Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32342d3234203d3e203238323230.roa
File:                     3138372e3131302e3230382e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          JDoo61jjuaXdNal/JhmNSCRMDUnYBNpRdEYbxJJ8y+0=
Subject key identifier:   A0:10:D1:A7:BC:82:2C:FF:2F:B5:BE:A9:04:63:BC:D4:4A:6A:C5:32
Certificate issuer:       /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Certificate serial:       2D282C1C1B6A80A5298C9B86C1B8BC497D128840
Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32342d3234203d3e203238323230.roa
Signing time:             Sat 18 Oct 2025 23:01:06 +0000
ROA not before:           Sat 18 Oct 2025 22:56:06 +0000
ROA not after:            Sat 17 Oct 2026 23:01:06 +0000
asID:                     28220
IP address blocks:        187.110.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:28:2c:1c:1b:6a:80:a5:29:8c:9b:86:c1:b8:bc:49:7d:12:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
        Validity
            Not Before: Oct 18 22:56:06 2025 GMT
            Not After : Oct 17 23:01:06 2026 GMT
        Subject: CN=A010D1A7BC822CFF2FB5BEA90463BCD44A6AC532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:86:bd:68:00:c1:8a:bb:de:b0:e3:5b:9e:
                    67:f1:38:82:3b:23:5b:70:6a:39:0a:40:c8:fc:55:
                    e4:28:72:7e:91:67:af:f9:dd:a4:ac:6c:63:40:c5:
                    61:e4:bd:73:0f:a0:c9:23:18:2e:f8:f8:26:db:a4:
                    a4:55:b1:23:9a:ae:b0:67:a9:72:68:bf:27:5e:7a:
                    1d:ab:a1:8a:de:93:48:d9:96:81:ee:4f:a1:9f:2f:
                    18:05:61:80:36:17:7d:ba:60:e9:29:62:a3:6d:d1:
                    13:d7:3c:40:a0:2c:74:22:01:7f:c7:9b:e7:66:72:
                    a4:c8:32:84:93:47:24:5a:ab:49:33:ac:33:f1:b0:
                    18:a1:4f:d2:63:97:26:1a:fe:e2:e5:89:bd:84:88:
                    1f:be:14:2d:5f:a6:49:b9:fa:58:fb:4e:a7:53:ac:
                    c5:39:10:f0:d7:c7:97:58:83:e2:d9:d7:81:f1:53:
                    a8:0b:ac:71:6c:20:69:02:3e:ef:e4:16:72:2e:ec:
                    80:12:e1:60:b1:40:69:17:67:66:a4:49:8f:79:10:
                    86:5b:46:f3:91:27:33:39:83:74:61:d8:fc:64:58:
                    a7:e7:c2:2a:b3:cf:cb:31:c7:44:d8:d1:62:f8:c2:
                    cd:7d:ad:7f:79:9b:da:5c:13:d8:54:dd:69:10:70:
                    70:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:10:D1:A7:BC:82:2C:FF:2F:B5:BE:A9:04:63:BC:D4:4A:6A:C5:32
            X509v3 Authority Key Identifier:
                keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:98:66:de:1b:b5:07:84:fb:16:2b:97:b1:47:c0:ad:83:c2:
         d4:38:74:34:53:68:81:b6:6f:27:67:49:4d:d5:a9:c6:8d:20:
         2b:1f:33:cb:ab:aa:0d:6b:0c:15:93:d3:04:ad:dd:9c:c5:cd:
         38:37:fb:a6:64:91:91:5c:bf:f0:d0:a1:66:70:aa:f2:9a:cd:
         91:c2:f5:cd:c9:e2:ee:c7:6c:97:7a:d7:c7:be:14:a2:16:2e:
         92:02:de:40:03:b0:14:8a:9d:c4:e7:14:e9:53:8f:f2:19:25:
         6a:e7:eb:27:d2:37:23:b4:72:5c:91:a0:d9:61:47:9e:9f:e3:
         8d:e6:31:9c:4f:0d:e6:29:a6:dc:23:2b:39:17:95:23:8a:1e:
         8d:d0:9a:ad:4d:3d:8b:46:c6:eb:a9:e4:1e:f4:85:ef:68:a1:
         b7:62:6d:86:94:14:d4:af:3c:bf:c0:e7:d4:d7:32:e3:15:b9:
         29:64:c6:85:3e:90:4e:f6:98:be:f9:11:79:e8:1c:a7:a7:77:
         3d:72:f7:77:29:6f:e0:49:b3:bf:8c:09:ed:e7:90:80:b9:a8:
         bf:82:b1:10:4e:af:46:0a:d0:31:c7:cc:d9:93:79:fa:47:29:
         6e:65:80:a2:e8:1b:82:5b:21:e3:ad:e4:47:28:9d:9f:fe:3f:
         54:8e:f8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:45:49 2025 by rpki-client