Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138362e3231362e3230382e302f32312d3231203d3e20323632393839.roa
File:                     3138362e3231362e3230382e302f32312d3231203d3e20323632393839.roa (raw, json)
Hash identifier:          DbWVXV3MMBc0BxcKx+cW1dLr/OfzTHiDK7bHD30HhrE=
Subject key identifier:   86:AA:37:F6:88:EE:36:F1:18:E2:31:44:80:2A:8F:97:ED:E8:63:15
Certificate issuer:       /CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8
Certificate serial:       038C8A71A22651E15975F33B38570740C891028C
Authority key identifier: 69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138362e3231362e3230382e302f32312d3231203d3e20323632393839.roa
Signing time:             Tue 07 Oct 2025 17:16:36 +0000
ROA not before:           Tue 07 Oct 2025 17:11:36 +0000
ROA not after:            Tue 06 Oct 2026 17:16:36 +0000
asID:                     262989
IP address blocks:        186.216.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8c:8a:71:a2:26:51:e1:59:75:f3:3b:38:57:07:40:c8:91:02:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8
        Validity
            Not Before: Oct  7 17:11:36 2025 GMT
            Not After : Oct  6 17:16:36 2026 GMT
        Subject: CN=86AA37F688EE36F118E23144802A8F97EDE86315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9b:30:aa:4b:85:6c:d2:ea:9a:f3:b6:1c:a5:
                    9e:e0:d6:92:3e:42:6a:7c:6e:3d:06:da:e1:55:f7:
                    93:63:4d:aa:4c:2d:bc:9b:5e:d9:9d:e7:21:34:40:
                    ec:de:37:a9:b7:5f:c7:b3:10:30:96:75:88:76:c0:
                    57:7b:2e:97:8c:d9:ec:7c:7b:4d:bc:6a:79:0d:95:
                    c8:76:f8:67:ed:d9:48:0f:f1:21:f5:fc:7a:83:96:
                    84:c0:b1:19:ad:57:77:ac:4b:51:d2:18:23:34:d9:
                    28:8a:24:7d:fd:5b:96:02:0a:5d:a5:1d:9b:09:3b:
                    f4:d0:20:e4:d0:68:b5:87:c6:b8:d9:9d:ed:a0:da:
                    ba:a1:f3:92:03:8b:99:a5:62:51:af:ce:65:91:13:
                    c0:a6:63:58:c3:d1:39:57:a7:49:b5:4b:5e:d1:84:
                    da:d6:68:66:74:84:0f:45:a8:74:fe:22:02:ec:47:
                    18:05:56:cd:b3:3e:ad:43:b0:81:54:09:65:8c:7a:
                    96:9b:e8:47:d7:4a:e3:75:24:cf:3f:6d:19:68:dc:
                    5d:e6:9a:61:64:78:40:20:64:51:56:52:4a:4d:3f:
                    5f:3c:7f:12:fb:d2:ba:19:67:47:86:bd:2f:ae:b9:
                    95:5c:d5:ae:d3:03:1e:f3:a6:74:df:2d:6f:08:f8:
                    2b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AA:37:F6:88:EE:36:F1:18:E2:31:44:80:2A:8F:97:ED:E8:63:15
            X509v3 Authority Key Identifier:
                keyid:69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138362e3231362e3230382e302f32312d3231203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:a6:99:62:57:0d:e4:61:c6:97:60:e7:bd:0d:4a:6c:c1:0c:
         02:53:4b:d1:8d:30:69:6f:fe:a5:d0:8d:4d:fd:8d:be:e8:ff:
         9c:90:8b:76:ae:b4:d2:0b:1d:d7:6b:d7:75:e5:66:8b:09:ea:
         1d:ab:d6:05:9a:6d:46:2d:d5:9d:3f:5b:98:6c:96:6d:e4:ee:
         b0:5e:2d:91:c3:9f:bd:84:4d:d7:b7:ac:95:01:ef:0f:18:5c:
         d4:9b:3a:09:e9:9a:ea:e5:3d:26:7c:87:7b:70:95:b4:7d:f8:
         92:09:42:28:48:db:ee:37:17:66:64:d9:6b:f3:eb:95:d3:1a:
         bc:6d:9e:eb:69:c3:fb:27:68:17:41:b8:c3:37:17:60:7c:6e:
         94:df:57:33:01:78:12:1e:fd:f0:c1:88:3b:9b:db:5e:56:fb:
         8c:cc:f3:85:8b:7f:2d:24:d7:6a:13:ed:16:48:88:44:fd:ea:
         b2:c6:9e:2a:0a:83:5c:dd:6b:f6:db:9e:92:f5:2e:db:72:94:
         52:6f:2c:df:db:6b:8c:f2:69:f1:ac:d5:46:b0:d8:b7:d4:55:
         e8:8b:f7:32:3c:32:74:f3:99:41:24:41:72:d0:a2:93:86:4a:
         54:d3:8d:d4:e4:f5:88:24:f6:11:02:fc:09:06:7d:aa:fe:27:
         2d:03:91:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:05 2025 by rpki-client