Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e36392e302f32342d3234203d3e20323633333535.roa
File:                     3139312e33372e36392e302f32342d3234203d3e20323633333535.roa (raw, json)
Hash identifier:          7Q3ghcjm4TNtNw0rEcUF9iLMJOTI1sIOYHRD8XPseME=
Subject key identifier:   C1:50:AA:4F:54:42:11:03:B4:89:E0:49:C9:D3:21:9D:F4:DE:D6:09
Certificate issuer:       /CN=2A6676986C812A17B00635484B147B51B75ADD4B
Certificate serial:       79AD4B69702D4B002B1C225D98F87FE2C4444012
Authority key identifier: 2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e36392e302f32342d3234203d3e20323633333535.roa
Signing time:             Tue 23 Sep 2025 18:08:07 +0000
ROA not before:           Tue 23 Sep 2025 18:03:07 +0000
ROA not after:            Tue 22 Sep 2026 18:08:07 +0000
asID:                     263355
IP address blocks:        191.37.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl
                          rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ad:4b:69:70:2d:4b:00:2b:1c:22:5d:98:f8:7f:e2:c4:44:40:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6676986C812A17B00635484B147B51B75ADD4B
        Validity
            Not Before: Sep 23 18:03:07 2025 GMT
            Not After : Sep 22 18:08:07 2026 GMT
        Subject: CN=C150AA4F54421103B489E049C9D3219DF4DED609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:f1:48:40:2a:3f:2f:1c:64:74:6d:b5:11:6d:
                    0f:81:55:f6:20:5e:e6:85:34:76:c5:f3:79:ce:93:
                    32:70:cd:3f:e9:ae:d3:72:0a:09:ef:d0:91:9e:51:
                    40:44:da:92:4e:db:76:0b:c3:aa:d8:5d:2a:25:be:
                    d8:2d:be:3b:03:dc:70:31:fe:16:9a:4c:46:26:d4:
                    3e:a3:ce:2f:68:3d:db:0e:1f:48:2e:cc:7a:02:0f:
                    b7:36:05:12:f7:c1:f4:cf:55:c0:86:69:de:12:20:
                    2b:78:f4:9b:0d:4c:c7:cf:8c:dc:db:47:fc:f3:1a:
                    79:b0:c6:28:13:1a:b8:53:d8:bf:29:69:f0:25:5b:
                    31:7f:d0:60:b1:df:7c:3d:cc:4a:e0:4a:23:24:6d:
                    86:58:21:4f:8d:2f:98:e2:67:a7:58:30:9c:ce:38:
                    30:d4:cd:75:1b:93:a4:bf:db:bf:cf:34:0a:cc:b8:
                    bc:c3:49:64:43:40:6e:c9:dc:40:23:9e:14:9e:87:
                    99:3a:d7:89:16:27:ad:85:92:58:69:44:cb:4e:14:
                    5e:8c:05:3a:e4:72:0c:6a:77:27:79:05:7d:fa:6e:
                    60:38:31:de:ad:5e:a0:26:f6:62:2d:92:7f:cf:b1:
                    5b:77:70:e9:dd:95:7d:69:c4:6b:3f:5b:49:72:e6:
                    b8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:50:AA:4F:54:42:11:03:B4:89:E0:49:C9:D3:21:9D:F4:DE:D6:09
            X509v3 Authority Key Identifier:
                keyid:2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e36392e302f32342d3234203d3e20323633333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:a5:cb:02:99:ae:14:07:84:2c:81:5e:92:8a:ce:00:14:52:
         36:24:7d:12:c0:2f:53:3a:bf:33:01:6e:08:18:bd:85:77:9e:
         8c:d7:82:0f:2d:bc:25:8e:63:84:dc:af:8e:58:d8:55:56:1d:
         56:79:8a:7d:ca:50:ac:2f:74:f7:22:42:3b:15:b5:de:c2:55:
         0c:bd:e1:50:b3:4b:a1:ae:97:c1:10:c4:83:dc:3e:56:73:3c:
         ac:59:73:9b:c3:2f:e7:9c:b8:20:f2:bb:91:59:30:ae:84:48:
         41:1b:01:c9:5b:be:8c:14:18:f2:c6:0a:5f:10:a3:d4:7b:ed:
         11:e1:dd:a9:4f:1f:84:35:a2:d1:81:43:52:54:2e:7b:01:6c:
         c3:77:79:60:ba:68:b2:21:f2:c4:e3:7b:3b:22:6d:d0:47:0a:
         45:72:c6:97:43:4c:8a:3d:21:c4:5d:81:8c:9a:4b:03:9b:b9:
         52:ea:cc:2e:75:55:9a:bd:d9:15:8f:d0:05:53:4f:87:7a:96:
         70:25:ec:f8:ee:f6:1c:16:88:34:9e:f4:8b:96:f7:28:e4:b3:
         84:f3:3a:94:54:ba:5f:10:a4:37:f1:94:a7:2c:78:be:70:90:
         73:dc:a2:0e:98:67:39:01:84:6c:51:a7:39:f9:47:34:dd:5c:
         55:77:64:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:06:32 2025 by rpki-client