Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/3230302e3139342e3138382e302f32322d3332203d3e20323731363431.roa
File:                     3230302e3139342e3138382e302f32322d3332203d3e20323731363431.roa (raw, json)
Hash identifier:          raJWo/47kY82+NzfjTqks2Q8mhYqQqOhj8kRSkXKl0M=
Subject key identifier:   9B:95:B0:88:EC:44:F5:00:6A:BB:5D:2C:3F:CE:ED:CC:A3:3D:DC:31
Certificate issuer:       /CN=D5941499F5EA634828B66DBDA522071E240C7006
Certificate serial:       3F21FB02EC2CA17191E613957C14D60597B53087
Authority key identifier: D5:94:14:99:F5:EA:63:48:28:B6:6D:BD:A5:22:07:1E:24:0C:70:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5941499F5EA634828B66DBDA522071E240C7006.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/3230302e3139342e3138382e302f32322d3332203d3e20323731363431.roa
Signing time:             Fri 26 Sep 2025 23:04:59 +0000
ROA not before:           Fri 26 Sep 2025 22:59:59 +0000
ROA not after:            Fri 25 Sep 2026 23:04:59 +0000
asID:                     271641
IP address blocks:        200.194.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/D5941499F5EA634828B66DBDA522071E240C7006.crl
                          rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/D5941499F5EA634828B66DBDA522071E240C7006.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5941499F5EA634828B66DBDA522071E240C7006.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:21:fb:02:ec:2c:a1:71:91:e6:13:95:7c:14:d6:05:97:b5:30:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5941499F5EA634828B66DBDA522071E240C7006
        Validity
            Not Before: Sep 26 22:59:59 2025 GMT
            Not After : Sep 25 23:04:59 2026 GMT
        Subject: CN=9B95B088EC44F5006ABB5D2C3FCEEDCCA33DDC31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:49:9e:63:a1:af:13:e4:b9:2a:bc:93:4f:
                    6d:cb:0f:91:41:b1:43:88:46:b2:e8:53:67:15:27:
                    8b:f1:fe:d2:46:0d:c3:3d:04:b9:34:2a:d1:cc:96:
                    40:80:1b:a8:c1:19:44:82:7f:36:6e:a9:bd:ec:19:
                    8c:0a:f1:aa:1f:cc:7a:ce:8b:6e:ec:d9:0d:f4:88:
                    52:f5:a1:6e:8d:31:fa:11:6c:6b:0d:5a:ab:ca:85:
                    02:64:ff:45:eb:ee:0f:a8:ec:fe:9c:a6:30:35:fb:
                    23:17:05:40:2b:c3:19:64:d1:93:e1:6b:9f:11:e8:
                    d4:10:83:04:20:b4:86:49:4a:8c:32:88:84:35:ff:
                    5f:54:b7:0d:82:34:d5:36:97:75:3f:a7:1b:b5:9b:
                    a1:72:c0:f0:1a:67:b2:cc:8f:c7:cd:48:92:a6:40:
                    27:3d:be:5b:08:df:a7:7e:2f:5c:0a:5c:79:3f:f5:
                    84:ee:f4:89:1b:4f:75:96:e5:d8:58:5a:c0:03:a9:
                    9d:a8:a8:b2:17:4e:7a:f1:ac:5e:3c:be:d1:8e:c4:
                    2d:75:27:1a:0c:c2:48:11:fa:74:9a:bd:8f:65:aa:
                    2e:3d:4e:46:aa:3f:e6:f9:c8:4c:22:af:83:f8:30:
                    1f:61:9f:e1:1c:ae:f2:37:e9:c5:b9:f9:4d:0f:bc:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:95:B0:88:EC:44:F5:00:6A:BB:5D:2C:3F:CE:ED:CC:A3:3D:DC:31
            X509v3 Authority Key Identifier:
                keyid:D5:94:14:99:F5:EA:63:48:28:B6:6D:BD:A5:22:07:1E:24:0C:70:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/D5941499F5EA634828B66DBDA522071E240C7006.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5941499F5EA634828B66DBDA522071E240C7006.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/3230302e3139342e3138382e302f32322d3332203d3e20323731363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:4d:3b:31:28:a0:96:53:90:28:14:11:64:d6:14:f0:c0:cb:
         dc:75:41:73:ef:14:ea:13:cb:01:85:d2:33:39:e3:e8:cc:6a:
         b2:df:bd:c0:d5:8e:e3:a8:dc:85:58:59:94:81:a7:b6:03:78:
         36:52:7c:d0:99:88:d9:33:76:f2:ee:c2:eb:3f:c7:3d:1f:de:
         05:19:27:ee:35:0e:0b:b9:96:37:4d:03:a3:7d:8f:09:41:e7:
         62:5b:57:d8:21:b2:0f:1c:1e:7e:ee:fb:b5:64:7f:f7:70:44:
         c2:28:df:fc:95:0a:b5:fe:19:2c:b6:98:1e:4d:b4:66:33:c5:
         22:95:4e:f4:b0:a0:1a:2f:8d:e3:d7:65:b6:36:9e:58:01:f2:
         86:8a:cc:cd:9b:8e:8a:4f:af:ed:43:d1:23:64:ef:86:0b:45:
         bd:61:94:62:0c:68:f4:d3:71:f2:99:3f:de:49:a5:59:4c:92:
         d6:bf:28:07:42:ce:3d:34:ba:74:76:af:f9:2a:61:3c:96:0f:
         35:8c:ca:00:a1:11:96:da:9d:c6:d7:83:01:8e:5f:65:b5:66:
         bd:01:55:df:98:4a:ec:3e:d4:95:99:e5:67:5a:1a:ad:3f:72:
         b4:65:63:c0:ac:3a:32:84:5f:a6:c1:85:86:fe:1e:55:3f:85:
         5a:c8:30:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:38:22 2025 by rpki-client