Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e37312e302f32342d3234203d3e20323633333535.roa
File:                     3139312e33372e37312e302f32342d3234203d3e20323633333535.roa (raw, json)
Hash identifier:          hwTf0EhBE4+dAV9b7BOCMjx74L4FNUGLNqcbqE5J4R4=
Subject key identifier:   8C:E8:3E:E1:13:3A:61:18:37:FB:49:B7:56:F0:BB:B1:A1:2C:30:A7
Certificate issuer:       /CN=2A6676986C812A17B00635484B147B51B75ADD4B
Certificate serial:       3613301E7BAEEB77EF6A2D281751984C5FDCF00A
Authority key identifier: 2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e37312e302f32342d3234203d3e20323633333535.roa
Signing time:             Tue 23 Sep 2025 18:08:05 +0000
ROA not before:           Tue 23 Sep 2025 18:03:05 +0000
ROA not after:            Tue 22 Sep 2026 18:08:05 +0000
asID:                     263355
IP address blocks:        191.37.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl
                          rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:13:30:1e:7b:ae:eb:77:ef:6a:2d:28:17:51:98:4c:5f:dc:f0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6676986C812A17B00635484B147B51B75ADD4B
        Validity
            Not Before: Sep 23 18:03:05 2025 GMT
            Not After : Sep 22 18:08:05 2026 GMT
        Subject: CN=8CE83EE1133A611837FB49B756F0BBB1A12C30A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ab:59:c0:7a:ea:e9:16:c8:01:c2:e7:43:45:
                    b3:95:95:f4:54:78:70:ba:79:b2:88:36:5c:28:38:
                    33:8f:4b:86:29:f1:11:1c:59:49:2f:22:5d:b3:07:
                    96:68:54:ff:a8:81:f1:d3:a8:e2:87:05:39:3a:39:
                    77:34:a4:cf:1d:de:a4:8f:e9:fd:15:46:85:9f:b8:
                    f2:61:0e:b5:84:ec:a9:15:e5:81:2c:61:b3:8d:6d:
                    7d:29:7c:f3:c4:55:19:0e:31:8b:66:f3:06:d5:db:
                    6b:14:58:2d:a0:1b:46:a2:99:f4:c8:76:02:85:07:
                    84:28:f4:31:65:58:5f:0e:84:32:8f:6b:87:53:c4:
                    4e:60:fa:65:da:39:f9:ce:88:9d:18:42:94:e0:94:
                    29:36:d4:10:a3:43:dd:e5:e8:97:0f:fa:52:dd:07:
                    e7:40:0a:16:1e:78:90:b8:9c:3f:8d:81:3b:65:33:
                    15:bd:6c:fc:39:ed:1b:a2:0c:70:b2:f5:89:12:76:
                    3a:35:4b:85:42:05:8d:f3:98:fc:ec:d8:59:df:9c:
                    53:8b:d5:71:1b:30:14:bf:ea:0c:86:26:d1:8b:6e:
                    50:f8:32:ed:93:9f:4e:e0:13:b4:d1:0e:9e:52:16:
                    a4:9e:1b:4d:ae:d1:fc:15:2e:19:b5:7e:1c:b0:b5:
                    10:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E8:3E:E1:13:3A:61:18:37:FB:49:B7:56:F0:BB:B1:A1:2C:30:A7
            X509v3 Authority Key Identifier:
                keyid:2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e37312e302f32342d3234203d3e20323633333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:aa:e6:72:fc:1b:da:0e:ac:3a:b6:77:7d:56:c3:2a:ec:66:
         00:fc:89:1c:e2:48:ee:b6:b2:fa:58:b8:4c:a1:1f:20:f4:0f:
         77:38:6d:e1:49:1e:0f:44:20:d4:74:f5:10:4e:d8:84:f2:2a:
         0d:8b:34:fe:7a:c0:9f:e1:6f:44:db:a0:65:74:80:a3:8d:40:
         a6:68:5c:39:45:2e:25:88:62:6c:03:90:be:67:c3:af:65:30:
         18:29:fe:6e:89:a3:1e:c9:e7:48:f8:b0:bf:51:23:57:1a:bd:
         9c:fa:4c:ea:1c:ec:d3:f3:05:f5:44:94:d2:14:71:6f:c4:fc:
         e6:65:e3:5a:30:ae:32:a8:2f:35:09:8e:df:14:6e:97:da:45:
         4a:d3:59:05:f0:40:a8:db:1d:18:d2:36:7c:51:19:a0:b6:99:
         7f:08:0b:59:9a:e2:2e:07:52:dc:ce:41:5f:04:d2:55:6c:bd:
         76:fd:75:1f:44:26:4a:ea:d8:07:d5:0c:7f:8c:74:04:71:a7:
         a1:8a:11:20:9b:27:8f:99:e4:d4:ea:1f:fd:3e:38:91:21:e9:
         3d:d5:21:b5:b3:ad:a8:9c:b0:de:37:2c:bd:70:59:f4:86:3d:
         3d:b1:11:61:b3:33:7f:cb:bc:b5:9f:e1:a9:e1:19:54:83:2e:
         86:07:05:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:06:35 2025 by rpki-client