Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/3138362e3232372e3131322e302f32312d3234203d3e20323633303032.roa
File:                     3138362e3232372e3131322e302f32312d3234203d3e20323633303032.roa (raw, json)
Hash identifier:          PFiRRuFvDDNxIrkUiBtHc5gLLxwWpOR6yYBWtACfOH0=
Subject key identifier:   C2:91:72:AF:62:1F:AC:CA:84:2F:29:E9:1B:B0:19:0A:85:29:6C:CB
Certificate issuer:       /CN=9869B7BB10C305641024541DE28962BF2DFBF206
Certificate serial:       069B6005D9524CCA89D94076F59969369AD90077
Authority key identifier: 98:69:B7:BB:10:C3:05:64:10:24:54:1D:E2:89:62:BF:2D:FB:F2:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9869B7BB10C305641024541DE28962BF2DFBF206.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/3138362e3232372e3131322e302f32312d3234203d3e20323633303032.roa
Signing time:             Mon 15 Sep 2025 12:31:25 +0000
ROA not before:           Mon 15 Sep 2025 12:26:25 +0000
ROA not after:            Mon 14 Sep 2026 12:31:25 +0000
asID:                     263002
IP address blocks:        186.227.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/9869B7BB10C305641024541DE28962BF2DFBF206.crl
                          rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/9869B7BB10C305641024541DE28962BF2DFBF206.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9869B7BB10C305641024541DE28962BF2DFBF206.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9b:60:05:d9:52:4c:ca:89:d9:40:76:f5:99:69:36:9a:d9:00:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9869B7BB10C305641024541DE28962BF2DFBF206
        Validity
            Not Before: Sep 15 12:26:25 2025 GMT
            Not After : Sep 14 12:31:25 2026 GMT
        Subject: CN=C29172AF621FACCA842F29E91BB0190A85296CCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4f:c0:6c:d2:d9:3e:ea:3d:65:7d:6a:42:25:
                    5b:64:7e:f2:f9:39:8a:27:fd:db:3e:ae:f1:86:f6:
                    df:6c:6f:ed:2e:2e:64:ea:9c:2f:f0:7e:8d:2b:cd:
                    0e:3e:2a:2c:76:ad:6c:db:ad:79:75:f9:fd:ba:06:
                    16:84:2d:68:9c:ad:e0:cf:24:5f:56:8f:41:14:82:
                    a4:03:b5:dd:90:03:5b:2e:62:d3:8e:2f:2f:0b:c5:
                    2b:5a:3e:c6:3b:21:c8:c4:cd:52:17:b3:48:df:89:
                    bc:42:ca:72:7f:f8:55:51:fe:c8:ad:ed:15:bb:28:
                    68:09:d8:1d:24:0e:e3:1a:a2:90:09:3a:34:92:db:
                    a4:9d:d9:25:6b:a8:92:b6:b1:1c:06:14:4f:47:f9:
                    9e:a0:e5:b1:38:90:73:05:ea:3b:87:17:d8:5e:ed:
                    fe:23:7e:85:15:a0:d0:7a:46:11:00:b7:8e:38:03:
                    56:f1:ef:5c:98:95:a5:54:f5:64:69:ef:99:6f:c1:
                    5c:48:76:0b:8f:ea:27:fb:32:0a:a3:fe:bf:6d:aa:
                    d7:e1:bd:69:68:ec:ea:71:30:2d:4f:7d:15:ce:7e:
                    92:ba:fa:ff:cc:8c:0e:be:7d:93:34:b2:c7:69:16:
                    1a:e0:b9:24:17:bf:2a:86:f9:d1:6b:77:2d:be:2f:
                    45:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:91:72:AF:62:1F:AC:CA:84:2F:29:E9:1B:B0:19:0A:85:29:6C:CB
            X509v3 Authority Key Identifier:
                keyid:98:69:B7:BB:10:C3:05:64:10:24:54:1D:E2:89:62:BF:2D:FB:F2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/9869B7BB10C305641024541DE28962BF2DFBF206.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9869B7BB10C305641024541DE28962BF2DFBF206.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/3138362e3232372e3131322e302f32312d3234203d3e20323633303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:d8:34:2a:85:83:de:d1:7e:a5:3c:37:10:94:b3:23:5d:07:
         55:47:32:85:48:dd:17:3c:90:6d:f2:85:df:e6:f1:58:d4:09:
         ca:64:e4:54:c1:b9:c6:18:00:24:93:2a:28:ef:76:6f:29:69:
         e6:90:45:bc:98:a5:b0:3e:61:5a:c6:02:f9:89:a5:ec:fd:eb:
         20:64:e9:6c:91:a3:f2:99:39:35:a6:cb:6c:55:3e:dc:2a:90:
         e3:f4:92:c5:26:15:04:44:19:35:70:48:a6:2b:d0:c3:c5:23:
         4f:16:15:11:48:f8:8d:69:7e:fe:6b:34:1e:33:e4:e5:7e:35:
         7a:2b:16:36:49:b7:d8:54:e2:82:8c:a3:80:56:bb:bc:f6:cd:
         d1:df:dc:ad:39:4c:29:a6:02:df:3f:86:cc:49:5e:9d:c6:1c:
         f2:11:41:d9:d6:44:a2:51:e2:a1:21:0b:09:44:01:53:3e:8b:
         06:19:e7:bf:a3:75:91:7e:c1:86:45:21:dc:c0:a5:a6:e0:c5:
         70:74:f8:aa:f5:83:b5:95:0c:f2:52:e4:96:c0:f4:1c:7c:9e:
         cb:97:c5:d8:3e:8a:28:4f:37:fa:b7:c5:3f:41:40:95:99:06:
         a4:cf:4e:f7:cd:9d:41:f6:7f:65:d9:65:23:5e:f5:18:53:e1:
         3b:2f:75:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:21:17 2025 by rpki-client