Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3138392e38342e3137362e302f32302d3332203d3e203238313731.roa
File:                     3138392e38342e3137362e302f32302d3332203d3e203238313731.roa (raw, json)
Hash identifier:          jHrieo0zsQTubV3HMPW8+PaOcAFEA5C4K1kPR46IY8I=
Subject key identifier:   0A:12:6D:B4:9A:2B:31:1D:EE:05:C2:C7:1D:AC:6C:FE:72:EB:1F:E5
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       728B7F3C18C9B4A6CFA7E766A273E1E40D9FD2CD
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3138392e38342e3137362e302f32302d3332203d3e203238313731.roa
Signing time:             Tue 09 Sep 2025 06:40:38 +0000
ROA not before:           Tue 09 Sep 2025 06:35:38 +0000
ROA not after:            Tue 08 Sep 2026 06:40:38 +0000
asID:                     28171
IP address blocks:        189.84.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:8b:7f:3c:18:c9:b4:a6:cf:a7:e7:66:a2:73:e1:e4:0d:9f:d2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Sep  9 06:35:38 2025 GMT
            Not After : Sep  8 06:40:38 2026 GMT
        Subject: CN=0A126DB49A2B311DEE05C2C71DAC6CFE72EB1FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:f0:62:1a:15:29:2e:21:6a:13:b9:6d:9d:
                    0b:17:6c:f5:87:29:17:89:e5:71:df:4e:88:d7:ae:
                    c3:b7:83:6e:b4:c0:a6:96:e6:66:a9:75:5d:53:0c:
                    34:71:31:ff:d6:87:7d:cf:b1:b0:5a:3b:f4:f3:82:
                    9d:fb:8b:c5:08:a7:0e:b6:c5:25:5e:6c:95:8c:13:
                    7a:1c:6c:a2:70:29:6e:9b:1a:1c:de:79:37:e8:6b:
                    2e:c5:0f:b7:6d:f2:ec:b5:04:df:33:dd:0d:ae:30:
                    0e:5b:cf:4b:8c:e4:ef:71:5f:00:48:12:64:a4:88:
                    4d:cf:4d:6b:bb:09:2a:d7:10:44:e1:ed:52:ac:31:
                    dd:51:ac:b4:d1:53:7d:fa:a8:63:c7:77:56:61:b3:
                    90:e8:96:47:fe:49:42:99:ff:69:aa:ef:a0:30:29:
                    d4:5f:5f:51:db:27:1d:29:71:0a:ea:b7:be:d7:8d:
                    0f:d6:00:dd:80:af:f1:ab:4f:aa:a2:f2:62:99:f2:
                    7c:ab:8a:26:b0:19:69:46:79:c4:74:09:33:cb:32:
                    12:42:ad:f1:79:ee:2e:bb:ee:54:b0:10:e4:07:a9:
                    06:35:99:fe:04:68:ad:f9:fb:20:3f:b4:4d:54:42:
                    9c:ba:69:6e:7e:30:ca:16:be:89:95:73:98:ba:25:
                    07:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:12:6D:B4:9A:2B:31:1D:EE:05:C2:C7:1D:AC:6C:FE:72:EB:1F:E5
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3138392e38342e3137362e302f32302d3332203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:a4:a0:d2:23:c0:8e:e1:2b:d1:51:89:da:04:59:b9:46:59:
         28:53:29:a0:ff:8e:b2:70:07:29:76:d0:9c:20:0e:ce:d5:53:
         55:22:27:bd:70:d1:10:75:5e:ae:8e:c5:dc:96:bb:46:47:d2:
         20:16:e1:56:15:ef:cf:71:dc:46:4f:0c:e0:76:56:00:8a:9b:
         7f:2e:b1:aa:a1:22:9e:85:6a:a0:6c:30:d2:2e:ec:5e:4b:bd:
         a9:3e:13:e6:da:7c:bc:df:29:67:fe:8c:4b:2f:d9:c5:b9:93:
         c3:fa:01:b5:a5:08:4f:cf:28:89:05:20:3c:9d:74:d4:84:6e:
         91:e0:8b:73:82:dd:34:e7:7c:dd:bb:bb:54:46:6f:0d:25:aa:
         ef:3f:ac:81:5f:82:ca:60:37:6e:c9:38:33:11:9f:67:f0:cf:
         61:12:c5:e3:a9:cb:66:89:1d:5e:da:38:50:e4:2a:d1:f5:00:
         ef:36:03:e1:f6:2e:dc:17:df:ac:b5:3c:76:22:44:62:83:fa:
         63:4b:1a:55:f0:6f:65:70:bd:a9:43:87:92:dd:77:c2:7f:70:
         2b:ff:f3:f2:c5:ad:c6:a1:a5:1a:3a:2b:7e:be:04:7f:e0:36:
         47:8b:67:55:98:0c:a5:4f:7e:db:4b:36:70:53:4c:46:19:1c:
         98:e2:b5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:06:04 2025 by rpki-client