Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139322e302f32302d3332203d3e20323632363137.roa
File:                     3138372e36322e3139322e302f32302d3332203d3e20323632363137.roa (raw, json)
Hash identifier:          uhD/nhpi7im9oCtQkd0WQlYsOfhbXYjmJj1MiL9XF4o=
Subject key identifier:   19:D8:4B:F4:BD:A3:4F:72:CF:BF:FB:F4:B2:95:BC:AB:AB:19:80:6A
Certificate issuer:       /CN=700B164F16E24A0A809CC317627FE42A6C02FBB6
Certificate serial:       6FE4CAA44451636E4BF4D8AB7CBD65F160697E04
Authority key identifier: 70:0B:16:4F:16:E2:4A:0A:80:9C:C3:17:62:7F:E4:2A:6C:02:FB:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/700B164F16E24A0A809CC317627FE42A6C02FBB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139322e302f32302d3332203d3e20323632363137.roa
Signing time:             Wed 24 Sep 2025 13:58:28 +0000
ROA not before:           Wed 24 Sep 2025 13:53:28 +0000
ROA not after:            Wed 23 Sep 2026 13:58:28 +0000
asID:                     262617
IP address blocks:        187.62.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/700B164F16E24A0A809CC317627FE42A6C02FBB6.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/700B164F16E24A0A809CC317627FE42A6C02FBB6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/700B164F16E24A0A809CC317627FE42A6C02FBB6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e4:ca:a4:44:51:63:6e:4b:f4:d8:ab:7c:bd:65:f1:60:69:7e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700B164F16E24A0A809CC317627FE42A6C02FBB6
        Validity
            Not Before: Sep 24 13:53:28 2025 GMT
            Not After : Sep 23 13:58:28 2026 GMT
        Subject: CN=19D84BF4BDA34F72CFBFFBF4B295BCABAB19806A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:66:9a:35:0f:68:36:ac:8e:59:7d:2a:9a:a7:
                    95:7d:cc:3a:dc:f9:7c:db:7b:ed:f2:18:f4:73:5a:
                    d6:ca:6b:e0:92:21:2c:76:c7:7a:c3:ec:0d:d0:74:
                    aa:7d:59:89:d2:bb:55:c9:55:96:ea:a1:31:f8:02:
                    4f:99:ed:2f:c7:a5:db:ac:d6:09:b6:eb:5b:82:ad:
                    d1:e6:1a:21:c5:0e:fc:63:19:19:75:ea:83:94:dc:
                    4a:52:90:cb:c8:30:77:b1:b0:ff:0a:08:ed:54:8a:
                    2b:0a:1f:32:df:51:92:90:f8:37:32:cd:a5:a7:d8:
                    79:0f:95:fb:10:9e:a6:9b:03:8d:f9:9d:70:17:b8:
                    de:e5:89:86:0e:07:4d:99:13:b9:33:ba:ca:55:eb:
                    2a:eb:71:c3:3e:9e:65:c0:5c:ea:4f:15:0b:a4:ba:
                    09:2b:a7:cb:b8:52:f9:ae:49:cf:4f:20:0f:f0:de:
                    9d:a7:d6:b0:3d:d3:66:62:71:0f:a3:e9:6f:e0:42:
                    7c:33:db:72:8e:d5:29:c8:47:ff:13:23:cb:67:80:
                    2d:9c:40:99:0f:ad:55:f5:93:47:13:cc:b3:33:fd:
                    dd:80:cb:c9:19:00:97:74:c3:92:21:67:f6:ad:3e:
                    d2:35:97:19:34:e0:c7:ea:46:09:4a:dc:22:0f:29:
                    11:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D8:4B:F4:BD:A3:4F:72:CF:BF:FB:F4:B2:95:BC:AB:AB:19:80:6A
            X509v3 Authority Key Identifier:
                keyid:70:0B:16:4F:16:E2:4A:0A:80:9C:C3:17:62:7F:E4:2A:6C:02:FB:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/700B164F16E24A0A809CC317627FE42A6C02FBB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/700B164F16E24A0A809CC317627FE42A6C02FBB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139322e302f32302d3332203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:ee:1e:09:14:d4:a5:92:31:29:c9:1a:65:80:5f:e0:a9:eb:
         8b:86:25:a9:8a:38:7a:58:3b:73:46:a7:5c:12:b7:a8:4f:bd:
         da:87:a1:4e:20:dd:87:ca:fd:0c:16:46:89:0b:b6:5a:b2:0a:
         9b:c4:11:4c:6b:b5:50:6c:c1:e5:7e:aa:00:7d:b0:18:e5:b2:
         26:6a:9f:5b:57:46:af:e1:3c:24:7a:4a:79:28:a2:d8:49:3c:
         cd:57:ad:b6:88:f0:75:f2:d4:50:10:cc:f8:e2:0e:d7:5c:28:
         9b:24:d5:f2:95:39:3a:99:83:95:75:d7:2c:14:2f:a9:c4:73:
         8f:61:0c:35:48:3d:c7:35:01:42:a6:c6:66:59:94:76:78:a3:
         69:a7:ef:f7:6e:bb:fc:e7:53:c7:5f:3f:5f:1c:73:49:a5:f7:
         26:9a:84:e0:16:b0:f5:47:12:2c:78:ef:a3:be:77:10:98:b9:
         94:6d:5e:3d:52:99:94:b0:90:23:a2:b7:d6:6f:77:b3:f6:4b:
         dc:63:a2:1a:a1:f9:da:9d:96:a9:78:67:31:ee:0d:fb:57:72:
         8f:40:77:e5:e5:c4:76:eb:17:7d:10:5c:e5:f7:21:69:c2:43:
         4c:05:93:77:4f:b4:a8:ac:46:8d:90:1b:9c:aa:6e:0f:4f:46:
         88:16:b3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:52:13 2025 by rpki-client