Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e36342e302f32302d3230203d3e203237363933.roa
File:                     3138362e3233362e36342e302f32302d3230203d3e203237363933.roa (raw, json)
Hash identifier:          bThuXe1ecbn9y/8fkkYnHzOA7YrWk8C0wNXEhfeLzmA=
Subject key identifier:   BF:A7:78:61:D2:17:D8:B9:C6:0E:3E:52:33:0C:65:66:9A:DD:17:F5
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       4ACF7C38C0F899B1012A0F16B74339FF0D318936
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e36342e302f32302d3230203d3e203237363933.roa
Signing time:             Tue 23 Sep 2025 15:19:34 +0000
ROA not before:           Tue 23 Sep 2025 15:14:34 +0000
ROA not after:            Tue 22 Sep 2026 15:19:34 +0000
asID:                     27693
IP address blocks:        186.236.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:cf:7c:38:c0:f8:99:b1:01:2a:0f:16:b7:43:39:ff:0d:31:89:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Sep 23 15:14:34 2025 GMT
            Not After : Sep 22 15:19:34 2026 GMT
        Subject: CN=BFA77861D217D8B9C60E3E52330C65669ADD17F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:4e:9c:8a:4d:ef:1e:d0:c0:8c:cc:5c:b4:
                    9c:c2:36:1d:2c:e3:dc:56:d7:02:f4:00:39:9c:10:
                    6e:c1:7d:39:1e:91:ab:1e:3d:61:9f:76:b4:2f:3c:
                    3c:85:17:e2:c4:02:4f:1a:6d:c4:3a:5c:ae:36:74:
                    6b:f3:34:60:a1:a8:2d:3f:3e:b4:5e:f2:33:4b:73:
                    e7:2f:35:fb:83:1d:f2:63:65:cd:4f:15:14:c2:ca:
                    28:83:d9:53:83:16:c0:a2:c1:35:f0:f4:17:bc:2d:
                    5d:90:0f:ac:d2:f1:41:0d:8a:91:d0:28:48:2e:ff:
                    c9:fd:fc:21:88:b3:a3:e0:a8:4e:d4:95:35:4d:aa:
                    e2:f2:c1:06:52:36:61:e6:e6:96:cb:cf:6e:b0:3e:
                    b1:cd:d5:49:00:66:05:99:6b:f5:9f:25:1d:dd:61:
                    5d:17:45:a6:c0:a4:c9:06:40:cc:0e:e3:04:50:c9:
                    e5:f2:c9:d0:cb:b2:f9:62:dc:ed:5a:16:ce:cd:29:
                    b3:0e:39:72:6b:c6:81:63:54:c4:8d:2c:42:c8:ac:
                    b8:54:8a:aa:eb:f4:4b:91:78:aa:98:3c:52:80:d5:
                    57:03:f2:f2:3d:b8:d0:31:40:d4:b9:73:25:25:08:
                    49:32:f2:2c:81:f1:17:ca:1b:5f:51:dc:d3:09:38:
                    fe:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A7:78:61:D2:17:D8:B9:C6:0E:3E:52:33:0C:65:66:9A:DD:17:F5
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e36342e302f32302d3230203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:ab:bd:5a:db:13:12:4a:32:c7:f2:6a:98:c8:1f:10:85:77:
         e9:1a:b5:b7:32:d4:b4:42:59:1f:cf:e7:c2:36:df:50:63:f8:
         68:44:df:29:b1:36:69:59:9a:eb:59:90:fe:ad:86:b9:cb:dc:
         8e:41:f2:c8:77:c7:1c:0b:9c:ba:6d:7c:ac:8b:df:dd:63:71:
         08:72:d8:8e:87:67:f4:af:91:da:6a:37:cb:ee:52:52:96:51:
         3d:ca:d5:91:0f:65:83:82:d6:e1:3a:71:55:17:86:65:01:0a:
         eb:af:d3:a6:5f:92:43:6c:9c:f3:e2:c7:c0:21:e4:e0:15:e7:
         58:24:15:25:33:e2:98:9d:94:ef:db:ce:a7:80:76:e6:c2:8b:
         2e:14:f4:a0:75:25:53:0a:25:c2:7b:5d:c8:20:ad:06:22:f9:
         a3:97:8e:af:13:4e:45:57:82:68:00:cc:34:15:01:89:e6:c9:
         aa:64:e7:dc:85:5e:19:77:47:26:20:49:78:ff:7b:84:3f:92:
         54:ad:fd:2d:6c:af:05:d4:a1:ab:d8:75:e5:9a:72:d5:19:24:
         06:11:2a:24:53:b6:4d:17:ee:be:78:7e:14:5c:47:64:77:bb:
         33:0c:a8:03:c0:d6:85:97:0c:55:5d:1c:64:ef:5b:16:ba:74:
         ea:1b:ca:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:38:33 2025 by rpki-client