Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS28263.roa
File:                     AS28263.roa (raw, json)
Hash identifier:          mgNM9c9+7f8BccYg3OXIL7vJ5qN1QZRAl00ofG49CAE=
Subject key identifier:   CD:35:C9:87:A4:F6:C0:77:57:4F:2B:C8:39:75:D9:99:EE:0D:A2:38
Certificate issuer:       /CN=15A0CACB6F5D6B45006136392255670B81DB66F8
Certificate serial:       12DB3328607EC4E797F580AC13BC0E9D923B5F8F
Authority key identifier: 15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS28263.roa
Signing time:             Mon 29 Sep 2025 11:46:43 +0000
ROA not before:           Mon 29 Sep 2025 11:41:43 +0000
ROA not after:            Mon 28 Sep 2026 11:46:43 +0000
asID:                     28263
IP address blocks:        187.17.160.0/20 maxlen: 24
                          201.49.64.0/19 maxlen: 24
                          2804:4f8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:db:33:28:60:7e:c4:e7:97:f5:80:ac:13:bc:0e:9d:92:3b:5f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A0CACB6F5D6B45006136392255670B81DB66F8
        Validity
            Not Before: Sep 29 11:41:43 2025 GMT
            Not After : Sep 28 11:46:43 2026 GMT
        Subject: CN=CD35C987A4F6C077574F2BC83975D999EE0DA238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d8:59:cd:21:b7:51:7e:36:e4:4b:36:db:5b:
                    ba:0b:72:84:4a:8f:67:60:77:de:60:db:c0:5d:de:
                    56:6d:a2:91:03:57:10:2f:23:69:49:1f:0b:3c:b3:
                    36:ac:d8:55:e9:58:e0:4a:73:de:e6:8f:59:75:d4:
                    cd:37:67:f4:83:47:d0:59:05:6a:6d:3b:1d:c3:0b:
                    40:26:9b:21:4d:e3:94:df:62:e1:bf:8d:15:2c:c7:
                    4b:d8:6c:33:cd:b9:87:bb:6b:30:01:b4:15:c1:b3:
                    a5:91:ee:28:36:37:7b:18:55:a9:9c:47:10:ea:ba:
                    5c:ab:52:ea:af:fd:d2:be:32:cf:3d:72:d2:0d:b3:
                    38:99:44:b5:03:76:3a:c2:94:00:07:aa:c8:1b:f9:
                    c2:8a:c4:d9:6b:40:a5:ce:43:03:57:e9:13:61:87:
                    e5:95:9b:d0:d3:0d:9e:15:05:d1:b1:e0:e6:a3:39:
                    cf:0a:92:91:b5:d8:1c:dd:9e:17:ce:78:f8:41:15:
                    ac:90:cc:45:60:d5:a8:3c:09:2d:a3:49:d3:84:9c:
                    a6:8b:90:1b:5c:23:ae:61:fe:9e:35:f7:7b:d0:13:
                    84:04:92:2f:50:7e:77:df:fc:61:7a:d3:f8:92:0b:
                    6d:54:bf:fb:7c:bd:20:a1:8a:36:6c:8a:1a:25:2d:
                    d0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:35:C9:87:A4:F6:C0:77:57:4F:2B:C8:39:75:D9:99:EE:0D:A2:38
            X509v3 Authority Key Identifier:
                keyid:15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS28263.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.160.0/20
                  201.49.64.0/19
                IPv6:
                  2804:4f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:74:8d:18:27:be:47:3e:c4:41:07:4d:9f:6b:1e:bb:0b:c7:
         0d:52:40:2a:fc:16:12:50:51:c3:1a:de:85:c9:8e:19:75:9a:
         58:83:29:e2:e6:be:1b:8a:1f:e9:af:5c:7c:1a:ce:80:4a:f8:
         c4:78:fd:7c:7b:2d:64:1f:96:79:d4:e9:4a:58:6f:7a:93:ab:
         1b:8a:c4:7f:40:44:c0:61:f7:ee:9b:5b:e6:e2:6f:83:84:50:
         b3:d3:d4:0b:26:9d:66:53:d5:bf:77:6a:47:8d:22:43:a0:86:
         ad:b8:fe:c0:d8:c2:45:2f:c6:b7:ae:3e:c0:29:f3:2a:77:3b:
         c3:c7:e8:19:4b:f3:91:eb:25:4d:61:7c:a6:32:fd:90:b5:5d:
         ae:c9:c0:ed:92:8a:96:ed:be:e3:49:23:7c:e1:e7:c3:09:e6:
         02:73:b1:36:0e:ba:19:dd:e8:a2:67:42:7e:65:ca:bb:81:ca:
         f9:61:cc:7f:ac:d8:8e:0e:69:e2:f4:e0:cb:e8:86:c9:9c:5c:
         d3:e3:e1:02:81:f6:fd:2c:27:8f:db:c1:5f:41:19:3a:26:ea:
         36:64:ef:3f:21:f6:fe:d4:4f:48:e2:58:e3:fd:20:9a:47:04:
         4d:78:1c:96:36:2a:12:b6:6f:ff:11:2f:f4:e9:e8:ae:62:30:
         5f:a0:1f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:33 2025 by rpki-client