Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa
File:                     3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          Hjn+GLYywyA8wrpzN28dowZ0OeK2NL7tbiCJtgy0z+g=
Subject key identifier:   EC:BF:36:76:09:A2:4A:52:B8:62:22:28:88:27:03:E2:FE:C9:F0:DB
Certificate issuer:       /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Certificate serial:       7CBAE9D9F4C2FEF964A3DB79CF15AC7BE681DDD0
Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa
Signing time:             Sat 18 Oct 2025 23:01:02 +0000
ROA not before:           Sat 18 Oct 2025 22:56:02 +0000
ROA not after:            Sat 17 Oct 2026 23:01:02 +0000
asID:                     271724
IP address blocks:        187.110.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ba:e9:d9:f4:c2:fe:f9:64:a3:db:79:cf:15:ac:7b:e6:81:dd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
        Validity
            Not Before: Oct 18 22:56:02 2025 GMT
            Not After : Oct 17 23:01:02 2026 GMT
        Subject: CN=ECBF367609A24A52B8622228882703E2FEC9F0DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3d:d8:9d:52:4b:0b:67:84:b0:88:03:dc:e9:
                    c0:1f:39:6d:52:0c:49:fe:55:da:2a:cc:67:3b:d0:
                    dd:c8:79:3b:0f:d7:15:7c:ad:06:e4:44:91:e2:aa:
                    ea:8b:d6:62:ea:18:c0:6d:bc:ed:03:cb:91:8f:e2:
                    5a:30:1d:2a:80:1a:51:dc:b2:60:68:0c:32:04:f3:
                    c0:41:04:0d:b9:b1:a7:3c:aa:1b:81:f5:b6:8e:b1:
                    69:4d:ba:06:45:3b:ee:06:99:93:b2:f5:d6:2a:0a:
                    34:81:af:12:6e:9a:ee:37:d7:88:91:8c:d0:a7:cb:
                    b5:c5:b5:84:aa:81:2c:a1:8f:e9:fc:97:12:f0:5a:
                    03:61:25:9a:19:93:fe:0e:ed:d8:97:f7:c9:24:5d:
                    48:50:41:c3:53:b6:a5:95:ca:28:47:1b:1a:10:0e:
                    48:6c:f5:e9:d0:c2:d5:c8:45:97:c1:5e:59:62:8e:
                    83:6d:a9:c3:f8:a3:84:e2:62:22:fe:4a:fb:2a:57:
                    e8:df:7e:4b:5b:0e:e6:da:03:0a:41:a7:7b:eb:b7:
                    b1:54:95:c9:11:0c:0c:fa:49:af:0a:44:70:63:4b:
                    40:2c:df:c8:ce:aa:3c:fe:58:ee:f7:a7:35:d7:f5:
                    35:61:64:af:1c:f6:5f:8b:36:8a:8d:97:aa:8d:d7:
                    99:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BF:36:76:09:A2:4A:52:B8:62:22:28:88:27:03:E2:FE:C9:F0:DB
            X509v3 Authority Key Identifier:
                keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:94:60:6f:08:d1:dc:45:d6:cb:83:9c:f0:d1:b4:5b:37:0f:
         cf:64:0f:58:56:6f:fb:01:51:d0:58:ad:81:89:4d:65:52:8c:
         de:54:f1:20:b4:04:51:3e:0d:94:b2:b7:ac:bc:29:87:10:c9:
         72:bd:17:91:07:2e:b6:ae:be:d4:b1:12:a3:b7:e1:c9:b7:8f:
         ad:7f:53:9d:e6:19:5a:c1:73:9e:1b:6b:99:81:a8:c4:d2:b4:
         6d:05:5d:28:a7:58:56:00:c3:c1:1d:e1:d0:f0:90:cc:2b:39:
         6b:93:8c:06:0c:bc:44:c5:a8:a0:45:9c:45:fd:cb:a0:6d:6b:
         20:5e:4c:86:b8:20:0f:e3:f9:dc:ab:95:a6:70:4a:2a:51:fb:
         13:cd:eb:2d:79:7f:e2:ef:a2:d6:99:3a:f2:25:8e:ee:32:60:
         79:e0:60:d3:da:8c:34:c8:f8:06:01:4e:53:66:e3:5c:12:7f:
         b5:90:50:2a:13:64:98:0e:c8:ec:01:8b:43:93:e0:31:18:c9:
         28:9a:fb:91:14:1b:19:4e:bf:ce:72:1e:bb:18:08:a8:3e:b4:
         9e:7c:e6:fb:d4:41:45:c2:18:b0:fa:1c:85:4a:ec:e4:a1:6e:
         5e:59:56:a1:b6:bc:8a:da:f8:09:2f:df:ae:5b:ab:16:08:06:
         48:95:b6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:44:42 2025 by rpki-client