Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231302e302f32342d3234203d3e203238323936.roa
File:                     3138392e33362e3231302e302f32342d3234203d3e203238323936.roa (raw, json)
Hash identifier:          GJUm/jhRerAIcQh3SfbhYTgYqQ7zAdCw/ZFvN1EHRpc=
Subject key identifier:   88:6D:57:F4:64:E5:B7:80:73:36:2E:63:17:37:BE:DD:B0:03:90:72
Certificate issuer:       /CN=70B9C65823B529121333565E1FBBC0AFCAA62A2F
Certificate serial:       375C36C6EEDF21E2652456F1D960BDCD34169632
Authority key identifier: 70:B9:C6:58:23:B5:29:12:13:33:56:5E:1F:BB:C0:AF:CA:A6:2A:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231302e302f32342d3234203d3e203238323936.roa
Signing time:             Fri 03 Oct 2025 02:29:17 +0000
ROA not before:           Fri 03 Oct 2025 02:24:17 +0000
ROA not after:            Fri 02 Oct 2026 02:29:17 +0000
asID:                     28296
IP address blocks:        189.36.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.crl
                          rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:5c:36:c6:ee:df:21:e2:65:24:56:f1:d9:60:bd:cd:34:16:96:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B9C65823B529121333565E1FBBC0AFCAA62A2F
        Validity
            Not Before: Oct  3 02:24:17 2025 GMT
            Not After : Oct  2 02:29:17 2026 GMT
        Subject: CN=886D57F464E5B78073362E631737BEDDB0039072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d5:f4:5c:11:df:a3:64:56:73:d3:35:5a:04:
                    df:1c:df:49:08:2f:96:c9:d9:85:4b:be:43:11:bd:
                    0a:67:59:59:e0:c2:77:58:1b:c2:6a:6c:e5:07:d8:
                    59:c3:4a:71:ca:2b:27:c3:7e:f6:47:bc:a7:52:7c:
                    14:1f:2b:d1:8d:27:96:86:ad:da:f5:83:c3:00:2b:
                    71:83:57:8e:c6:a2:37:4a:19:a4:bb:05:20:ba:2c:
                    9b:39:04:b6:02:ce:14:01:2f:51:da:70:27:e5:5f:
                    9b:b7:db:a0:39:34:ee:7a:ab:cc:9a:f4:3d:76:0b:
                    fe:28:ad:94:cc:c8:f4:0e:bb:bf:39:98:c8:b1:01:
                    97:f2:2e:e5:8d:5b:23:aa:1b:8d:83:68:cf:d6:93:
                    66:21:4a:aa:71:0d:ef:16:3f:e1:ca:51:96:da:b9:
                    e6:b4:d1:8e:00:b3:c6:31:55:60:e7:f3:e6:47:0e:
                    c8:0d:1b:a9:cd:8b:69:3f:19:fa:6c:98:00:86:ab:
                    6c:d0:0c:92:9f:03:0e:6d:ec:a5:bb:d1:42:51:39:
                    6c:74:72:80:7f:35:4b:a1:6c:54:05:ab:92:db:a6:
                    9b:af:4c:6d:20:9e:0c:78:ed:93:13:c6:9d:90:34:
                    f2:a9:5d:d9:3e:1a:7b:b9:4e:25:14:f5:15:4a:97:
                    e1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6D:57:F4:64:E5:B7:80:73:36:2E:63:17:37:BE:DD:B0:03:90:72
            X509v3 Authority Key Identifier:
                keyid:70:B9:C6:58:23:B5:29:12:13:33:56:5E:1F:BB:C0:AF:CA:A6:2A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231302e302f32342d3234203d3e203238323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:62:24:30:3f:a8:79:fb:23:f6:fb:41:b7:37:f4:0f:84:c5:
         00:0f:b0:46:e5:96:b2:a1:77:6f:78:22:05:dd:4b:a9:1e:2c:
         0e:9b:d4:95:03:cd:7d:cb:60:44:42:47:cb:e7:1b:6b:ef:a4:
         fa:fd:f2:5e:ce:0d:8b:ce:69:44:39:6f:2c:95:1a:55:f3:6c:
         a9:b0:7f:ec:7a:a6:86:f1:c7:dc:e4:1e:de:ef:32:46:cd:bd:
         ac:0e:bf:85:e9:ba:f4:5d:e9:71:bb:d4:66:fe:07:15:75:f7:
         22:da:4a:71:01:aa:40:41:24:1a:db:a9:8f:50:75:ac:9e:fe:
         44:60:65:7e:fe:78:58:e5:29:b6:ad:9e:5c:12:f1:9e:c1:0b:
         6a:78:1c:25:19:af:25:ca:ed:66:fc:95:55:b2:18:4e:16:24:
         19:93:80:05:fe:70:f0:15:43:9d:ad:61:5a:6a:ed:0b:f8:ff:
         dd:bf:b5:a2:83:b3:6d:1a:09:24:0b:2d:a0:dd:5a:83:9f:98:
         82:dc:0d:5a:e6:a0:30:66:84:b8:22:5e:dc:fb:7e:81:6c:e0:
         5e:94:59:50:b3:8c:f4:48:e2:45:c8:aa:96:08:78:bd:8d:f9:
         f7:2f:38:d7:81:d2:7d:c5:02:b0:b5:ac:24:76:43:f9:f7:57:
         3c:d1:c7:d9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUN1w2xu7fIeJlJFbx2WC9zTQWljIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBCOUM2NTgyM0I1MjkxMjEzMzM1NjVFMUZCQkMwQUZD
QUE2MkEyRjAeFw0yNTEwMDMwMjI0MTdaFw0yNjEwMDIwMjI5MTdaMDMxMTAvBgNV
BAMTKDg4NkQ1N0Y0NjRFNUI3ODA3MzM2MkU2MzE3MzdCRUREQjAwMzkwNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj1fRcEd+jZFZz0zVaBN8c30kI
L5bJ2YVLvkMRvQpnWVngwndYG8JqbOUH2FnDSnHKKyfDfvZHvKdSfBQfK9GNJ5aG
rdr1g8MAK3GDV47GojdKGaS7BSC6LJs5BLYCzhQBL1HacCflX5u326A5NO56q8ya
9D12C/4orZTMyPQOu785mMixAZfyLuWNWyOqG42DaM/Wk2YhSqpxDe8WP+HKUZba
uea00Y4As8YxVWDn8+ZHDsgNG6nNi2k/GfpsmACGq2zQDJKfAw5t7KW70UJROWx0
coB/NUuhbFQFq5LbppuvTG0gngx47ZMTxp2QNPKpXdk+Gnu5TiUU9RVKl+FTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUiG1X9GTlt4BzNi5jFze+3bADkHIwHwYDVR0j
BBgwFoAUcLnGWCO1KRITM1ZeH7vAr8qmKi8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxhS0ZwVWQ2Zm50NFBuNEFlZFpUUzg2U0pXcVZjSzFCenNUaEMyZFlo
R2UvMC83MEI5QzY1ODIzQjUyOTEyMTMzMzU2NUUxRkJCQzBBRkNBQTYyQTJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwQjlDNjU4MjNCNTI5MTIx
MzMzNTY1RTFGQkJDMEFGQ0FBNjJBMkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMYUtGcFVkNmZudDRQbjRBZWRaVFM4NlNKV3FWY0sxQnpzVGhDMmRZaEdlLzAv
MzEzODM5MmUzMzM2MmUzMjMxMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzIzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvSTSMA0GCSqGSIb3DQEBCwUAA4IBAQBIYiQwP6h5
+yP2+0G3N/QPhMUAD7BG5ZayoXdveCIF3UupHiwOm9SVA819y2BEQkfL5xtr76T6
/fJezg2LzmlEOW8slRpV82ypsH/seqaG8cfc5B7e7zJGzb2sDr+F6br0Xelxu9Rm
/gcVdfci2kpxAapAQSQa26mPUHWsnv5EYGV+/nhY5Sm2rZ5cEvGewQtqeBwlGa8l
yu1m/JVVshhOFiQZk4AF/nDwFUOdrWFaau0L+P/dv7Wig7NtGgkkCy2g3VqDn5iC
3A1a5qAwZoS4Il7c+36BbOBelFlQs4z0SOJFyKqWCHi9jfn3LzjXgdJ9xQKwtawk
dkP591c80cfZ
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:14 2025 by rpki-client