Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3230392e302f32342d3234203d3e203238323936.roa
File:                     3138392e33362e3230392e302f32342d3234203d3e203238323936.roa (raw, json)
Hash identifier:          klkJI4Rd0p3h7E1+xMU12QzLARCZYzlvvRAzwpLHUNY=
Subject key identifier:   B3:DF:C7:23:0B:7E:C8:F3:78:CB:76:87:B2:6F:49:68:04:7D:CE:71
Certificate issuer:       /CN=70B9C65823B529121333565E1FBBC0AFCAA62A2F
Certificate serial:       12D7A8BDECA8A58ACAF3EBDFDCE3EB5D87ABC92B
Authority key identifier: 70:B9:C6:58:23:B5:29:12:13:33:56:5E:1F:BB:C0:AF:CA:A6:2A:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3230392e302f32342d3234203d3e203238323936.roa
Signing time:             Fri 03 Oct 2025 02:29:15 +0000
ROA not before:           Fri 03 Oct 2025 02:24:15 +0000
ROA not after:            Fri 02 Oct 2026 02:29:15 +0000
asID:                     28296
IP address blocks:        189.36.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.crl
                          rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d7:a8:bd:ec:a8:a5:8a:ca:f3:eb:df:dc:e3:eb:5d:87:ab:c9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B9C65823B529121333565E1FBBC0AFCAA62A2F
        Validity
            Not Before: Oct  3 02:24:15 2025 GMT
            Not After : Oct  2 02:29:15 2026 GMT
        Subject: CN=B3DFC7230B7EC8F378CB7687B26F4968047DCE71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4b:8b:fb:38:86:82:7f:ce:65:c2:a1:ff:e7:
                    a5:63:57:ef:db:64:3a:57:c7:3a:67:80:74:16:d0:
                    86:5a:ed:ba:0a:3f:23:04:6a:ca:07:ca:c6:60:1d:
                    c0:3b:4b:50:53:d1:3d:1a:77:cf:39:42:43:1b:cb:
                    5d:f5:97:82:99:00:80:cb:74:68:94:9f:9e:cd:53:
                    ce:e1:28:46:8f:ee:a3:19:fe:1d:34:f2:a0:f2:f4:
                    81:ff:08:08:6e:f9:f1:0b:ca:a8:ca:ea:82:95:65:
                    76:1e:f3:61:0f:ea:9f:61:39:d1:ce:cd:9a:db:44:
                    a5:2f:a3:24:d1:cc:4f:dc:d9:40:2e:99:e5:60:cc:
                    bc:2b:9c:87:2d:aa:96:49:11:b4:87:58:7b:3b:e0:
                    db:0e:c7:20:b4:4b:71:27:b4:1b:ae:68:64:d9:3d:
                    97:64:01:3a:8e:b0:af:4c:5c:3a:e2:16:d3:da:37:
                    a5:73:14:38:54:63:21:8e:d5:34:c6:f4:a4:bd:e3:
                    25:0f:28:ca:53:cf:38:af:12:c3:91:a5:a2:b4:9c:
                    fc:a9:0e:58:89:bf:62:46:82:65:91:ec:7c:df:d0:
                    32:46:75:fc:ee:d6:6a:60:39:56:0a:6d:5c:e8:99:
                    79:92:91:4a:04:e2:cb:57:cd:99:23:80:1a:67:fe:
                    23:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DF:C7:23:0B:7E:C8:F3:78:CB:76:87:B2:6F:49:68:04:7D:CE:71
            X509v3 Authority Key Identifier:
                keyid:70:B9:C6:58:23:B5:29:12:13:33:56:5E:1F:BB:C0:AF:CA:A6:2A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3230392e302f32342d3234203d3e203238323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:87:e7:7c:4c:68:35:1f:e7:d9:b5:32:6f:97:69:6d:f5:6d:
         9d:3c:c5:ed:01:e8:95:73:48:3b:c5:44:02:f2:2d:c3:0f:4f:
         04:e6:a8:27:ce:37:50:2d:eb:96:e2:6b:dc:77:f1:b2:3f:56:
         bb:ca:c4:f8:f6:af:cd:4f:08:46:fc:ee:91:a8:56:bf:16:57:
         74:9a:eb:47:bd:c0:07:ac:be:4f:c7:6b:0d:b8:8d:19:b3:d4:
         f5:2c:de:cf:69:43:95:40:84:e8:86:dc:b7:84:fb:7c:41:06:
         82:15:dc:20:bc:b1:33:d1:67:cc:19:32:7d:c2:38:ab:76:8e:
         44:c2:5c:a6:91:70:e8:53:85:ef:77:82:f0:0b:dd:37:68:08:
         51:05:25:5d:31:ef:93:5a:07:e9:f5:27:00:42:7f:d6:8a:03:
         be:6d:45:98:01:cc:ca:46:0a:2a:d3:86:c3:26:24:c1:b1:e3:
         f0:50:fd:e7:53:fb:a0:3d:ed:4f:23:42:a3:4d:1d:56:fe:e4:
         21:45:ae:da:93:ee:65:f4:57:8a:3d:f0:ed:6a:db:f1:82:93:
         23:43:09:a9:79:bd:9a:e4:ff:93:76:a7:33:0a:4c:88:4b:8a:
         a1:cf:f1:1d:4d:80:db:c3:c2:4b:e7:d2:e3:93:b6:43:35:3c:
         eb:b1:f5:7d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEteoveyopYrK8+vf3OPrXYerySswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBCOUM2NTgyM0I1MjkxMjEzMzM1NjVFMUZCQkMwQUZD
QUE2MkEyRjAeFw0yNTEwMDMwMjI0MTVaFw0yNjEwMDIwMjI5MTVaMDMxMTAvBgNV
BAMTKEIzREZDNzIzMEI3RUM4RjM3OENCNzY4N0IyNkY0OTY4MDQ3RENFNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCS4v7OIaCf85lwqH/56VjV+/b
ZDpXxzpngHQW0IZa7boKPyMEasoHysZgHcA7S1BT0T0ad885QkMby131l4KZAIDL
dGiUn57NU87hKEaP7qMZ/h008qDy9IH/CAhu+fELyqjK6oKVZXYe82EP6p9hOdHO
zZrbRKUvoyTRzE/c2UAumeVgzLwrnIctqpZJEbSHWHs74NsOxyC0S3EntBuuaGTZ
PZdkATqOsK9MXDriFtPaN6VzFDhUYyGO1TTG9KS94yUPKMpTzzivEsORpaK0nPyp
DliJv2JGgmWR7Hzf0DJGdfzu1mpgOVYKbVzomXmSkUoE4stXzZkjgBpn/iO/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUs9/HIwt+yPN4y3aHsm9JaAR9znEwHwYDVR0j
BBgwFoAUcLnGWCO1KRITM1ZeH7vAr8qmKi8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxhS0ZwVWQ2Zm50NFBuNEFlZFpUUzg2U0pXcVZjSzFCenNUaEMyZFlo
R2UvMC83MEI5QzY1ODIzQjUyOTEyMTMzMzU2NUUxRkJCQzBBRkNBQTYyQTJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwQjlDNjU4MjNCNTI5MTIx
MzMzNTY1RTFGQkJDMEFGQ0FBNjJBMkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMYUtGcFVkNmZudDRQbjRBZWRaVFM4NlNKV3FWY0sxQnpzVGhDMmRZaEdlLzAv
MzEzODM5MmUzMzM2MmUzMjMwMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzIzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvSTRMA0GCSqGSIb3DQEBCwUAA4IBAQA+h+d8TGg1
H+fZtTJvl2lt9W2dPMXtAeiVc0g7xUQC8i3DD08E5qgnzjdQLeuW4mvcd/GyP1a7
ysT49q/NTwhG/O6RqFa/Fld0mutHvcAHrL5Px2sNuI0Zs9T1LN7PaUOVQITohty3
hPt8QQaCFdwgvLEz0WfMGTJ9wjirdo5EwlymkXDoU4Xvd4LwC903aAhRBSVdMe+T
Wgfp9ScAQn/WigO+bUWYAczKRgoq04bDJiTBsePwUP3nU/ugPe1PI0KjTR1W/uQh
Ra7ak+5l9FeKPfDtatvxgpMjQwmpeb2a5P+TdqczCkyIS4qhz/EdTYDbw8JL59Lj
k7ZDNTzrsfV9
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:39:11 2025 by rpki-client