Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e37382e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          GFDVF5jbN3eXMV24TsvXrMe16TQlyroz/Q8Hib4iBno=
Subject key identifier:   EF:8E:11:42:E8:3A:8C:3D:FB:D3:83:E2:0E:E6:0E:34:EF:82:36:93
Certificate issuer:       /CN=E106F083B0114D3D104DD1EBEA8257FB6FA59CF7
Certificate serial:       12130C6FD5BA1E701793C8CB5929FDC1990A9B63
Authority key identifier: E1:06:F0:83:B0:11:4D:3D:10:4D:D1:EB:EA:82:57:FB:6F:A5:9C:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32342d3234203d3e203238313834.roa
Signing time:             Wed 24 Sep 2025 18:29:33 +0000
ROA not before:           Wed 24 Sep 2025 18:24:33 +0000
ROA not after:            Wed 23 Sep 2026 18:29:33 +0000
asID:                     28184
IP address blocks:        189.89.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 22:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:13:0c:6f:d5:ba:1e:70:17:93:c8:cb:59:29:fd:c1:99:0a:9b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E106F083B0114D3D104DD1EBEA8257FB6FA59CF7
        Validity
            Not Before: Sep 24 18:24:33 2025 GMT
            Not After : Sep 23 18:29:33 2026 GMT
        Subject: CN=EF8E1142E83A8C3DFBD383E20EE60E34EF823693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c8:e7:7b:17:49:39:6a:79:ef:2b:23:a7:39:
                    34:45:c0:c1:c4:63:92:28:44:97:1d:e8:52:ea:50:
                    27:a6:a2:03:2c:7b:93:10:4c:46:5b:4c:bc:a8:73:
                    39:68:02:a8:d5:06:07:eb:5a:38:b5:65:89:92:a6:
                    a4:22:45:a9:af:de:92:00:10:9e:61:fa:51:4a:b2:
                    c2:31:92:85:00:1b:9f:32:6e:0c:24:eb:10:e8:12:
                    d9:36:91:b4:79:36:c3:fa:12:8b:51:46:01:c8:be:
                    64:ea:2c:99:8e:a4:ee:bd:19:ce:bd:3f:c9:e3:f4:
                    d0:b7:77:ce:b6:63:ae:76:55:ce:f1:f2:96:f9:29:
                    f0:d7:72:23:2e:f1:f2:c7:86:b7:1a:55:49:c1:fe:
                    24:62:95:c1:6b:f0:be:6b:68:77:70:2e:71:fe:20:
                    01:1d:0f:8c:69:b4:14:b9:51:6a:17:a6:c9:88:8b:
                    10:94:f9:4f:56:5b:83:1e:9b:e3:df:54:30:01:89:
                    7d:6e:34:76:c5:45:53:66:0a:af:d1:13:11:63:e4:
                    f3:ad:26:2a:2f:8c:38:16:a4:e8:2c:f3:72:c4:6f:
                    c2:d7:29:cd:0d:8f:93:8a:93:04:ea:82:d8:d0:d9:
                    f9:ae:4e:03:fb:bc:34:b4:a4:ac:79:b6:57:1c:75:
                    a9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8E:11:42:E8:3A:8C:3D:FB:D3:83:E2:0E:E6:0E:34:EF:82:36:93
            X509v3 Authority Key Identifier:
                keyid:E1:06:F0:83:B0:11:4D:3D:10:4D:D1:EB:EA:82:57:FB:6F:A5:9C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:04:ac:cc:00:20:52:ce:25:eb:5b:ea:7c:ae:af:fd:56:b6:
         11:a0:e4:ef:e7:c3:4a:99:9e:5d:e3:d3:3c:70:ca:43:8c:f0:
         7e:1b:31:ed:49:a8:88:78:4d:b3:04:0a:91:33:a4:b0:0a:07:
         f4:e7:95:c7:ee:b1:7b:7e:11:1a:02:b0:57:8d:d9:e2:15:a2:
         4f:f7:32:b9:c1:27:18:7c:6f:47:e0:53:1f:43:90:dd:b5:8e:
         87:85:b6:28:37:c7:49:08:9b:87:07:2e:df:18:1d:9b:6c:f7:
         0a:a6:90:87:49:25:94:d3:bb:02:85:b7:f9:2b:65:b3:23:f6:
         53:36:f6:e7:51:6a:aa:87:56:89:18:e2:d7:09:27:71:07:ad:
         73:a0:28:16:1d:2f:cd:70:b4:66:68:a1:de:12:91:87:c7:62:
         11:98:93:d5:99:5e:e2:81:2f:9b:44:ed:43:c8:af:85:ef:19:
         0e:5d:15:19:55:a3:7d:e1:f2:9b:13:ee:7a:dd:9f:89:99:c0:
         37:bb:62:6f:d5:db:8d:08:a9:6c:fd:ba:1e:0f:0c:c6:f4:7d:
         a1:de:58:43:47:3c:42:6f:d6:a5:13:54:82:b2:e1:56:c7:11:
         ce:89:d2:6e:e9:a8:53:60:70:8b:25:53:61:b7:dd:5a:8f:63:
         d8:cf:6c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:22:33 2025 by rpki-client