Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/3138392e33392e39362e302f32302d3332203d3e203238333035.roa
File:                     3138392e33392e39362e302f32302d3332203d3e203238333035.roa (raw, json)
Hash identifier:          VDrfAwL3Ri73wmHCCBTJ8HFlRF9Bay2CAlDSTwJLpoI=
Subject key identifier:   C2:F3:7F:B8:94:11:52:72:7F:A4:36:1B:64:C6:76:22:A6:EA:A4:DF
Certificate issuer:       /CN=F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2
Certificate serial:       3432B6C166232AC3BCBE1040979EC7A9CE359F9D
Authority key identifier: F6:85:5C:37:8F:9C:9C:A3:71:CE:AA:34:0A:9F:CB:F4:8F:C9:DF:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/3138392e33392e39362e302f32302d3332203d3e203238333035.roa
Signing time:             Sat 06 Sep 2025 17:14:52 +0000
ROA not before:           Sat 06 Sep 2025 17:09:52 +0000
ROA not after:            Sat 05 Sep 2026 17:14:52 +0000
asID:                     28305
IP address blocks:        189.39.96.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl
                          rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:32:b6:c1:66:23:2a:c3:bc:be:10:40:97:9e:c7:a9:ce:35:9f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2
        Validity
            Not Before: Sep  6 17:09:52 2025 GMT
            Not After : Sep  5 17:14:52 2026 GMT
        Subject: CN=C2F37FB8941152727FA4361B64C67622A6EAA4DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e4:c0:db:e8:89:26:e8:cd:a3:28:9b:29:f2:
                    96:2f:2c:12:64:d4:a8:9f:fa:66:6f:6f:26:7c:36:
                    fa:0c:33:03:a0:64:06:a2:d0:0e:b1:45:07:72:14:
                    bf:60:b0:5d:b8:7d:e6:37:01:ea:39:77:c0:20:d0:
                    d5:81:b7:97:fd:c0:0b:b1:65:80:c1:a3:5d:5f:38:
                    72:10:e4:e5:fd:81:9b:06:5a:f2:63:2d:83:af:91:
                    c4:94:4c:00:dc:48:5e:07:fc:f8:31:68:8e:61:ec:
                    ea:2e:c9:5b:04:aa:2b:e0:23:c8:0f:59:82:a4:c1:
                    b0:af:d6:64:54:f4:03:35:9a:0a:fd:e1:6c:74:17:
                    24:e9:ce:96:0c:57:04:51:0d:a9:74:b9:f7:60:6f:
                    13:34:a2:98:6f:5e:80:53:c0:64:64:ae:6f:70:bc:
                    d6:06:95:1e:a9:5c:d1:70:a7:4b:34:6f:4b:45:d6:
                    19:27:d1:b6:6b:0c:c1:86:0a:82:56:ba:f6:5b:8b:
                    60:12:c6:e1:3f:e1:bf:44:2c:15:b8:91:f7:23:b2:
                    0f:53:6e:cb:5b:2d:4b:52:9c:5e:f9:b4:e1:2f:0a:
                    16:7a:30:e7:1f:12:ec:d8:dc:b1:5b:76:c9:af:26:
                    15:29:02:56:65:43:10:81:37:88:df:36:7e:5c:25:
                    b3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F3:7F:B8:94:11:52:72:7F:A4:36:1B:64:C6:76:22:A6:EA:A4:DF
            X509v3 Authority Key Identifier:
                keyid:F6:85:5C:37:8F:9C:9C:A3:71:CE:AA:34:0A:9F:CB:F4:8F:C9:DF:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/3138392e33392e39362e302f32302d3332203d3e203238333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:94:93:60:31:bf:19:17:ad:2c:f1:75:70:b4:e3:ca:72:ac:
         54:2c:e5:84:6b:a4:0c:4d:9d:7f:e8:8c:59:a4:ce:97:17:b5:
         af:4e:61:da:b0:39:97:f6:31:45:cc:bf:bb:b3:0c:92:9a:3a:
         84:a8:8a:9b:3a:b3:0b:a5:df:11:a4:8f:71:51:c9:33:96:62:
         04:f2:cb:e2:c8:6b:94:e1:0d:80:fa:c1:b6:e6:14:4d:b4:ea:
         7e:ba:bf:07:79:6a:40:33:75:57:aa:23:4f:b3:f5:c8:96:68:
         99:e3:17:b9:90:37:ce:80:ef:69:b3:17:ca:86:e0:3e:f3:50:
         35:81:9a:4b:d2:43:f3:d0:6d:5d:f4:49:c4:b7:fa:ef:04:00:
         f9:45:77:48:57:b8:02:75:05:fd:4d:6d:4c:4e:c1:79:46:98:
         0e:67:c8:ef:12:8c:47:97:9e:c7:09:75:48:fe:83:18:6a:f9:
         39:05:43:b5:3f:79:a6:9c:1e:e0:ef:74:42:6a:36:1e:22:10:
         66:7e:76:86:b1:90:8c:82:5f:dd:e8:4a:c1:b8:ce:55:26:bc:
         7d:59:5d:ca:dd:52:8b:f2:28:8c:14:db:ad:b0:f4:34:cf:70:
         3d:9c:10:13:99:2e:b3:21:c1:38:7f:22:d5:8a:20:a8:a3:3b:
         0b:18:75:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:47:23 2025 by rpki-client