Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3138362e3233332e3139322e302f32312d3332203d3e20323632373931.roa
File:                     3138362e3233332e3139322e302f32312d3332203d3e20323632373931.roa (raw, json)
Hash identifier:          RbBI3L+SmbAQ29IEd/nzNXiL8h8J44CD73Mpttmb714=
Subject key identifier:   4A:41:88:08:66:00:62:D8:F1:97:ED:4E:6B:D8:E4:CB:38:65:19:BA
Certificate issuer:       /CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Certificate serial:       3A9F0A27F3D1BD7C9EF4CECE55020F0DCAEB4F5A
Authority key identifier: 69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3138362e3233332e3139322e302f32312d3332203d3e20323632373931.roa
Signing time:             Thu 09 Oct 2025 14:32:39 +0000
ROA not before:           Thu 09 Oct 2025 14:27:39 +0000
ROA not after:            Thu 08 Oct 2026 14:32:39 +0000
asID:                     262791
IP address blocks:        186.233.192.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl
                          rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:37:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:9f:0a:27:f3:d1:bd:7c:9e:f4:ce:ce:55:02:0f:0d:ca:eb:4f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
        Validity
            Not Before: Oct  9 14:27:39 2025 GMT
            Not After : Oct  8 14:32:39 2026 GMT
        Subject: CN=4A418808660062D8F197ED4E6BD8E4CB386519BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b8:83:2f:c9:4b:29:71:70:e9:bf:0e:5a:3c:
                    8c:24:e6:13:47:04:96:03:c5:f7:26:e8:b5:73:be:
                    cb:4b:05:51:79:73:bf:23:fb:55:f7:29:92:0a:9a:
                    0d:f3:ec:5c:13:58:86:aa:d4:b9:f6:d2:f6:c2:75:
                    73:83:81:5a:fd:92:c1:fa:c5:0e:15:8b:f0:3e:2b:
                    1b:9a:df:19:9f:6a:bb:7c:8a:0a:d5:86:b3:e5:85:
                    19:13:1c:dd:d4:32:a9:62:9f:4b:d2:55:a0:79:e0:
                    08:7c:a9:8d:b4:44:c1:f8:6c:a7:ca:6d:81:14:1d:
                    94:d3:aa:89:4f:32:00:c7:6f:a4:90:97:09:d5:c0:
                    8c:12:2a:80:67:bb:f5:dd:ae:72:7f:c6:6f:60:ec:
                    03:f7:39:f6:5c:92:cb:eb:da:ec:5f:2f:32:00:c0:
                    f2:02:3f:7d:82:a4:b3:9a:64:e7:00:dc:19:61:4c:
                    81:2a:dc:73:ed:10:68:0b:6f:48:18:17:f9:16:31:
                    e0:7e:1f:9a:2e:4b:fc:b7:88:7b:c0:b5:c4:16:8e:
                    9f:4c:56:51:df:c7:2c:cf:99:ee:77:79:5d:4a:2d:
                    38:d3:f4:27:9f:c1:e3:ee:55:15:21:71:02:ea:df:
                    73:56:72:70:a8:c3:94:71:03:9e:db:be:8e:0c:fc:
                    4b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:41:88:08:66:00:62:D8:F1:97:ED:4E:6B:D8:E4:CB:38:65:19:BA
            X509v3 Authority Key Identifier:
                keyid:69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3138362e3233332e3139322e302f32312d3332203d3e20323632373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a8:f4:26:df:17:66:6e:87:90:fd:01:64:0a:de:b2:0c:92:b8:
         af:3b:9a:b1:ba:91:bf:f0:4d:6a:e1:0b:c6:ac:9e:4f:16:c2:
         b9:64:09:e7:b8:e6:26:bc:94:00:f8:b3:65:46:27:f5:9d:60:
         8b:0f:ab:7d:f7:64:bc:8c:40:80:21:c1:63:d0:b4:2b:3b:d6:
         6e:b1:c9:d4:27:a7:ac:87:f0:6e:71:a4:7b:18:0b:af:b3:67:
         98:4d:0b:36:78:da:49:5a:10:9f:09:2f:8c:a7:ef:93:ab:d9:
         54:21:77:70:ec:fe:fe:51:60:32:e3:90:8b:25:3a:e7:4b:65:
         bd:34:da:2a:7c:08:3b:fd:16:cd:ca:c7:08:f8:61:2a:ec:f4:
         6d:97:c1:e2:22:cd:06:91:e1:43:d9:a5:55:42:47:bd:2e:47:
         ed:e6:07:13:26:45:24:f2:65:3b:b6:92:95:f4:d6:2c:ca:2b:
         80:8f:b8:21:a3:05:d1:35:f7:26:b5:bc:74:17:23:37:bf:bb:
         0f:f6:5a:19:5d:04:42:55:a4:60:d3:cf:27:7b:1e:27:85:af:
         93:54:09:b4:a1:d3:04:8a:78:25:6b:29:8e:38:79:a0:42:59:
         49:dd:0c:07:9f:6a:75:e5:d7:0c:21:8c:89:0f:92:22:6d:b3:
         ee:df:10:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:29:39 2025 by rpki-client