Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e38302e302f32302d3230203d3e203237363933.roa
File:                     3138362e3233362e38302e302f32302d3230203d3e203237363933.roa (raw, json)
Hash identifier:          cyIZ4NHOw7P1mfmCIzaXqQqZGVdpLMQNWisli6hYrX4=
Subject key identifier:   BA:9A:37:87:6D:25:BE:F9:9C:48:BB:59:80:0C:81:04:8C:FF:44:51
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       05FC9643F203DF5776BD6650B9B8FC218DD580BB
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e38302e302f32302d3230203d3e203237363933.roa
Signing time:             Tue 23 Sep 2025 15:19:33 +0000
ROA not before:           Tue 23 Sep 2025 15:14:33 +0000
ROA not after:            Tue 22 Sep 2026 15:19:33 +0000
asID:                     27693
IP address blocks:        186.236.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fc:96:43:f2:03:df:57:76:bd:66:50:b9:b8:fc:21:8d:d5:80:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Sep 23 15:14:33 2025 GMT
            Not After : Sep 22 15:19:33 2026 GMT
        Subject: CN=BA9A37876D25BEF99C48BB59800C81048CFF4451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e0:73:97:30:db:af:c7:5b:15:fe:8a:2d:f8:
                    b2:ba:84:04:a1:56:1d:fb:20:2f:61:5f:94:ef:53:
                    70:61:db:b1:28:37:95:53:81:1d:47:2b:73:1c:7d:
                    75:6a:76:f9:e0:cd:13:f5:20:23:03:23:88:ed:4c:
                    23:0f:ca:76:e5:cb:9e:84:3f:9f:75:d2:a8:98:74:
                    1d:37:67:ee:03:42:7f:dd:19:a4:8a:72:50:bf:6e:
                    f3:33:7a:f2:30:58:49:f1:8b:af:b9:6e:c7:9a:04:
                    a7:13:d1:d2:48:2e:bb:f9:bc:d5:7f:6a:56:7b:6b:
                    4d:ce:21:39:f7:20:10:08:23:04:98:5e:44:1d:57:
                    47:06:83:46:81:be:e8:fa:40:60:6e:78:4e:94:b6:
                    93:cc:20:f9:b6:b3:b8:52:81:e4:39:18:72:60:bd:
                    d4:08:ab:b9:e1:97:f6:4d:61:86:9c:2c:92:62:1e:
                    c7:99:55:4f:eb:f5:fd:b6:ac:1e:43:3a:eb:1e:4a:
                    6a:c7:45:56:5d:38:0a:c2:8a:e4:49:49:a4:ef:a6:
                    91:6e:6d:ca:8f:67:77:fb:9c:bf:57:4d:a0:fb:7a:
                    a0:ed:6e:07:8b:0e:29:ed:bb:bb:77:01:15:4e:f1:
                    5c:4e:00:01:29:47:51:79:2b:8b:d9:a2:7f:9f:af:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9A:37:87:6D:25:BE:F9:9C:48:BB:59:80:0C:81:04:8C:FF:44:51
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e38302e302f32302d3230203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:53:b8:b6:c9:03:2e:5f:e4:6d:c0:5d:a4:90:80:12:ab:42:
         46:9f:5e:6a:e6:db:99:86:0f:f6:0f:1b:4b:9c:16:36:d9:03:
         bb:73:22:ea:0f:2f:2a:f2:25:95:d8:e7:5d:0e:8e:ed:d4:d9:
         db:93:50:cb:16:e2:13:32:a8:16:c8:e6:de:5d:7e:b4:30:f5:
         b1:7e:24:c2:c2:ea:a4:16:99:bd:4f:ea:e8:6b:cb:85:4d:4a:
         cd:34:07:26:cd:ce:0e:f4:43:5f:da:4c:62:19:98:d0:ec:61:
         e1:97:1a:e8:0f:f4:b0:5a:50:49:ab:54:9d:05:a0:f1:22:90:
         bc:09:53:da:d6:d5:47:6d:c5:7f:e4:88:d1:f1:b2:c2:4f:96:
         5a:a6:ed:b0:87:0b:68:e0:3e:95:4b:c7:71:b2:50:14:b5:db:
         9c:f3:f9:0d:2a:49:f5:f3:5c:a1:d5:0e:19:9e:4e:99:99:89:
         42:97:b2:e5:c2:7a:73:6c:31:92:56:b9:72:4b:a9:a8:9f:5e:
         1b:4c:92:2c:98:05:e2:08:aa:87:21:c1:59:86:ce:8f:a7:91:
         44:58:ff:e6:42:76:25:1f:b3:36:7c:56:1e:cb:ca:1b:7e:d4:
         5e:99:6f:40:47:9b:7f:7d:e3:a3:ec:1b:db:38:e1:ca:f9:b1:
         ae:75:34:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:38:23 2025 by rpki-client