Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/3230312e3138322e3134342e302f32322d3234203d3e203631383834.roa
File:                     3230312e3138322e3134342e302f32322d3234203d3e203631383834.roa (raw, json)
Hash identifier:          iuqm0LUh14/0jiAIV+jWR8zloRwYqK3rQeTa6ko9m2I=
Subject key identifier:   C5:6D:8A:5F:88:92:F8:B0:D7:9D:55:DC:9F:C5:5E:1A:15:97:E6:01
Certificate issuer:       /CN=65266773FE30988C76975E1CA92521B7BCB5897A
Certificate serial:       6B00D92E423D8FBC600295F01CF9839D711A18B0
Authority key identifier: 65:26:67:73:FE:30:98:8C:76:97:5E:1C:A9:25:21:B7:BC:B5:89:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/3230312e3138322e3134342e302f32322d3234203d3e203631383834.roa
Signing time:             Mon 13 Oct 2025 19:23:28 +0000
ROA not before:           Mon 13 Oct 2025 19:18:28 +0000
ROA not after:            Mon 12 Oct 2026 19:23:28 +0000
asID:                     61884
IP address blocks:        201.182.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.crl
                          rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:00:d9:2e:42:3d:8f:bc:60:02:95:f0:1c:f9:83:9d:71:1a:18:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65266773FE30988C76975E1CA92521B7BCB5897A
        Validity
            Not Before: Oct 13 19:18:28 2025 GMT
            Not After : Oct 12 19:23:28 2026 GMT
        Subject: CN=C56D8A5F8892F8B0D79D55DC9FC55E1A1597E601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:16:13:50:60:5f:ff:b0:3e:29:50:51:6f:
                    30:88:45:3a:6f:f6:db:79:88:92:77:a6:6e:7a:f0:
                    86:df:9d:1f:33:72:55:c3:c2:29:a6:45:66:49:70:
                    48:cb:eb:c3:a7:29:6e:e9:90:ae:b5:6e:1c:c5:dd:
                    10:3e:6a:e8:07:70:4e:0b:62:06:38:ab:a9:f5:8d:
                    6f:78:05:7b:17:fd:fc:f9:85:dc:27:ce:a3:78:82:
                    eb:63:93:ca:45:96:54:84:88:50:d5:30:4e:3a:3c:
                    c6:d6:88:59:7a:e4:93:45:d5:9c:f1:eb:61:e9:4b:
                    69:1f:26:45:37:cd:5f:99:2f:a6:ef:e3:b4:e8:9a:
                    b4:8b:ca:7d:3b:d1:62:00:ce:b1:8c:5b:e9:4d:ef:
                    b1:4c:66:dc:79:1c:de:a3:26:e7:51:1b:bf:83:87:
                    15:90:36:40:c2:1f:f6:64:e0:c2:81:7f:5d:6d:71:
                    80:5c:cf:89:5e:51:53:20:99:f4:68:af:be:fe:fb:
                    80:9b:4e:d8:f3:be:aa:47:09:cf:8d:c5:10:0b:dc:
                    d4:29:98:aa:95:58:89:c1:38:d3:4b:c3:db:f1:82:
                    75:f9:93:d7:3a:b4:a0:85:af:73:78:82:53:02:56:
                    99:dc:fc:d5:54:46:5a:47:ac:b4:c6:41:a9:bd:7f:
                    5c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6D:8A:5F:88:92:F8:B0:D7:9D:55:DC:9F:C5:5E:1A:15:97:E6:01
            X509v3 Authority Key Identifier:
                keyid:65:26:67:73:FE:30:98:8C:76:97:5E:1C:A9:25:21:B7:BC:B5:89:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/3230312e3138322e3134342e302f32322d3234203d3e203631383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:e2:aa:0d:8f:c2:a8:e9:fa:c9:8e:66:12:61:0a:8c:15:db:
         59:9c:65:f0:c3:49:32:ef:78:d5:59:55:99:c9:fa:df:60:a7:
         5c:b9:9c:8f:6e:2e:bf:a6:45:f6:fa:23:56:5a:6f:88:5d:e3:
         2a:78:da:10:72:72:a7:24:10:97:70:ab:53:1c:3b:2a:b2:df:
         ab:ab:73:e1:51:c3:50:cc:a6:7d:b8:18:08:36:4b:04:ad:eb:
         ed:45:0a:d6:6f:7e:3e:57:4b:44:a5:a9:dc:8c:60:82:33:b8:
         26:7e:9b:84:3c:c6:4c:2b:f0:c3:b4:b5:17:f3:14:8a:8f:db:
         33:20:9b:af:ae:a4:24:8f:86:2b:d5:54:7f:ac:7f:e4:71:2e:
         07:26:96:a5:9e:3f:43:0f:89:77:e9:55:48:fd:a0:09:4d:45:
         17:31:32:15:a8:f5:5b:2b:e3:a1:d2:b8:be:6c:0c:44:7b:d3:
         07:1e:8d:2f:e5:61:44:a9:0b:36:49:d4:48:68:6d:fe:4c:ea:
         53:1a:b8:4f:b3:6a:7a:10:12:25:e1:d2:80:73:0e:c3:4f:c7:
         81:c4:5f:da:74:1a:47:72:0a:10:95:ca:31:fa:3a:54:7a:1d:
         41:80:a1:66:77:a8:34:b6:3c:76:15:65:ce:a5:99:fb:2c:a9:
         38:c5:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:23:41 2025 by rpki-client