Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e36342e302f32312d3231203d3e203237363933.roa
File:                     3138362e3233362e36342e302f32312d3231203d3e203237363933.roa (raw, json)
Hash identifier:          r9v7c6+MvVlGyw1ZS98NKGZGtciCpyAZW8brx8BtGbM=
Subject key identifier:   E1:D9:16:15:2A:DB:D6:30:D9:0C:47:9E:1E:FA:64:FD:05:48:D8:21
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       6BC7B9EFF43698A8DBE6245A8552592D5A5837FE
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e36342e302f32312d3231203d3e203237363933.roa
Signing time:             Tue 23 Sep 2025 15:19:32 +0000
ROA not before:           Tue 23 Sep 2025 15:14:32 +0000
ROA not after:            Tue 22 Sep 2026 15:19:32 +0000
asID:                     27693
IP address blocks:        186.236.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c7:b9:ef:f4:36:98:a8:db:e6:24:5a:85:52:59:2d:5a:58:37:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Sep 23 15:14:32 2025 GMT
            Not After : Sep 22 15:19:32 2026 GMT
        Subject: CN=E1D916152ADBD630D90C479E1EFA64FD0548D821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c7:a0:f9:71:a8:2e:c3:ec:2c:e3:2a:e0:7d:
                    cb:4a:f7:8e:3a:76:2b:70:c1:1d:e5:6c:76:2d:03:
                    27:41:1e:dd:bf:f2:3e:80:7a:97:af:b9:50:09:d9:
                    4b:9f:5f:13:24:04:03:5d:84:b5:21:fe:79:e5:dd:
                    7e:ea:f9:28:6d:d9:1a:90:e9:33:ca:16:e6:45:43:
                    d0:27:35:1d:92:93:e7:8d:76:c8:ab:3b:1f:57:74:
                    aa:25:d3:31:4f:a5:4e:fd:28:d2:c7:1f:89:74:7b:
                    ea:ee:54:26:b2:da:e3:5b:aa:f5:0a:ce:be:a2:61:
                    17:8f:47:7d:42:68:e2:af:0f:34:0e:76:ee:51:97:
                    d6:f1:99:f4:a4:22:9c:99:c2:06:6b:2b:40:fc:16:
                    63:1e:68:de:53:cb:92:cb:8c:9b:0c:e1:64:2e:d3:
                    c9:aa:34:6d:87:6a:d1:52:f2:98:01:b7:e0:7d:98:
                    7c:a9:af:47:45:37:8c:d6:94:63:af:c9:04:e7:10:
                    1d:9c:2b:6f:1b:4c:d4:c8:86:34:83:be:b3:19:87:
                    17:3b:db:81:b6:c2:9d:b4:15:3f:85:50:2d:2e:39:
                    15:45:ed:fa:dc:c0:b6:d5:e3:e0:d0:ab:4a:8d:e9:
                    e5:05:97:a8:c7:bf:9a:ac:91:59:d6:b2:21:d1:fa:
                    c8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D9:16:15:2A:DB:D6:30:D9:0C:47:9E:1E:FA:64:FD:05:48:D8:21
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e36342e302f32312d3231203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:e9:4e:01:a3:02:65:fb:2c:4a:d3:50:a5:0a:de:07:18:5e:
         ff:6c:07:ac:17:da:8e:9e:71:6b:4d:fe:72:b7:48:03:35:cf:
         86:69:44:99:9a:de:61:de:26:03:7a:36:f6:95:c1:5b:bc:ed:
         9b:2a:2e:2f:89:79:50:99:ee:99:00:76:30:eb:14:c5:83:1b:
         2e:15:69:18:2b:84:09:18:64:d7:1a:5e:61:4a:1a:a0:ac:76:
         ef:d4:30:10:92:3a:e0:56:0a:f6:ea:a9:d3:e6:16:3a:b0:55:
         98:d6:be:a0:6e:09:0c:44:3a:01:26:7a:af:e0:f5:50:9c:c3:
         9b:a8:d2:38:2f:1b:bc:bc:ac:9a:87:55:02:92:a5:50:f6:f3:
         fd:5b:06:80:c3:ec:5d:36:60:46:95:d3:55:d9:ee:3d:31:3b:
         bf:e6:47:f8:0d:52:31:32:ee:fa:81:1f:c8:6a:5d:cd:26:f5:
         f2:37:cd:a3:98:4f:f2:54:ea:2c:9b:ff:a3:9f:d8:0d:de:39:
         48:2b:ca:17:1b:86:de:0e:3b:0d:7f:a4:32:42:f3:51:fd:41:
         f3:66:92:7e:e4:1a:d7:48:8d:34:a0:9e:6a:e7:a1:d9:53:62:
         fd:c2:c4:a9:80:e3:4e:df:bb:7e:d6:2d:fb:b2:ac:b1:5e:6a:
         32:78:83:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:54:50 2025 by rpki-client