Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32312d3231203d3e203237363933.roa
File:                     3138392e3132372e302e302f32312d3231203d3e203237363933.roa (raw, json)
Hash identifier:          phjk3X09XeYqTicVIf6mkYwGuYaVoqO7CXTBlC+zLhQ=
Subject key identifier:   2F:85:AE:C0:58:8E:4E:DE:5F:AA:4F:AD:20:20:F1:AE:7E:B0:E0:5D
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       02022FBE8D0B9487501F6452F21AD276536C8E9D
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32312d3231203d3e203237363933.roa
Signing time:             Tue 23 Sep 2025 15:19:33 +0000
ROA not before:           Tue 23 Sep 2025 15:14:33 +0000
ROA not after:            Tue 22 Sep 2026 15:19:33 +0000
asID:                     27693
IP address blocks:        189.127.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:02:2f:be:8d:0b:94:87:50:1f:64:52:f2:1a:d2:76:53:6c:8e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Sep 23 15:14:33 2025 GMT
            Not After : Sep 22 15:19:33 2026 GMT
        Subject: CN=2F85AEC0588E4EDE5FAA4FAD2020F1AE7EB0E05D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:7c:20:5f:cc:75:08:50:6f:9b:99:46:ea:
                    b0:29:8c:84:5f:d2:0d:89:59:6a:28:4d:d7:40:0a:
                    c4:ff:fd:b3:b6:83:25:c9:67:ff:9b:4e:be:6f:2f:
                    db:8b:c5:fe:4a:fc:e3:7b:61:55:fb:04:ca:80:99:
                    9f:4c:4d:69:a3:46:1d:96:38:13:2e:5b:b1:ad:9e:
                    89:b6:ee:f5:a1:5b:89:1c:54:fe:89:6a:9a:5e:dc:
                    02:04:6a:a7:6b:96:98:f8:8c:f8:c2:b0:47:75:4f:
                    e4:89:32:3c:b8:7d:eb:a2:ec:cc:d3:fc:da:3c:e2:
                    50:51:f0:4b:31:b7:d1:4d:31:a8:9b:22:7d:1d:27:
                    69:0e:8d:1e:91:c3:ab:c1:a5:09:5c:99:f7:d7:9b:
                    15:30:29:84:5a:6c:80:45:6f:4c:8e:c7:2a:70:a4:
                    2e:6a:25:01:01:33:29:ab:fa:4d:73:2e:b5:a4:2f:
                    5b:83:37:fd:62:41:0b:80:a0:50:41:92:c7:87:0d:
                    8b:6b:e9:92:af:01:be:2b:40:d7:86:5d:a7:83:78:
                    f7:09:80:9f:af:7e:fc:a1:2e:63:48:54:2d:52:f2:
                    a0:9c:c5:a4:01:46:9c:68:2b:7a:09:41:d5:2b:10:
                    29:49:52:d2:7f:cd:58:35:32:7a:cb:50:42:22:67:
                    a2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:85:AE:C0:58:8E:4E:DE:5F:AA:4F:AD:20:20:F1:AE:7E:B0:E0:5D
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32312d3231203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:33:04:9a:1e:26:22:fb:5d:10:9c:ee:4c:6a:82:24:92:9e:
         c1:02:b0:36:af:b8:34:0a:4d:9a:bb:c0:db:23:57:ae:49:96:
         d8:b5:e0:92:38:53:3e:1a:62:99:27:50:a9:2c:da:ee:32:cb:
         a3:fc:06:b7:a7:e2:ea:6a:9c:6c:e7:42:6c:e3:f9:26:d3:0d:
         f2:30:1e:48:52:9d:58:ea:eb:52:87:d2:b5:96:53:f4:b4:7f:
         f5:6f:ef:ef:f5:7c:ec:e4:90:65:68:c8:ea:26:1d:51:19:62:
         0d:d6:be:06:fb:f0:d7:b4:c3:07:88:91:93:b6:e2:ea:79:5c:
         9c:82:03:bd:3f:c4:62:66:4c:df:ba:89:b5:da:a7:26:ba:47:
         5e:ea:b7:77:3c:f6:1e:1d:82:a9:b9:d1:f8:96:a6:d4:c1:26:
         9c:93:08:35:3d:fe:89:f7:21:9b:d6:46:0e:71:29:40:5a:0d:
         01:ff:b4:4d:cb:c5:d6:8b:e5:e3:ba:96:92:55:78:cd:26:d1:
         f3:73:b1:2a:18:ab:05:c5:cf:5f:33:94:50:62:b9:39:7f:34:
         63:6f:83:68:e9:b4:0d:05:30:07:33:c3:28:f4:7c:e6:5c:29:
         4e:92:02:99:af:ac:92:2f:b2:7a:b7:de:0e:1a:73:be:33:17:
         f4:5a:32:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:54:34 2025 by rpki-client