Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa
File:                     3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier:          sfP0JtMx8wk8bbHVWh5ubGBFLNB37QOuwYp9//enIpQ=
Subject key identifier:   DD:9A:18:88:34:BD:6C:B4:D4:A7:32:9D:95:64:04:77:C3:80:0C:AF
Certificate issuer:       /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Certificate serial:       6FD66D53AC1FCBCA437A407943939687C5106030
Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa
Signing time:             Sat 18 Oct 2025 23:01:05 +0000
ROA not before:           Sat 18 Oct 2025 22:56:05 +0000
ROA not after:            Sat 17 Oct 2026 23:01:05 +0000
asID:                     28270
IP address blocks:        186.219.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d6:6d:53:ac:1f:cb:ca:43:7a:40:79:43:93:96:87:c5:10:60:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
        Validity
            Not Before: Oct 18 22:56:05 2025 GMT
            Not After : Oct 17 23:01:05 2026 GMT
        Subject: CN=DD9A188834BD6CB4D4A7329D95640477C3800CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:10:ab:37:30:fd:37:85:d4:b0:a1:34:4f:e1:
                    f9:88:28:91:9c:18:b7:7b:24:24:f6:07:f4:c5:b9:
                    e4:81:19:96:e7:a0:c5:d8:2a:59:09:eb:ae:72:cb:
                    29:05:ad:83:51:5e:d0:38:e2:99:58:f0:04:56:6b:
                    ee:6a:ea:c7:f1:d5:3f:01:ee:eb:bd:06:be:e6:b8:
                    fd:18:b0:66:0f:cf:b2:51:78:0a:7d:97:e9:1d:d4:
                    63:d2:4a:e6:d9:11:26:c3:a7:b1:7b:92:6d:ed:fd:
                    1c:7a:e5:75:66:a8:c2:3a:f0:57:dd:5b:f5:95:a4:
                    a0:6d:dd:73:4c:ca:c9:d8:dd:47:f2:52:d1:63:9c:
                    93:2b:a0:9f:de:8b:17:dd:00:b3:be:ab:58:88:59:
                    ff:78:54:e1:dd:42:61:54:32:2d:c3:05:8c:b1:18:
                    88:1a:76:95:49:2a:af:84:c7:22:99:a0:a3:74:6a:
                    5d:7d:e2:8e:31:aa:dc:ba:ba:fe:28:03:c6:56:37:
                    d6:bc:da:bc:7a:60:c1:3d:ef:97:88:a7:2f:aa:c2:
                    22:bb:83:1a:dd:1e:f2:78:d9:85:81:34:9a:24:25:
                    30:47:e4:dc:17:cd:f0:31:7e:9b:91:7e:1f:1d:5c:
                    0f:55:5d:ba:4f:1e:5e:74:cb:09:35:8a:5b:57:1e:
                    8f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9A:18:88:34:BD:6C:B4:D4:A7:32:9D:95:64:04:77:C3:80:0C:AF
            X509v3 Authority Key Identifier:
                keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:28:d8:81:d3:01:b7:79:94:fc:96:7b:ab:42:9b:2f:ca:95:
         83:a6:cb:e9:54:ee:4b:81:9a:8c:06:a8:2c:1c:9c:b9:0d:4d:
         e6:cf:72:ee:44:99:bb:a4:b8:28:3f:73:f4:34:0a:ca:69:13:
         49:66:8f:a8:3c:5a:b4:d0:a8:1b:23:0b:72:0a:74:69:2b:b8:
         5b:bc:59:29:55:ef:23:39:83:f7:a0:46:9f:23:79:59:09:be:
         47:7c:8c:97:f9:d4:47:ea:ee:58:d0:20:94:ce:74:6f:82:bb:
         2b:c7:ce:aa:7e:38:2a:7a:00:b6:93:3a:13:dd:c5:b3:40:70:
         b3:bb:e1:64:8d:34:50:96:c5:9a:ae:45:15:9f:bf:9a:bf:18:
         33:e8:07:aa:21:37:87:27:d5:7a:d8:9b:1e:f8:c7:28:e4:4b:
         c4:4f:f5:ac:a8:b1:81:35:ca:67:df:eb:5f:1e:6d:60:4f:98:
         ad:1b:c7:f9:dc:b9:49:ed:05:ac:05:01:61:51:7a:f7:0d:40:
         54:78:e4:68:f1:c4:2b:c9:7d:d2:8a:c9:b4:33:60:74:ef:39:
         44:b5:71:66:f9:a4:69:14:cb:2c:3e:31:22:7a:c7:b0:11:b5:
         fc:fa:15:01:59:46:21:3c:ce:6e:a3:2d:9e:25:8b:9e:c9:77:
         20:cf:0f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:29:16 2025 by rpki-client