Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231362e302f32342d3234203d3e203238323936.roa
File:                     3138392e33362e3231362e302f32342d3234203d3e203238323936.roa (raw, json)
Hash identifier:          qjMO34LHZ49uso7J8OlaqEJV7q7/x4c3dEqrcSbzDCM=
Subject key identifier:   C0:93:4C:EF:23:14:F9:AF:E7:B9:32:EF:EA:74:DA:A3:FB:EC:89:C1
Certificate issuer:       /CN=70B9C65823B529121333565E1FBBC0AFCAA62A2F
Certificate serial:       4A40A8173D94AA16E9B57FFF018BFFF35E6B8439
Authority key identifier: 70:B9:C6:58:23:B5:29:12:13:33:56:5E:1F:BB:C0:AF:CA:A6:2A:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231362e302f32342d3234203d3e203238323936.roa
Signing time:             Fri 03 Oct 2025 02:29:24 +0000
ROA not before:           Fri 03 Oct 2025 02:24:24 +0000
ROA not after:            Fri 02 Oct 2026 02:29:24 +0000
asID:                     28296
IP address blocks:        189.36.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.crl
                          rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:40:a8:17:3d:94:aa:16:e9:b5:7f:ff:01:8b:ff:f3:5e:6b:84:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B9C65823B529121333565E1FBBC0AFCAA62A2F
        Validity
            Not Before: Oct  3 02:24:24 2025 GMT
            Not After : Oct  2 02:29:24 2026 GMT
        Subject: CN=C0934CEF2314F9AFE7B932EFEA74DAA3FBEC89C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:06:0c:08:ec:e8:ff:b5:41:db:ee:d9:a0:
                    b4:73:05:f0:47:1c:0b:b2:44:4d:a2:ec:a7:37:1f:
                    21:4d:5e:0d:5d:ad:8b:3d:1a:a9:6e:10:9b:6f:37:
                    1d:b9:ad:5f:49:24:44:1b:9b:70:dd:5d:9f:53:39:
                    fb:3e:d3:16:05:02:56:a3:16:36:d2:d9:42:1e:06:
                    28:7d:f2:88:3a:e7:4b:b3:d1:15:d5:3d:b7:f9:dc:
                    ba:91:11:01:13:ad:51:c8:fb:2c:d5:2e:a3:df:d9:
                    fc:c7:50:d0:e4:82:ad:06:93:90:89:7c:bb:84:30:
                    30:49:cd:43:df:b0:c7:f5:57:35:47:01:ac:96:cc:
                    a8:8d:c4:90:3c:a3:dc:51:47:b3:01:3e:47:6d:55:
                    c7:f6:96:50:2c:0d:7f:1f:e5:98:77:09:d8:d6:0c:
                    66:00:ee:94:0d:af:4b:27:14:4d:ba:df:61:aa:c6:
                    63:9d:f7:5c:6d:c3:97:31:96:25:66:9f:12:20:44:
                    c5:e8:54:4b:88:ba:58:a3:44:94:fd:41:2b:21:b0:
                    a5:ad:13:f7:c5:dc:74:13:b2:fd:b8:dc:ba:19:b7:
                    2e:87:da:a2:f1:40:e9:a3:b2:0d:d3:a1:b9:e3:6a:
                    54:85:41:01:b1:1f:f5:38:89:64:4f:3b:9f:80:20:
                    16:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:93:4C:EF:23:14:F9:AF:E7:B9:32:EF:EA:74:DA:A3:FB:EC:89:C1
            X509v3 Authority Key Identifier:
                keyid:70:B9:C6:58:23:B5:29:12:13:33:56:5E:1F:BB:C0:AF:CA:A6:2A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231362e302f32342d3234203d3e203238323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:4c:18:be:c6:b1:1a:73:0c:42:c3:55:9c:42:1a:16:11:d1:
         f8:17:21:06:f1:49:2f:0d:53:46:70:92:e8:be:4c:3e:57:4b:
         63:90:a4:6a:03:41:ac:a3:b5:4c:ea:e2:2c:97:b0:89:ee:4d:
         56:46:8c:91:57:fa:72:d3:68:1c:21:cb:e5:78:1b:d3:06:cb:
         05:7f:e5:e3:4a:2c:b3:48:e4:92:9b:78:58:91:3a:a8:ff:50:
         c3:d7:be:8f:c0:35:5e:1a:32:f7:36:31:e8:19:ae:e4:cd:ca:
         8f:9f:0e:08:27:5d:95:d4:11:37:47:40:6a:fe:b7:38:b1:23:
         e4:5b:d4:d9:be:80:41:94:34:f4:6c:c9:63:26:70:2d:f0:d0:
         c2:64:69:d9:41:6c:4c:8e:f0:de:c5:7f:50:56:2a:6d:2c:d2:
         a8:94:5b:d5:e7:85:d2:6e:41:d3:7e:3d:48:93:87:ad:e9:ad:
         02:01:a0:1a:84:82:f1:3d:2e:ac:1e:50:8c:34:6d:6f:4f:fd:
         b9:e2:21:32:44:dd:21:ef:64:ac:0a:8f:ec:00:eb:26:1b:86:
         4a:26:63:61:06:14:9d:86:6d:2c:e3:36:4a:1a:69:83:de:13:
         18:c4:01:ca:69:d8:98:50:fd:df:bd:c4:18:d7:b7:40:8d:13:
         e3:80:ad:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:34:43 2025 by rpki-client