Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e382e302f32312d3231203d3e203237363933.roa
File:                     3138392e3132372e382e302f32312d3231203d3e203237363933.roa (raw, json)
Hash identifier:          y86uexuBDk66Nbk2UEuwSSq4T9ARq74VP1z1ZjpYBAA=
Subject key identifier:   22:CE:DF:43:8E:A7:CB:44:11:4D:5D:58:A1:EC:2D:57:E8:82:AC:46
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       234E881853DF6E0B78879EA5A750D860A691DD41
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e382e302f32312d3231203d3e203237363933.roa
Signing time:             Tue 23 Sep 2025 15:19:34 +0000
ROA not before:           Tue 23 Sep 2025 15:14:34 +0000
ROA not after:            Tue 22 Sep 2026 15:19:34 +0000
asID:                     27693
IP address blocks:        189.127.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4e:88:18:53:df:6e:0b:78:87:9e:a5:a7:50:d8:60:a6:91:dd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Sep 23 15:14:34 2025 GMT
            Not After : Sep 22 15:19:34 2026 GMT
        Subject: CN=22CEDF438EA7CB44114D5D58A1EC2D57E882AC46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:20:61:62:d4:ba:85:2a:d6:58:49:26:11:
                    4b:9f:34:c4:02:19:e0:45:e4:31:d4:b0:19:ba:6f:
                    70:88:81:88:83:b5:07:d8:cd:69:96:a1:7f:9e:3d:
                    35:2f:4b:15:52:ef:04:48:04:8d:5e:69:e8:dd:bc:
                    fa:57:6b:97:35:c4:36:e2:c5:d6:29:9c:3e:81:f1:
                    13:dd:7c:c5:3a:ad:57:6c:b3:1f:23:f3:7b:6e:97:
                    25:e3:3e:38:bf:b2:83:07:a3:cf:01:85:bf:03:ad:
                    a8:aa:47:fa:10:1c:45:36:88:33:e4:90:f2:fc:28:
                    38:c2:24:0a:5c:f5:b9:34:00:d3:d9:ea:9d:a2:f7:
                    dd:d9:59:dc:18:d8:f6:27:70:88:44:04:60:61:e0:
                    ad:e9:bd:3d:38:97:88:68:a0:d6:b8:4a:ed:ff:f6:
                    b6:64:28:41:6a:5b:9c:bd:b4:41:c3:1a:d9:93:e0:
                    17:7e:71:2a:e9:62:fb:9c:61:c2:60:ca:4e:b1:6c:
                    d4:42:67:fc:d7:7f:69:bf:4a:f0:a1:5c:06:76:58:
                    b8:06:0c:ac:4e:72:38:81:fc:3a:31:cd:18:49:b7:
                    48:6d:3b:6c:84:2e:58:33:68:2e:9f:14:22:88:1d:
                    cb:6d:6d:7a:98:e5:3f:9a:e5:0a:d9:89:9a:38:34:
                    ac:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CE:DF:43:8E:A7:CB:44:11:4D:5D:58:A1:EC:2D:57:E8:82:AC:46
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e382e302f32312d3231203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:9b:c5:62:46:19:30:38:24:85:e3:1f:13:63:d4:89:80:9e:
         19:76:5b:91:bd:36:7f:75:ac:2e:e5:c7:b7:6c:5b:4b:44:9b:
         f7:7f:ea:71:98:71:c2:51:03:b6:d9:85:fd:5f:7e:ef:dc:b8:
         1a:04:d7:38:c0:ea:4d:47:3b:f3:97:37:35:f9:28:5e:3d:8c:
         00:8e:ce:b3:47:69:5e:02:6d:ec:42:29:bc:13:de:3f:a3:19:
         15:33:c1:44:f8:f4:e1:f5:61:75:79:42:5b:fb:76:de:e0:91:
         a0:6a:98:a4:96:00:3e:c1:14:6f:ff:96:af:13:70:95:7b:ba:
         af:fc:4c:72:8d:97:08:f1:71:80:15:95:3d:12:1f:da:17:8e:
         72:ba:02:04:02:fe:86:d3:cf:b9:cb:ab:c7:2f:a4:bb:5d:71:
         af:67:98:00:3c:d6:c8:5b:a8:72:ae:ca:7d:26:5a:c1:cb:44:
         a4:68:d4:b9:de:90:80:25:98:ec:48:b3:69:14:fc:77:ce:ec:
         97:7a:99:95:78:12:69:12:45:3d:aa:0d:91:54:90:a9:02:e2:
         df:af:ed:92:09:9f:be:6c:e6:a4:4d:f7:9d:dc:9a:cb:cb:82:
         12:12:8e:93:9c:0b:60:19:f5:42:c8:b2:86:e5:6d:80:56:c6:
         d9:9c:9c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:54:30 2025 by rpki-client