Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e33362e3232342e302f32302d3332203d3e203238363439.roa
File:                     3138392e33362e3232342e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier:          9F6yQI9mYVDqUetI/4M4prKRrSaDKlQUGJXVXvjA/Xw=
Subject key identifier:   37:D7:8E:4F:68:6F:D9:E6:1D:E8:29:62:60:2A:63:8D:EB:D9:FE:F5
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       7B0D1A0050976DC5676C72F8ABA3AA7D0DF6F4E9
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e33362e3232342e302f32302d3332203d3e203238363439.roa
Signing time:             Fri 15 Aug 2025 20:31:16 +0000
ROA not before:           Fri 15 Aug 2025 20:26:16 +0000
ROA not after:            Fri 14 Aug 2026 20:31:16 +0000
asID:                     28649
IP address blocks:        189.36.224.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:0d:1a:00:50:97:6d:c5:67:6c:72:f8:ab:a3:aa:7d:0d:f6:f4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:26:16 2025 GMT
            Not After : Aug 14 20:31:16 2026 GMT
        Subject: CN=37D78E4F686FD9E61DE82962602A638DEBD9FEF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4f:b1:f9:20:45:01:ba:8b:52:b4:5a:d2:ae:
                    2b:5c:a3:6a:3b:ef:59:43:56:3a:1b:43:64:2a:d9:
                    8e:3d:66:67:b8:54:94:81:f1:64:ef:89:c1:6f:7c:
                    f9:c8:01:4c:e1:2c:c2:bd:0c:8c:41:50:a0:25:d1:
                    3f:2b:72:94:53:4a:33:09:2d:5e:1c:7b:d0:1a:e0:
                    44:2b:e7:f6:48:23:cd:c9:a9:b5:cd:1c:d8:f6:8b:
                    2b:23:57:33:23:75:6b:02:11:74:cc:5e:26:78:66:
                    3f:e1:73:0f:10:2b:f6:91:c1:4a:8f:43:6b:04:27:
                    73:85:83:0c:45:14:e1:04:1e:ce:5d:8f:c5:c7:31:
                    84:14:46:db:b3:d5:b3:17:9c:1f:f5:18:44:75:f8:
                    d7:28:50:0f:eb:fd:bc:1e:a8:1b:96:83:db:73:19:
                    9e:41:65:7c:de:9a:96:d0:f0:92:a3:4b:61:29:95:
                    64:74:3c:c9:a1:46:d4:18:49:82:93:f3:1e:69:51:
                    93:4b:d3:fb:53:f5:4d:1c:20:dd:6f:1e:c4:5c:f0:
                    bb:26:a3:ea:d8:3f:66:df:50:63:fb:ea:82:42:cb:
                    ed:02:3d:f3:ae:24:86:57:c4:95:28:58:a1:04:5d:
                    d7:82:fd:32:c2:b3:0a:d1:d4:05:3b:91:d3:17:00:
                    26:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D7:8E:4F:68:6F:D9:E6:1D:E8:29:62:60:2A:63:8D:EB:D9:FE:F5
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e33362e3232342e302f32302d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:0c:9f:c7:2b:90:86:f8:a5:4d:b1:35:9e:28:cc:bb:14:2a:
         e8:fa:e6:24:81:37:9a:87:c6:ac:cf:25:e8:bd:5c:3b:74:6d:
         eb:63:9e:55:1b:44:b9:fa:e8:f4:34:ea:a8:cb:82:1e:30:55:
         3d:2f:88:93:98:e2:36:b8:2a:7b:72:d9:c1:6c:07:9a:4b:00:
         54:42:56:66:49:01:20:4f:2f:26:6b:9b:37:0e:54:06:f0:59:
         d3:a4:84:d7:2c:05:b9:a3:e1:86:34:11:e9:5f:2e:35:b8:bb:
         ce:5e:1a:5f:58:ef:12:ec:3c:72:48:40:e9:b4:9f:d8:e8:1a:
         6e:6e:a2:a7:6d:85:23:ab:87:6f:4e:e2:6e:84:e2:dc:ab:bd:
         da:68:66:82:31:f4:af:14:fa:18:79:0b:cb:da:2d:4f:bb:5c:
         b1:5d:11:de:a4:8e:d6:75:7b:4d:4e:26:11:3c:85:47:7c:05:
         49:e9:96:53:cf:d7:53:58:76:62:65:54:d3:12:87:8b:cc:f7:
         9d:81:2c:28:58:f0:3a:32:12:eb:9f:9c:74:39:21:bc:fd:6d:
         6a:75:9f:0b:29:fb:cb:b5:c4:5e:69:41:56:15:c3:f3:89:d3:
         8d:b6:e9:20:d2:29:3b:64:1c:8c:9b:67:a4:47:08:b3:60:49:
         da:b1:94:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:11:56 2025 by rpki-client