Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa
File:                     3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa (raw, json)
Hash identifier:          rs7ZZAZg46x8jtp0XLIVsq+UbLhT8CF4hnhCIIsyQAI=
Subject key identifier:   B6:DD:1B:E5:14:2D:65:16:F1:57:79:B0:7F:E7:24:E1:F2:FC:E6:31
Certificate issuer:       /CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977
Certificate serial:       581E54E5CD8D63805AA265AEBC219CC51E038DB2
Authority key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa
Signing time:             Fri 19 Sep 2025 13:09:40 +0000
ROA not before:           Fri 19 Sep 2025 13:04:40 +0000
ROA not after:            Fri 18 Sep 2026 13:09:40 +0000
asID:                     53138
IP address blocks:        186.192.240.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl
                          rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1e:54:e5:cd:8d:63:80:5a:a2:65:ae:bc:21:9c:c5:1e:03:8d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977
        Validity
            Not Before: Sep 19 13:04:40 2025 GMT
            Not After : Sep 18 13:09:40 2026 GMT
        Subject: CN=B6DD1BE5142D6516F15779B07FE724E1F2FCE631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:57:dd:9c:f6:bd:1a:2a:f7:8e:c0:ba:79:
                    13:ea:a1:b7:22:67:13:dc:82:48:cd:40:ee:27:86:
                    4a:8e:6e:ac:8c:4b:a9:ad:55:b2:74:38:53:7e:5f:
                    49:e7:6c:4c:e0:ed:f8:3d:ed:a2:32:06:d1:7c:f3:
                    b4:c0:e1:35:1e:01:56:72:cf:b9:8c:ce:6c:29:28:
                    c9:7c:9a:9f:78:4d:d1:9e:c0:03:28:e2:55:9e:42:
                    5c:a2:c8:6c:83:58:c5:50:fa:05:f4:a6:1f:9f:d4:
                    c1:77:6e:7f:08:74:5d:e6:98:da:79:74:df:da:88:
                    31:58:0e:4f:ef:53:28:50:70:f9:28:8d:2b:9c:0d:
                    92:f9:0e:3e:39:a3:cc:4d:70:98:b4:d8:ba:e3:9d:
                    39:9c:9d:68:9c:7b:a5:96:ef:20:de:52:c2:7a:0a:
                    42:e9:b2:c4:3d:e5:72:b2:34:15:84:87:36:e4:39:
                    c3:dd:14:b2:0b:94:b6:34:93:34:3e:49:e5:7a:6a:
                    57:1e:e2:8a:e6:9c:7a:ac:ed:1c:dd:8e:91:26:d6:
                    c9:8e:23:cb:fd:03:95:4d:89:c1:db:72:8f:c6:8e:
                    e8:80:35:d9:cf:8d:9f:84:90:f0:f5:d6:0e:5c:ed:
                    cd:ff:e1:18:ef:96:85:04:f6:5a:3e:31:d1:9e:d4:
                    e7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DD:1B:E5:14:2D:65:16:F1:57:79:B0:7F:E7:24:E1:F2:FC:E6:31
            X509v3 Authority Key Identifier:
                keyid:39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:b7:01:7c:40:5e:1d:a1:fc:e2:ce:bd:c1:46:c9:f1:36:75:
         b6:82:17:af:ff:fd:62:b1:8d:ec:fa:65:0d:0e:11:3a:65:04:
         b4:95:c9:41:c8:c0:b9:c8:be:2e:ba:4a:35:52:04:60:a2:99:
         48:d7:1f:a5:14:e5:39:2c:e3:48:08:5a:7c:c6:99:16:a3:17:
         79:25:c6:7f:47:bd:77:0c:c9:94:4f:de:1d:22:88:f8:6c:9b:
         fb:45:d0:ae:27:65:a4:67:83:0c:27:28:a2:be:4c:98:0e:e5:
         7f:a9:8f:e2:e4:b2:2b:e1:83:99:5f:1d:4e:19:9b:ab:5b:2f:
         5d:83:0c:b2:df:02:ff:8e:d2:c8:62:49:ab:bd:35:95:79:5b:
         41:78:15:af:29:13:26:9f:1c:b8:48:8c:b9:67:08:51:13:b2:
         68:a1:20:2d:bc:c4:ea:21:55:69:b3:f4:da:ad:eb:84:c6:47:
         19:1d:7f:cb:9b:42:5b:e4:46:db:c4:f0:84:7e:11:50:58:fb:
         42:53:65:b0:46:62:93:d7:95:87:e3:1b:f9:a8:15:96:79:f0:
         c2:f5:36:ce:ec:3c:73:67:f0:08:94:36:a0:73:d4:46:f8:04:
         c7:16:e9:1a:5e:2f:1d:db:3b:de:2d:eb:e2:b8:d1:1d:3a:ad:
         e5:c6:b8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:28:16 2025 by rpki-client