Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e39342e3137362e302f32302d3332203d3e203238363439.roa
File:                     3138372e39342e3137362e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier:          7ZFiwS++Eq3MS02f51kHaET5yRJitmmG51OvTVw2+9E=
Subject key identifier:   09:A9:53:1E:71:44:FB:12:65:EE:0B:84:07:97:3C:38:E4:66:0D:4A
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       56FFD9C3EFBCFE26BDF826D0AAABD95F5D1DFA3F
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e39342e3137362e302f32302d3332203d3e203238363439.roa
Signing time:             Fri 15 Aug 2025 20:31:16 +0000
ROA not before:           Fri 15 Aug 2025 20:26:16 +0000
ROA not after:            Fri 14 Aug 2026 20:31:16 +0000
asID:                     28649
IP address blocks:        187.94.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ff:d9:c3:ef:bc:fe:26:bd:f8:26:d0:aa:ab:d9:5f:5d:1d:fa:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:26:16 2025 GMT
            Not After : Aug 14 20:31:16 2026 GMT
        Subject: CN=09A9531E7144FB1265EE0B8407973C38E4660D4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:0f:a6:c6:51:32:76:39:b0:b2:83:0b:f0:
                    57:92:d2:d0:a7:d1:48:49:43:34:65:43:d2:78:f3:
                    f7:10:a8:df:b5:a2:99:70:a7:8f:74:1a:d3:eb:35:
                    be:81:f9:ae:a1:67:ea:2f:25:82:fe:e8:33:f1:00:
                    d2:9d:9f:89:67:88:1d:30:2c:a7:a6:63:49:b6:3c:
                    6f:bf:77:c9:3e:eb:c4:c1:b8:88:3a:28:76:97:4e:
                    49:3f:68:7a:0a:46:78:38:ad:84:ae:d2:fb:74:ec:
                    8a:27:d0:34:65:c7:a2:e7:d5:e2:54:9c:ab:65:85:
                    b7:a3:8e:ff:1c:52:0c:27:4f:ea:02:7c:82:e6:4e:
                    54:2c:b6:1a:8a:4f:8b:20:a2:c4:ab:b2:0f:db:28:
                    bd:91:b0:dc:31:62:41:48:59:97:07:58:59:ee:28:
                    05:f7:e8:29:11:18:dc:30:17:35:fd:10:92:20:bd:
                    ea:90:b2:79:0f:06:96:5e:16:5d:3d:2b:c1:5a:70:
                    53:ba:3a:b7:6b:ad:54:69:e1:43:49:b3:f6:11:b4:
                    bf:24:75:6f:84:21:5d:21:f7:c7:83:2a:f4:6b:94:
                    87:17:8f:de:15:d6:92:af:83:a5:9b:42:e0:90:e9:
                    c6:36:df:34:8f:84:68:06:41:a7:43:ef:8e:1f:52:
                    7e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A9:53:1E:71:44:FB:12:65:EE:0B:84:07:97:3C:38:E4:66:0D:4A
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e39342e3137362e302f32302d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:06:ed:b6:a3:f0:2f:e6:41:8f:76:da:44:f2:03:1f:d4:40:
         9d:27:cc:1a:d8:13:39:14:92:fc:03:67:f3:a1:59:37:6f:76:
         86:b2:16:85:5a:34:c9:44:af:15:cc:a0:fd:5d:ce:7b:87:c4:
         82:2d:fd:12:94:71:a0:a6:e9:df:27:30:f6:f4:2e:18:56:fb:
         cb:86:51:b5:d9:e4:7a:d7:cf:44:0a:00:5c:37:f6:94:70:32:
         fd:bb:b6:95:35:98:cf:c1:bd:ef:71:ae:2d:2e:dd:fe:a1:62:
         92:67:2e:38:8b:d6:fb:63:8a:df:e5:ce:a8:bf:71:75:2d:70:
         b2:51:5a:70:ef:94:3b:0d:a4:c6:b1:7d:30:a7:9b:c1:bc:02:
         cd:8c:98:0d:22:24:38:83:8f:91:45:71:05:09:eb:be:fd:92:
         74:e0:5b:ac:bf:71:38:06:79:6d:50:e9:4a:e6:e9:f5:de:81:
         15:e3:72:c5:44:8b:f2:e6:20:cf:b9:89:d9:c0:68:45:9e:d3:
         fd:21:a3:1e:8c:b0:d6:c4:83:2c:d4:34:21:f8:e5:44:35:5d:
         f1:e7:27:52:fb:ad:3c:66:a3:13:c4:97:34:cd:5c:7e:9b:70:
         05:7a:48:11:9b:37:4c:ec:f7:9f:8d:48:dc:81:82:d3:7d:a3:
         cc:08:4f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:24:20 2025 by rpki-client