Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37342e302f32332d3233203d3e203238313834.roa
File:                     3138392e38392e37342e302f32332d3233203d3e203238313834.roa (raw, json)
Hash identifier:          sMFhpqaMu8Bz9Fg/mYeDk94qOgd+hDP1aEkSXfQVJFk=
Subject key identifier:   AA:72:DB:7E:01:01:D4:69:EE:26:3B:FC:97:D2:DD:FD:50:D1:B9:DC
Certificate issuer:       /CN=E106F083B0114D3D104DD1EBEA8257FB6FA59CF7
Certificate serial:       14A9E5836BFF5B97921DE612D8A3467658075B5F
Authority key identifier: E1:06:F0:83:B0:11:4D:3D:10:4D:D1:EB:EA:82:57:FB:6F:A5:9C:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37342e302f32332d3233203d3e203238313834.roa
Signing time:             Wed 24 Sep 2025 18:29:38 +0000
ROA not before:           Wed 24 Sep 2025 18:24:38 +0000
ROA not after:            Wed 23 Sep 2026 18:29:38 +0000
asID:                     28184
IP address blocks:        189.89.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a9:e5:83:6b:ff:5b:97:92:1d:e6:12:d8:a3:46:76:58:07:5b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E106F083B0114D3D104DD1EBEA8257FB6FA59CF7
        Validity
            Not Before: Sep 24 18:24:38 2025 GMT
            Not After : Sep 23 18:29:38 2026 GMT
        Subject: CN=AA72DB7E0101D469EE263BFC97D2DDFD50D1B9DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ba:ea:fc:d8:e7:5d:55:6e:72:7a:93:60:5d:
                    23:8d:96:4d:9d:92:61:6f:ac:57:64:b2:eb:91:2d:
                    e4:ff:ea:37:40:b9:fd:80:4a:ba:4e:68:87:f9:34:
                    b3:8d:87:98:8f:84:21:25:3c:94:e9:fa:43:56:d2:
                    71:20:7e:66:67:6e:ad:52:c8:1b:91:de:64:0e:1e:
                    c6:16:8e:a1:3a:8b:6c:00:67:3a:cd:f1:a2:b2:6d:
                    16:23:87:c5:c4:0d:da:ee:24:9c:cc:ad:db:07:5d:
                    41:4b:3b:13:d9:2d:81:e9:5d:a2:89:f8:44:37:4a:
                    52:47:90:f5:c4:80:39:c7:cc:23:d6:4c:b6:31:60:
                    fd:86:c7:c9:ca:e5:3b:78:1a:09:b1:ac:d9:46:63:
                    e6:6e:e6:61:de:3b:c9:8d:1e:29:4d:06:5d:b6:9d:
                    64:9d:d0:3f:25:71:42:0b:49:9f:1c:a8:2b:6f:22:
                    38:c8:f6:d3:4b:8c:3e:70:17:a6:4b:71:02:ea:3e:
                    5b:b4:03:f9:32:7e:56:fb:cf:61:ce:4a:8b:a2:bf:
                    c2:f9:b1:b5:a6:b3:7f:0a:a9:94:30:ed:a4:43:09:
                    5a:44:04:7f:99:35:fd:0a:8d:2e:1a:21:d4:05:70:
                    9b:e9:63:61:c0:90:30:26:c5:30:ee:d5:a3:54:5f:
                    1d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:72:DB:7E:01:01:D4:69:EE:26:3B:FC:97:D2:DD:FD:50:D1:B9:DC
            X509v3 Authority Key Identifier:
                keyid:E1:06:F0:83:B0:11:4D:3D:10:4D:D1:EB:EA:82:57:FB:6F:A5:9C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37342e302f32332d3233203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:48:fc:c8:7f:c8:44:04:5b:40:64:89:8b:62:43:62:73:b4:
         9e:af:0a:6d:64:b8:3c:22:ac:0d:bc:5f:08:00:eb:be:3f:a3:
         94:a8:30:d2:27:34:d4:a3:0a:34:de:7d:d8:91:d8:4a:d3:3d:
         c9:95:d9:31:ab:37:84:6d:a8:0f:22:59:60:d2:c3:e0:c9:fb:
         bc:ad:f7:a2:b5:e0:a1:9b:43:e2:59:5b:f4:ad:75:04:2b:07:
         b3:d6:78:de:5a:35:77:f4:3e:bd:b3:9f:f9:ac:33:bd:22:c7:
         f5:c0:ad:af:c6:ec:e4:6c:6c:0f:af:cc:fb:02:00:ec:eb:1a:
         13:25:3d:bf:72:cf:d3:2f:41:95:a2:4f:71:2a:7a:bf:bc:12:
         3b:a1:96:37:f5:fd:4e:9d:b0:33:ac:b1:0c:16:2c:a7:38:32:
         aa:4f:f5:d9:61:f3:11:a1:97:4c:6f:83:f6:52:fb:2f:7d:a7:
         e7:76:ae:c2:39:a3:ec:d0:99:49:b1:15:5f:ea:79:57:dd:c2:
         2d:2e:44:75:8c:da:88:2e:92:cd:df:07:21:7d:fe:49:f7:20:
         ab:df:c0:cf:e6:1a:32:1d:ef:d1:e2:65:3d:9f:df:ee:2d:0c:
         75:e9:e0:ad:7a:46:a2:e1:db:6c:68:7f:31:d6:cf:ea:27:26:
         3d:8c:e5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:43:11 2025 by rpki-client