3137302e3234362e3138342e302f32322d3234203d3e20323634383830.roa
Signing time:             Fri 19 Sep 2025 20:19:56 +0000
ROA not before:           Fri 19 Sep 2025 20:14:56 +0000
ROA not after:            Fri 18 Sep 2026 20:19:56 +0000
asID:                     264880
IP address blocks:        170.246.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl
                          rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 23:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8b:55:b4:60:21:39:aa:dd:cd:d5:41:2c:4c:ed:d6:bd:0d:7c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC
        Validity
            Not Before: Sep 19 20:14:56 2025 GMT
            Not After : Sep 18 20:19:56 2026 GMT
        Subject: CN=6E297ED713A91540144E6A9C8FBDBA53AEF1D959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:8a:e7:e5:39:9c:50:1d:81:bd:af:6e:45:
                    6f:01:1a:f2:02:20:ab:c3:54:39:2f:2d:6c:fa:6c:
                    34:fb:98:e4:15:7c:68:75:7b:26:00:0a:7e:d3:5b:
                    b3:e4:79:5c:95:94:85:0b:2f:87:c8:1e:95:10:a5:
                    9e:ec:50:a1:9d:81:c0:a8:aa:22:82:c5:a2:55:33:
                    ce:d7:55:f4:5a:19:38:d5:89:3c:a5:06:8f:c5:01:
                    08:4c:82:6b:83:d4:69:81:32:d7:8d:a1:b2:ca:f7:
                    9c:53:c3:0c:f9:8a:a4:26:23:d3:58:c1:06:4a:14:
                    c4:87:1a:00:8c:72:11:99:6d:0b:67:ff:c5:9b:cc:
                    90:36:5f:e6:f1:ed:3c:72:53:48:e7:58:80:4c:10:
                    da:de:b0:ba:8d:37:16:d7:f2:01:6d:ba:02:c5:b5:
                    b8:d2:05:ba:fb:6a:e2:4c:bd:7b:03:26:6f:2f:ff:
                    75:9f:df:4b:20:14:85:f6:82:b8:b3:5d:4c:92:5a:
                    7e:be:8b:86:b9:8a:f8:d8:1c:c2:5a:25:10:ed:9a:
                    30:4f:c2:03:74:32:87:4c:7a:f5:fc:d9:84:6e:1d:
                    8b:bd:6e:53:dd:67:e2:fd:97:a4:c1:95:9f:46:f4:
                    b5:00:2a:dc:27:f2:d0:0c:9c:ca:ae:84:dc:68:99:
                    58:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:29:7E:D7:13:A9:15:40:14:4E:6A:9C:8F:BD:BA:53:AE:F1:D9:59
            X509v3 Authority Key Identifier:
                keyid:9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/3137302e3234362e3138342e302f32322d3234203d3e20323634383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:02:9b:16:d7:5d:aa:2d:72:bb:11:d5:f9:94:1a:c0:06:55:
         30:5f:67:1e:d3:88:35:23:e5:0d:61:2c:40:83:57:4f:20:cf:
         0c:23:f9:94:1b:16:8b:b4:0b:4d:cf:62:28:ed:d8:15:39:57:
         ae:22:f7:79:25:25:12:d3:0e:43:40:6c:d7:c5:dc:94:45:b9:
         55:d4:d9:cd:1a:0c:52:b5:b2:ce:6f:b8:a6:65:0e:e5:20:37:
         53:33:4a:c7:63:01:0a:af:14:1f:9d:52:40:fd:d8:c7:7c:89:
         09:c2:87:f5:85:d9:6a:58:35:ff:d8:96:ee:94:e4:57:34:91:
         31:22:ac:0d:16:ec:e8:d7:d9:15:fb:2a:55:c4:38:b4:1d:29:
         0f:59:d6:27:28:17:a3:2d:7b:27:89:38:8b:09:0d:c3:38:35:
         56:00:b1:f4:8f:01:4f:cd:8d:b8:72:f1:ee:3f:0c:73:e4:48:
         85:6d:88:c6:be:22:0f:1c:37:81:db:f5:79:da:c5:26:54:68:
         44:4b:e5:c9:6a:03:dd:29:59:40:29:0a:c4:f4:a7:24:13:23:
         6c:85:92:e3:ce:fd:5f:3d:ef:b7:fc:0c:77:65:dd:c2:66:30:
         bf:82:f5:13:ed:6c:59:ed:8a:ec:46:61:15:93:7d:74:b5:65:
         ad:f5:41:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:15:24 2025 by rpki-client