Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e33322e302f32302d3230203d3e20323639303733.roa
File:                     3138372e31372e33322e302f32302d3230203d3e20323639303733.roa (raw, json)
Hash identifier:          3yU+px4p5Mp6xJyKDQPtI4SPOWQ5+sdcG/NYn2BbRCM=
Subject key identifier:   0A:B9:DF:20:18:B4:A0:39:9A:87:A1:0B:CC:D2:91:02:96:F4:39:8D
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       3DF156502B405534CBBCB5EC13AF882A8EDCDC5A
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e33322e302f32302d3230203d3e20323639303733.roa
Signing time:             Tue 23 Sep 2025 15:19:31 +0000
ROA not before:           Tue 23 Sep 2025 15:14:31 +0000
ROA not after:            Tue 22 Sep 2026 15:19:31 +0000
asID:                     269073
IP address blocks:        187.17.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f1:56:50:2b:40:55:34:cb:bc:b5:ec:13:af:88:2a:8e:dc:dc:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Sep 23 15:14:31 2025 GMT
            Not After : Sep 22 15:19:31 2026 GMT
        Subject: CN=0AB9DF2018B4A0399A87A10BCCD2910296F4398D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8a:fe:c3:d2:0f:56:2f:f5:50:20:23:f1:47:
                    3f:54:b1:77:e2:8d:4b:8f:b6:fb:d7:d1:b4:f9:ea:
                    01:2c:24:2d:79:2c:5a:eb:5f:e4:18:04:9a:84:a8:
                    25:06:9a:28:c7:3f:39:59:ee:32:0d:ee:82:a3:ab:
                    df:e6:b7:fa:24:df:1d:88:74:d6:28:d6:aa:84:22:
                    ae:02:ff:6c:64:48:f4:4f:51:62:41:8d:8a:22:55:
                    8e:06:0e:58:ea:15:d6:7d:7b:71:e4:52:a5:59:79:
                    24:4f:9b:58:7f:6a:cb:7e:c3:ce:93:bc:2f:9b:4d:
                    6f:09:db:2d:8a:f8:56:3c:f4:89:46:f3:f5:0a:a0:
                    72:ac:7d:ee:6c:b2:63:30:9b:2f:66:93:ec:30:a3:
                    10:73:b6:02:ae:ad:c2:d3:83:5b:dc:f1:73:7a:a9:
                    80:df:a5:d2:4c:6b:ee:10:99:6c:6f:6f:e7:26:4e:
                    33:22:61:0f:74:2c:3a:2b:85:3e:bc:1a:f8:3c:34:
                    75:32:91:e6:01:6e:53:36:c3:2c:5c:18:30:07:96:
                    f4:4b:67:6d:73:99:56:32:d3:85:97:77:58:06:ab:
                    ba:20:f5:48:e7:fb:02:9f:2e:56:69:80:e9:d9:3e:
                    f1:01:b4:42:ac:f6:f9:50:1c:7f:0d:fb:97:e0:54:
                    e0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B9:DF:20:18:B4:A0:39:9A:87:A1:0B:CC:D2:91:02:96:F4:39:8D
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e33322e302f32302d3230203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c0:fa:a9:9c:b5:e0:9c:ae:4e:95:d3:85:34:24:0c:a8:1a:85:
         73:dc:70:e4:04:c9:17:bb:10:8f:aa:3a:e0:f7:69:a4:76:38:
         f6:29:c8:e2:0b:7d:dd:e3:e9:3c:65:13:51:88:36:84:d2:e4:
         43:18:03:7e:a3:a9:99:17:ea:3a:05:e4:4f:33:ec:bb:60:f9:
         97:d8:a1:52:e6:37:20:92:3f:aa:a9:99:04:a8:01:97:a5:b1:
         6a:4f:8b:37:32:ed:8c:96:73:96:28:ca:58:2f:e8:f1:75:1e:
         13:b6:91:b4:0e:cf:13:d0:2a:0e:03:15:69:2b:0f:34:d3:ff:
         cd:d4:b7:6f:33:52:d6:40:39:14:93:88:27:22:9d:c6:04:1a:
         8e:eb:6e:a6:83:66:ce:9e:f8:80:74:f1:a2:7d:ae:36:4a:8d:
         b6:93:3e:3e:78:14:d0:1c:78:ca:63:b3:1d:e3:1b:85:92:a0:
         f5:f6:34:5b:6c:bd:13:16:49:44:c8:00:b2:78:6c:09:93:25:
         65:01:94:e5:d5:a5:7a:cf:2e:2a:b1:89:ab:8c:ea:3c:42:fe:
         98:9c:5c:38:2b:5e:74:d4:44:5f:88:6a:75:ba:70:c1:77:27:
         d2:bb:88:30:4a:ac:67:6c:35:ae:2a:00:3b:9c:ba:f0:04:a6:
         c0:6e:3a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:04:04 2025 by rpki-client