Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3132382e302f31372d3137203d3e203238323730.roa
File:                     3138372e31382e3132382e302f31372d3137203d3e203238323730.roa (raw, json)
Hash identifier:          LPIjfmfu4K0hed65yeSjhSYWivIU2A+C6VEkwRx9+KQ=
Subject key identifier:   2B:1B:D3:03:F0:FB:83:C0:9A:16:81:EE:53:7C:62:29:76:4E:9B:E0
Certificate issuer:       /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Certificate serial:       24786C665F23AB58FBE128D0049DDDDA601DB39E
Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3132382e302f31372d3137203d3e203238323730.roa
Signing time:             Sat 18 Oct 2025 23:01:03 +0000
ROA not before:           Sat 18 Oct 2025 22:56:03 +0000
ROA not after:            Sat 17 Oct 2026 23:01:03 +0000
asID:                     28270
IP address blocks:        187.18.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:78:6c:66:5f:23:ab:58:fb:e1:28:d0:04:9d:dd:da:60:1d:b3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
        Validity
            Not Before: Oct 18 22:56:03 2025 GMT
            Not After : Oct 17 23:01:03 2026 GMT
        Subject: CN=2B1BD303F0FB83C09A1681EE537C6229764E9BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:fe:fa:10:99:04:59:17:22:32:fb:36:31:
                    82:04:fd:cc:3d:2e:99:5b:59:e1:35:4b:14:a1:fb:
                    48:a4:f7:e0:4c:3c:85:aa:1d:49:f3:01:3b:28:c2:
                    67:f1:82:4f:33:c2:cc:dc:45:75:5b:eb:dc:3b:24:
                    c3:f5:e2:3f:f3:21:14:84:96:98:f4:77:e1:ec:76:
                    ea:1a:6e:d3:4c:4b:32:0a:81:d6:8e:e8:b2:81:c2:
                    bf:04:5c:71:eb:47:fc:2b:fb:42:34:e9:07:45:d0:
                    e6:3f:28:e7:fc:30:dc:ab:4a:7c:78:50:b3:57:cd:
                    f1:55:aa:c4:5a:aa:70:b3:05:4a:23:18:55:c5:84:
                    9b:54:5a:5e:4c:af:17:3d:b2:66:22:ce:55:7e:53:
                    7f:89:2a:af:c9:6f:3a:dc:f4:31:f5:b0:ab:2a:6f:
                    11:44:bc:b2:5a:e5:3f:47:f6:2e:4a:c8:aa:21:da:
                    f4:fe:65:2e:e6:a0:3b:62:e1:49:35:90:36:68:9c:
                    86:72:bf:10:7c:ba:04:7a:a0:c9:35:bc:38:6f:ee:
                    df:ee:25:b6:72:eb:0d:13:da:01:aa:a3:70:a7:89:
                    76:9a:90:0c:c0:fd:9f:59:81:de:df:72:f8:cc:a9:
                    98:7a:27:5d:4a:18:3f:72:0a:4e:db:99:0b:16:6b:
                    cf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1B:D3:03:F0:FB:83:C0:9A:16:81:EE:53:7C:62:29:76:4E:9B:E0
            X509v3 Authority Key Identifier:
                keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3132382e302f31372d3137203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.18.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         46:af:c8:99:be:a0:2a:fe:88:5f:f2:fd:ad:6d:45:1a:2a:a7:
         30:05:05:4e:22:f5:fe:68:80:14:d1:38:5a:26:fb:5c:20:bd:
         ce:4a:ae:48:07:5a:41:15:1e:37:3b:f4:18:59:77:2b:9c:9d:
         f6:6f:a5:5c:54:3c:11:c2:d4:01:a8:7b:cd:80:45:fa:92:1f:
         ed:db:5a:7a:40:cf:7a:5d:27:eb:c1:c6:2d:a3:21:3b:e1:7e:
         39:d2:6d:57:a2:c8:67:31:31:e1:46:75:f9:57:c3:bf:ca:c2:
         44:4d:26:ae:d8:ff:ca:b4:96:6e:ad:15:6a:4b:7f:f7:24:3f:
         3c:29:e4:03:25:3e:d6:2f:c9:4e:09:85:75:11:3b:39:ea:e0:
         d7:2a:7d:16:f8:65:76:4c:91:37:12:09:d1:86:4c:33:6f:8b:
         81:77:4c:35:40:c2:73:df:bc:df:bc:5d:ea:86:8e:fc:a7:d6:
         f1:75:f6:0d:3b:00:59:0a:49:93:a3:fd:5e:d2:57:28:de:38:
         54:d9:a0:e0:05:6b:fb:24:84:d6:f4:1a:71:1c:9f:82:6d:15:
         e0:99:90:d4:32:82:e1:03:fc:e1:28:ff:9d:75:57:05:3b:05:
         bb:fb:82:de:c4:82:a4:20:2c:c1:8b:c5:31:fa:b9:8c:f2:63:
         f6:b5:c9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:35 2025 by rpki-client