Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Rua5U3jexviPhqHmB2uhEJaaXnXKqspHJCW39YHnu5f/0/3138312e3138392e37322e302f32322d3332203d3e20323731343030.roa
File:                     3138312e3138392e37322e302f32322d3332203d3e20323731343030.roa (raw, json)
Hash identifier:          oB2gVHVxknDWyK5KG9tbWRrw1uakGpiKKoZ03ygsYrs=
Subject key identifier:   EA:7A:E8:FD:60:1A:63:28:98:03:A7:27:A5:F4:A6:56:56:C1:31:69
Certificate issuer:       /CN=48D306B31CCB0325E1CD633FFD5833050A218F76
Certificate serial:       0539087AD6CF4FC48B132004F4DBE2A853A0AF7A
Authority key identifier: 48:D3:06:B3:1C:CB:03:25:E1:CD:63:3F:FD:58:33:05:0A:21:8F:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D306B31CCB0325E1CD633FFD5833050A218F76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rua5U3jexviPhqHmB2uhEJaaXnXKqspHJCW39YHnu5f/0/3138312e3138392e37322e302f32322d3332203d3e20323731343030.roa
Signing time:             Thu 25 Sep 2025 21:18:20 +0000
ROA not before:           Thu 25 Sep 2025 21:13:20 +0000
ROA not after:            Thu 24 Sep 2026 21:18:20 +0000
asID:                     271400
IP address blocks:        181.189.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rua5U3jexviPhqHmB2uhEJaaXnXKqspHJCW39YHnu5f/0/48D306B31CCB0325E1CD633FFD5833050A218F76.crl
                          rsync://rpki-repo.registro.br/repo/3Rua5U3jexviPhqHmB2uhEJaaXnXKqspHJCW39YHnu5f/0/48D306B31CCB0325E1CD633FFD5833050A218F76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D306B31CCB0325E1CD633FFD5833050A218F76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:39:08:7a:d6:cf:4f:c4:8b:13:20:04:f4:db:e2:a8:53:a0:af:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48D306B31CCB0325E1CD633FFD5833050A218F76
        Validity
            Not Before: Sep 25 21:13:20 2025 GMT
            Not After : Sep 24 21:18:20 2026 GMT
        Subject: CN=EA7AE8FD601A63289803A727A5F4A65656C13169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:86:d4:34:4b:e0:40:a3:87:5a:18:90:ec:
                    8e:ad:9f:d4:b7:fe:c6:d9:21:87:6f:6f:28:cd:40:
                    98:97:a0:d2:2c:f5:8d:9d:dd:2f:0d:79:a5:3d:5f:
                    92:a7:26:09:3c:18:ae:b4:97:a1:6b:33:60:9b:59:
                    f9:73:5a:e8:c1:fa:8f:45:11:e7:4b:32:68:fe:4f:
                    87:cc:70:ae:64:bb:e3:78:89:37:aa:b6:a0:b2:f9:
                    c0:c7:10:b7:6a:be:c8:0d:34:5b:88:22:2c:11:78:
                    3f:24:b5:ca:e5:7b:df:9e:4b:e4:a4:5e:31:fc:bb:
                    3a:d0:38:fe:e4:f0:0c:44:b1:a0:ec:b3:21:e0:89:
                    0a:7d:8b:60:5c:02:40:fd:e5:77:e0:fd:a4:36:66:
                    ea:53:3d:3f:67:96:a1:d1:b4:a1:b2:b0:4d:28:c3:
                    a4:a7:ac:78:c0:a9:2a:44:98:8f:e0:0a:ac:c5:37:
                    d7:6e:23:12:ca:2b:fc:8b:11:f2:3e:f8:c2:fd:30:
                    4f:09:b4:9f:80:97:e9:10:de:69:33:5f:3c:ff:af:
                    a7:c7:f2:7d:86:e8:9d:18:a7:37:21:2a:33:9a:d1:
                    ae:5f:60:ff:96:23:82:50:7d:31:36:6e:3f:a7:e1:
                    12:3a:a5:19:e6:f5:f1:d1:a3:d6:ae:bd:00:59:75:
                    0c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7A:E8:FD:60:1A:63:28:98:03:A7:27:A5:F4:A6:56:56:C1:31:69
            X509v3 Authority Key Identifier:
                keyid:48:D3:06:B3:1C:CB:03:25:E1:CD:63:3F:FD:58:33:05:0A:21:8F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rua5U3jexviPhqHmB2uhEJaaXnXKqspHJCW39YHnu5f/0/48D306B31CCB0325E1CD633FFD5833050A218F76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D306B31CCB0325E1CD633FFD5833050A218F76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rua5U3jexviPhqHmB2uhEJaaXnXKqspHJCW39YHnu5f/0/3138312e3138392e37322e302f32322d3332203d3e20323731343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:4d:3f:d9:2b:c5:99:10:d5:e8:92:d1:b1:19:16:73:f1:d9:
         3d:53:02:31:d8:15:71:3d:f0:15:25:69:50:e4:a6:8c:4b:df:
         82:80:b1:e3:5c:73:6e:7d:12:b7:2b:70:af:19:dc:5b:56:04:
         de:41:c2:6d:29:67:ef:7f:c4:64:fb:05:55:6d:3b:0a:63:4b:
         c0:b6:e1:1c:b2:52:0e:6c:dc:e9:36:10:7f:dc:ec:e9:4f:14:
         65:a6:b9:6a:ed:40:93:d4:bb:8b:e7:96:a3:95:a0:91:a6:d7:
         c1:e5:c8:1d:5a:82:80:17:1c:ab:bf:9c:e9:cb:e8:5c:47:7f:
         af:e3:d4:62:c4:8d:a1:15:e8:04:7b:3c:d5:3b:9c:70:95:7e:
         ff:92:8c:80:f4:cd:60:a2:88:e8:c9:04:0c:0d:45:b9:8b:f8:
         c8:65:ae:75:44:86:9a:a5:0c:77:d6:60:aa:f9:17:a3:05:fc:
         4a:38:21:45:3d:d6:5c:5d:1b:44:69:3c:5d:3e:a0:78:d4:f8:
         81:6a:c1:3f:e0:8f:ab:e8:5e:d5:be:d9:04:bb:d7:65:00:db:
         a8:26:40:1c:9e:1d:92:56:83:f2:7e:a2:ab:b2:39:c5:10:b2:
         a2:b3:72:e8:03:20:d1:fa:99:82:71:84:e6:ed:05:d4:74:76:
         30:00:59:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:44 2025 by rpki-client