Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e37322e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          u5gfPQHfgAEH1VAYTprVYBQORVqBvtJsy75GExl2+eI=
Subject key identifier:   58:C1:9A:36:37:6D:29:07:A3:C1:26:5D:C5:F4:7C:23:9C:ED:87:1D
Certificate issuer:       /CN=E106F083B0114D3D104DD1EBEA8257FB6FA59CF7
Certificate serial:       377755F9A9F2AB019AE8276A8F0547061C99B3B9
Authority key identifier: E1:06:F0:83:B0:11:4D:3D:10:4D:D1:EB:EA:82:57:FB:6F:A5:9C:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32342d3234203d3e203238313834.roa
Signing time:             Wed 24 Sep 2025 18:30:48 +0000
ROA not before:           Wed 24 Sep 2025 18:25:48 +0000
ROA not after:            Wed 23 Sep 2026 18:30:48 +0000
asID:                     28184
IP address blocks:        189.89.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 22:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:77:55:f9:a9:f2:ab:01:9a:e8:27:6a:8f:05:47:06:1c:99:b3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E106F083B0114D3D104DD1EBEA8257FB6FA59CF7
        Validity
            Not Before: Sep 24 18:25:48 2025 GMT
            Not After : Sep 23 18:30:48 2026 GMT
        Subject: CN=58C19A36376D2907A3C1265DC5F47C239CED871D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:d0:c8:87:d4:cd:a2:80:43:e9:d1:a6:12:
                    bd:d8:b4:a3:85:aa:17:e2:b9:c0:16:86:a1:7b:96:
                    94:49:6f:8c:8b:8d:e1:8f:f1:c2:6c:a3:7a:58:f5:
                    af:e3:b8:6d:07:f9:82:1c:d5:fa:66:5a:45:ea:4a:
                    40:ef:1c:a9:ea:95:a6:87:60:2f:26:99:58:08:f5:
                    59:05:12:64:ef:f9:30:68:b4:53:87:d1:1f:90:fd:
                    08:2f:f4:81:2e:77:24:db:5d:46:7d:93:56:8e:02:
                    d4:13:d6:36:69:ee:b9:0d:5a:09:cb:3d:6c:70:40:
                    37:1a:db:6a:87:13:b5:f4:82:ae:13:ce:94:e5:d7:
                    7d:38:2b:51:f3:a4:9e:1e:2d:f5:bc:c8:30:96:a2:
                    ae:47:6a:5d:7e:80:10:32:59:96:52:2f:5c:cb:56:
                    9e:c2:ab:c4:1b:12:7e:ad:0c:48:b1:52:4c:33:b7:
                    0c:0e:1e:ee:ed:e8:0d:e6:02:ae:63:ff:43:0f:4e:
                    a2:e7:b1:6f:ae:53:be:37:52:ce:1d:35:cc:bd:13:
                    88:de:f2:0c:ab:e2:fd:71:e3:2e:6b:3b:5a:fb:13:
                    b7:61:ba:69:8d:38:92:ca:e0:20:83:bb:23:af:4d:
                    94:30:a1:05:1f:65:35:16:be:ca:41:15:cb:81:5d:
                    9f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C1:9A:36:37:6D:29:07:A3:C1:26:5D:C5:F4:7C:23:9C:ED:87:1D
            X509v3 Authority Key Identifier:
                keyid:E1:06:F0:83:B0:11:4D:3D:10:4D:D1:EB:EA:82:57:FB:6F:A5:9C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:22:24:e4:4b:bc:8b:96:8d:92:55:05:07:bd:34:7b:4d:50:
         99:b7:b8:3f:f5:62:c7:da:8b:a0:f3:2b:2c:75:fc:81:c4:fd:
         fb:0c:78:8b:2d:4e:b0:63:bf:4c:85:1d:ae:88:15:95:19:ce:
         8f:63:d4:3a:33:b8:ee:ae:31:b3:06:45:75:ef:12:8f:a0:05:
         8f:2d:c9:7f:87:3d:45:81:fa:8c:28:c3:b6:9c:83:54:20:96:
         66:e5:1c:ec:ff:e0:46:ce:61:b0:fe:48:8d:1a:2f:74:5e:db:
         fe:72:be:5a:3c:a5:bb:45:b6:d8:0a:0b:db:4a:98:e4:b7:a8:
         46:66:29:40:73:6c:97:75:35:c6:19:1f:86:a1:0d:7d:fa:28:
         e4:e0:4a:25:54:63:48:ee:64:01:1e:37:57:95:d0:26:34:dd:
         3d:45:27:d5:9a:57:18:36:93:1d:e4:c9:f0:e3:60:5c:04:38:
         aa:27:ea:34:29:5c:af:0f:c5:b0:ab:4f:aa:54:49:36:54:9d:
         c5:3c:8a:89:20:3b:f9:48:c8:c1:dd:d6:9a:8e:53:45:f5:a5:
         a9:b1:7e:42:3c:07:78:0c:68:6d:9d:40:30:39:39:11:eb:2a:
         60:a5:8a:26:c1:74:b7:b2:18:90:2e:ea:3b:6b:18:70:8f:c1:
         da:bc:29:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:19:21 2025 by rpki-client