Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3230382e302f32302d3230203d3e203238323936.roa
File:                     3138392e33362e3230382e302f32302d3230203d3e203238323936.roa (raw, json)
Hash identifier:          i2RM3SY2ydNijFZimq5IzLbq8sZaVA2peOLn8JCf2vw=
Subject key identifier:   8F:4F:84:E1:3F:DB:F3:07:09:FF:04:59:AE:DD:FA:D8:0C:79:41:FD
Certificate issuer:       /CN=70B9C65823B529121333565E1FBBC0AFCAA62A2F
Certificate serial:       1C4994033A4469277D02AA5D589E8A10E07D0E69
Authority key identifier: 70:B9:C6:58:23:B5:29:12:13:33:56:5E:1F:BB:C0:AF:CA:A6:2A:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3230382e302f32302d3230203d3e203238323936.roa
Signing time:             Fri 03 Oct 2025 02:29:12 +0000
ROA not before:           Fri 03 Oct 2025 02:24:12 +0000
ROA not after:            Fri 02 Oct 2026 02:29:12 +0000
asID:                     28296
IP address blocks:        189.36.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.crl
                          rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:49:94:03:3a:44:69:27:7d:02:aa:5d:58:9e:8a:10:e0:7d:0e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B9C65823B529121333565E1FBBC0AFCAA62A2F
        Validity
            Not Before: Oct  3 02:24:12 2025 GMT
            Not After : Oct  2 02:29:12 2026 GMT
        Subject: CN=8F4F84E13FDBF30709FF0459AEDDFAD80C7941FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e0:07:43:87:e9:4c:69:d9:c4:1d:1c:81:67:
                    9f:e2:11:17:3b:f2:00:cc:69:61:3c:0d:a8:88:5b:
                    ba:25:d3:1a:71:4e:e9:dd:90:91:d5:9e:08:ed:e6:
                    b1:d8:57:12:13:cb:cf:79:cd:7b:ff:3c:fe:49:7c:
                    36:13:81:86:07:d9:94:96:c4:8a:6f:49:14:cb:20:
                    72:ac:cd:73:d1:11:8e:f0:e4:03:31:29:8d:82:f1:
                    b4:d3:e9:a3:09:e4:e7:c9:39:24:66:ed:34:79:b5:
                    78:84:f5:69:20:5e:ef:bc:70:77:f7:33:c8:48:65:
                    b4:f0:88:72:11:63:26:ca:fa:0f:be:d7:76:21:d8:
                    f6:f9:2c:46:da:67:e7:3b:31:53:24:b4:86:d0:b0:
                    e9:98:13:35:a1:3b:28:22:30:6d:bc:21:4b:13:1d:
                    a9:33:a5:37:ef:42:0f:94:3f:f9:dd:ea:26:2a:3e:
                    9d:db:e9:dc:1a:2f:8a:2b:b0:17:20:48:dd:e5:6e:
                    a9:20:a7:79:80:36:57:45:d5:37:d9:a7:b0:ae:0e:
                    66:7c:4c:ab:c4:06:7b:89:3d:ad:a9:88:72:5a:d4:
                    3c:16:93:e9:b5:01:a0:1c:fa:35:6c:a2:99:bb:c5:
                    d0:d7:59:20:d6:ad:7f:f2:9c:88:88:a5:33:3a:a8:
                    66:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4F:84:E1:3F:DB:F3:07:09:FF:04:59:AE:DD:FA:D8:0C:79:41:FD
            X509v3 Authority Key Identifier:
                keyid:70:B9:C6:58:23:B5:29:12:13:33:56:5E:1F:BB:C0:AF:CA:A6:2A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3230382e302f32302d3230203d3e203238323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:12:04:45:85:91:70:6e:1e:6a:cd:6b:0c:a7:ad:2a:67:d5:
         b3:a6:c8:72:ca:77:fa:3d:1c:07:4e:8f:2a:7d:8d:23:20:27:
         00:34:85:d5:b2:0f:b0:c0:e6:d9:3c:33:85:24:99:d0:c5:ba:
         ad:23:5d:f9:ad:c9:98:0c:bd:28:b6:52:a4:47:56:6a:d1:fd:
         41:2e:84:4b:41:0f:e1:c0:16:9e:53:9d:da:1c:b0:cb:38:8d:
         40:1f:2c:4c:8b:e7:3a:69:86:40:ac:c4:ed:98:d4:a5:62:44:
         41:f2:13:15:62:8e:7d:93:26:50:38:b1:eb:97:41:0c:87:0b:
         f2:a3:89:f5:ae:18:66:97:ed:9e:4f:f2:a7:21:3d:93:83:de:
         17:fd:c5:e8:6e:06:fa:b4:c3:90:91:2e:0e:47:ec:30:44:1c:
         d3:e5:16:c6:aa:c2:95:14:e1:04:d1:6f:d5:27:ae:a0:47:f1:
         15:e2:e9:f2:54:80:43:f5:35:5c:33:8c:0c:62:85:ed:42:73:
         61:6d:ac:66:f0:e2:a5:cf:c1:35:86:24:ae:9a:c8:3c:b2:f3:
         a7:4e:70:30:4d:dd:f3:ec:6b:f3:10:53:d0:9b:71:15:f0:3e:
         47:fc:61:31:23:d2:94:92:1d:ce:43:e2:6b:3a:c9:44:8c:6f:
         96:c6:a4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:00:01 2025 by rpki-client