Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230392e302f32342d3234203d3e203238323730.roa
File:                     3138372e3131302e3230392e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          NL8ygBDGkKbhzcPhV87P0YGHJ3MnEn/lYQlwXNy+3Yw=
Subject key identifier:   7B:E3:69:F0:17:6F:6C:E2:C2:13:F1:E2:BE:52:AD:4B:99:9A:D6:BD
Certificate issuer:       /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Certificate serial:       211EFF7C011F44CB2C3356669A85E6AFF37925F9
Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230392e302f32342d3234203d3e203238323730.roa
Signing time:             Mon 20 Oct 2025 12:26:26 +0000
ROA not before:           Mon 20 Oct 2025 12:21:26 +0000
ROA not after:            Mon 19 Oct 2026 12:26:26 +0000
asID:                     28270
IP address blocks:        187.110.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1e:ff:7c:01:1f:44:cb:2c:33:56:66:9a:85:e6:af:f3:79:25:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
        Validity
            Not Before: Oct 20 12:21:26 2025 GMT
            Not After : Oct 19 12:26:26 2026 GMT
        Subject: CN=7BE369F0176F6CE2C213F1E2BE52AD4B999AD6BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:b1:a3:93:9e:2a:c3:6e:bf:28:fd:37:02:
                    1c:a9:80:36:c0:a4:da:41:8f:47:e7:4d:7c:f8:95:
                    89:ea:63:a7:d7:eb:af:bb:09:33:b4:25:b7:69:cd:
                    a4:6c:8a:a8:ea:83:21:a2:94:1d:cc:2f:68:ff:86:
                    3b:1a:d7:05:02:bc:57:2d:41:d7:d7:c7:bc:f0:5c:
                    3e:4c:59:83:f9:75:3f:e6:dd:81:7e:3b:15:01:d5:
                    05:32:ed:01:84:b4:9f:1b:a4:9a:aa:1b:86:b5:f7:
                    7f:a0:f9:18:70:80:03:85:2d:ea:f8:86:2f:55:f2:
                    30:35:c0:ec:3c:d0:a5:ad:08:3c:a6:bd:6d:fd:f8:
                    53:98:8a:fa:bd:b2:76:76:b8:8b:df:7e:70:79:bd:
                    01:43:c6:7f:79:4a:f3:49:72:92:40:9e:23:5d:f5:
                    15:fa:fe:47:09:2c:c7:69:46:c9:6d:6c:65:35:80:
                    cf:67:c2:9e:f4:c8:b2:ce:d0:9a:2f:ab:94:ae:7d:
                    8f:e2:0d:0d:48:21:54:f2:27:1f:bf:07:3d:53:a7:
                    94:fc:e7:09:8a:4f:e9:4e:e9:0a:5d:84:3c:7b:3f:
                    f3:ba:32:af:16:e2:8e:60:9d:9d:06:41:80:0e:32:
                    17:23:d9:80:1c:3e:cc:8c:44:4a:72:3b:7c:3a:ed:
                    2a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E3:69:F0:17:6F:6C:E2:C2:13:F1:E2:BE:52:AD:4B:99:9A:D6:BD
            X509v3 Authority Key Identifier:
                keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230392e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:5c:2c:5a:e1:17:4a:6a:ea:34:86:26:5e:d7:32:de:f8:d6:
         41:b4:d7:68:2c:12:17:81:85:18:1e:7e:9d:04:38:e1:a8:b8:
         7e:b4:5d:c6:15:6d:2c:ec:ae:09:37:b0:fb:4b:53:61:73:df:
         2e:e5:db:e5:5f:bd:59:32:41:a2:cc:87:73:05:f3:62:e4:2b:
         87:31:a6:5c:3b:0e:96:19:77:8f:ce:d5:bb:df:d0:34:ff:4b:
         70:e0:c7:aa:93:ca:45:0c:53:9e:cf:41:4b:59:76:3b:73:4b:
         dc:33:bb:cf:fb:41:78:31:1a:c6:e9:97:45:c7:e9:e9:3a:ef:
         15:7f:e9:48:14:c9:45:7b:89:a5:c1:5c:fe:ee:a6:65:ac:0b:
         ed:69:0f:cb:43:b6:ac:e4:03:2c:b7:ea:ea:68:bf:b3:84:39:
         f8:5c:ee:78:68:c9:dd:28:95:a2:76:ae:f0:72:54:82:51:bd:
         71:c8:36:fb:2c:43:81:8f:e4:c7:2b:3a:68:55:8e:02:7a:cd:
         77:af:ee:93:91:fd:d8:0b:23:21:08:c5:3e:fb:79:dd:1b:10:
         f1:58:d2:fc:bd:12:d0:4e:e2:e9:f1:e3:e7:14:df:11:7e:6e:
         ce:44:bc:19:22:79:39:72:c4:41:3b:b8:31:75:bc:69:83:07:
         f7:6a:e9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:45:54 2025 by rpki-client