Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e38362e3139342e302f32342d3234203d3e20323639303733.roa
File:                     3138372e38362e3139342e302f32342d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          KOjRjTD/+UnfDxVSRlrqsd2qFvja+ddD6QmFGF8HhVA=
Subject key identifier:   E8:F4:60:61:03:F7:96:BD:C4:00:C3:C8:32:72:64:64:57:D5:45:B2
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       40C983ADB4941DAA2E9641733D7E552AF24A4E68
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e38362e3139342e302f32342d3234203d3e20323639303733.roa
Signing time:             Tue 23 Sep 2025 15:19:30 +0000
ROA not before:           Tue 23 Sep 2025 15:14:30 +0000
ROA not after:            Tue 22 Sep 2026 15:19:30 +0000
asID:                     269073
IP address blocks:        187.86.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c9:83:ad:b4:94:1d:aa:2e:96:41:73:3d:7e:55:2a:f2:4a:4e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Sep 23 15:14:30 2025 GMT
            Not After : Sep 22 15:19:30 2026 GMT
        Subject: CN=E8F4606103F796BDC400C3C83272646457D545B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:df:f7:a9:dc:fc:a3:b8:15:05:f1:00:ec:7f:
                    cb:28:08:44:ac:11:76:4e:61:3a:1f:cf:35:07:86:
                    a3:86:b0:40:41:05:48:35:33:01:3e:b2:9f:9c:a7:
                    41:0c:fb:28:cd:f4:50:71:9d:5d:a0:0f:a9:de:25:
                    50:03:3d:ba:19:1b:1d:ee:57:f0:f2:c9:34:c3:cc:
                    91:b3:04:ee:c2:c3:14:63:82:27:9a:dc:e3:e1:63:
                    d5:e9:4a:76:a5:87:37:42:90:84:3e:e1:46:42:15:
                    51:95:cd:55:55:ec:5a:8c:a8:84:36:f2:8a:a5:b6:
                    d8:fc:19:88:aa:16:88:c1:95:8f:08:3b:82:ac:c0:
                    0b:e1:9f:b7:d8:4b:d7:e4:9b:18:4a:6d:5f:8b:f1:
                    44:84:fb:b8:87:3b:f7:dd:89:cf:51:0b:5f:71:78:
                    10:5d:58:80:d2:26:bd:46:58:11:1c:40:b0:b0:84:
                    cc:fa:f8:3b:db:49:af:6f:0e:15:de:7a:34:2d:28:
                    92:dd:e3:5b:b0:1e:df:f7:cd:ef:2b:96:07:4f:0d:
                    e4:8d:94:d4:04:6e:fd:a2:a5:f9:44:0b:c7:61:74:
                    c4:1e:c8:a4:26:5d:16:e3:2a:d0:b5:fe:30:bf:b4:
                    5e:d7:df:08:5d:6b:73:66:98:f5:a1:21:26:60:ce:
                    99:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F4:60:61:03:F7:96:BD:C4:00:C3:C8:32:72:64:64:57:D5:45:B2
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e38362e3139342e302f32342d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:b6:d2:7e:be:ee:03:57:0d:e3:ba:f9:cc:24:46:45:0c:29:
         e1:bc:78:92:e6:d3:a6:21:11:88:cd:30:56:5e:95:4c:9e:6e:
         c5:38:e1:66:73:eb:2c:60:aa:c4:5a:85:82:72:45:bf:e8:46:
         44:f4:4b:b2:5e:af:8b:62:be:2a:b4:c4:b0:e3:4c:2f:1a:23:
         38:fc:43:11:71:f8:09:c0:ae:ef:a7:71:95:a2:44:3c:75:8b:
         e8:7f:db:9a:36:8c:a6:e7:28:b2:d7:dc:3e:a8:af:20:e9:be:
         01:6f:af:fc:83:c2:61:c7:ba:0e:ab:5e:e0:27:2f:b8:e0:54:
         07:03:af:89:c2:b9:fe:a0:e9:39:e6:23:1d:65:5b:57:30:32:
         d6:1c:7a:f6:44:22:0c:85:8d:0e:5e:93:a0:c6:14:d7:d6:4b:
         7d:3c:83:db:66:cc:f3:a3:bf:8c:2f:e4:4e:00:b3:36:05:2a:
         30:09:ab:17:24:11:6c:61:f5:af:a4:83:7a:f4:d6:f3:97:73:
         de:56:18:f2:5d:94:4f:b6:81:49:d1:c3:a6:74:c7:5e:ea:89:
         07:51:77:35:46:95:62:e4:c5:f9:7c:73:20:8e:82:af:fe:fc:
         31:44:52:88:83:c2:c4:89:8d:f3:ee:fc:9a:15:6f:ac:a7:c6:
         44:cb:fb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:03:51 2025 by rpki-client