Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa
File:                     3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa (raw, json)
Hash identifier:          +ffUnLzfzrDB8ghOAGykzV6xu9kH558Jjg6IGkAIhU8=
Subject key identifier:   02:74:95:99:16:82:8A:AF:B7:5E:0C:00:9E:B6:5B:12:D8:BD:04:00
Certificate issuer:       /CN=6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF
Certificate serial:       3F67A60B25932B72B985C5198279C6FDE913C8F4
Authority key identifier: 6F:6A:82:1A:1D:5F:FC:AF:75:0D:DC:AB:46:26:E1:A4:1F:4E:0C:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa
Signing time:             Mon 13 Oct 2025 18:00:34 +0000
ROA not before:           Mon 13 Oct 2025 17:55:34 +0000
ROA not after:            Mon 12 Oct 2026 18:00:34 +0000
asID:                     52999
IP address blocks:        186.216.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.crl
                          rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:67:a6:0b:25:93:2b:72:b9:85:c5:19:82:79:c6:fd:e9:13:c8:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF
        Validity
            Not Before: Oct 13 17:55:34 2025 GMT
            Not After : Oct 12 18:00:34 2026 GMT
        Subject: CN=0274959916828AAFB75E0C009EB65B12D8BD0400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:af:c9:0a:ee:28:cc:dc:bc:89:e6:aa:cb:
                    ef:ab:8a:53:e6:99:59:02:8e:0f:49:fe:76:c9:20:
                    e3:b5:21:10:35:de:9d:40:1a:93:cb:bb:77:c9:c3:
                    ed:78:ff:b7:38:92:b1:85:aa:c1:7c:4f:76:97:d0:
                    6d:18:b4:3c:3d:56:45:79:12:7e:2d:75:fc:71:6a:
                    ff:77:24:5e:2a:fa:c6:6f:e0:ed:92:4a:ee:d7:e3:
                    bd:9c:d7:30:b5:41:6b:8e:7b:4b:1f:5e:f1:15:0c:
                    84:76:ab:a2:5f:9d:47:86:25:49:5c:af:f5:e4:4a:
                    76:9d:11:5b:f2:50:10:c8:1a:18:f6:8d:6d:2a:ae:
                    bc:ba:1c:fa:51:08:09:6d:ba:dc:44:a3:42:5a:b0:
                    d5:66:c7:09:a6:24:31:9a:3d:90:2c:97:52:93:e4:
                    d4:66:ae:e9:19:ba:10:0a:fe:d4:8a:38:be:03:e2:
                    81:d0:06:e5:4d:10:9c:c5:af:cc:cb:31:a7:a9:7d:
                    a8:a5:87:92:74:ed:08:1b:3a:43:3f:e6:87:ee:18:
                    dd:a7:87:45:a7:d7:f1:4b:e8:94:0c:43:78:2f:c0:
                    39:9c:0c:d8:27:b2:de:7e:78:08:0e:55:ce:28:ba:
                    04:6c:a1:e5:78:b7:8f:6f:52:21:b1:cf:db:c6:1c:
                    b3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:74:95:99:16:82:8A:AF:B7:5E:0C:00:9E:B6:5B:12:D8:BD:04:00
            X509v3 Authority Key Identifier:
                keyid:6F:6A:82:1A:1D:5F:FC:AF:75:0D:DC:AB:46:26:E1:A4:1F:4E:0C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:13:bc:18:61:52:8e:30:7e:d3:e0:d1:ec:e3:4c:ed:07:e2:
         62:97:ac:a8:e4:61:4e:c3:c4:88:6f:ca:a9:8b:60:83:14:4d:
         6b:ad:47:bf:36:0d:6e:81:98:b9:94:d3:3e:d4:69:04:80:b4:
         3b:54:67:95:39:d3:c0:6a:9f:d9:95:d1:5b:9b:e3:82:eb:ec:
         6a:2e:8a:7a:14:19:f9:81:a3:0d:b2:31:6f:46:be:64:00:8c:
         9c:d1:ad:8d:b4:8a:cf:d1:b0:cd:0f:d2:50:7a:ed:03:d2:ca:
         2a:8c:b2:b7:3d:ef:0e:a1:9b:5d:dd:3d:01:0d:20:04:dc:07:
         4d:1e:a2:40:f9:aa:04:a6:4e:eb:01:80:b7:99:1f:a3:59:56:
         18:9c:98:19:3f:37:ab:a0:6a:f6:08:39:0f:09:5b:87:bc:0c:
         38:67:97:06:a6:14:d5:7a:53:31:5f:c0:68:0d:4a:95:f6:be:
         ca:ee:19:01:0a:62:03:a7:21:b2:6e:42:c0:ba:e3:8a:b5:95:
         91:5d:cf:94:0d:58:a8:f0:7c:8f:cd:83:b1:02:07:a5:6b:66:
         16:3a:10:e3:89:77:9f:72:30:6f:64:f7:74:27:3a:8a:3a:f5:
         95:dd:c0:ca:3e:83:94:98:69:b5:1b:e2:3a:2e:39:de:f9:14:
         d0:20:95:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:14:18 2025 by rpki-client