Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/3134332e302e3139362e302f32322d3234203d3e20323634303130.roa
File:                     3134332e302e3139362e302f32322d3234203d3e20323634303130.roa (raw, json)
Hash identifier:          LW+H5ZeITPoCo8bhIHgK2VXGYW7HIwwPnUmMFGp5xHM=
Subject key identifier:   C5:7E:C1:E7:88:84:E4:6D:59:44:68:EC:40:F5:42:4E:67:26:47:7A
Certificate issuer:       /CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87
Certificate serial:       3EDE1C463A746AA31EF3925D4A91C97CD03BB2DB
Authority key identifier: 37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/3134332e302e3139362e302f32322d3234203d3e20323634303130.roa
Signing time:             Sat 06 Sep 2025 15:01:52 +0000
ROA not before:           Sat 06 Sep 2025 14:56:52 +0000
ROA not after:            Sat 05 Sep 2026 15:01:52 +0000
asID:                     264010
IP address blocks:        143.0.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl
                          rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:de:1c:46:3a:74:6a:a3:1e:f3:92:5d:4a:91:c9:7c:d0:3b:b2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87
        Validity
            Not Before: Sep  6 14:56:52 2025 GMT
            Not After : Sep  5 15:01:52 2026 GMT
        Subject: CN=C57EC1E78884E46D594468EC40F5424E6726477A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:7d:60:27:79:cb:24:5f:d8:2e:fd:d0:10:
                    e1:6c:25:64:76:b5:1e:86:fd:d0:af:53:25:a3:b1:
                    95:f6:b0:0a:92:f7:9d:5e:20:ad:14:23:7e:e0:c2:
                    ed:2a:0c:d9:62:a9:cf:dc:1c:c3:9e:78:1a:11:03:
                    27:87:d8:98:27:e0:03:c8:c1:36:f4:37:fe:a7:3c:
                    22:73:24:cb:1a:c7:c9:00:e9:17:49:2e:27:d3:e8:
                    a0:2b:78:f4:e6:74:59:35:b1:c1:1c:0f:78:89:d2:
                    74:de:86:11:87:1f:11:18:42:79:03:b6:bb:62:c9:
                    26:ca:d7:95:76:b8:a8:75:dc:45:1f:94:a0:66:bd:
                    fd:8a:98:63:01:72:46:e7:3c:ea:31:a6:1d:89:14:
                    24:7c:32:25:07:f0:67:9c:ae:07:25:d3:bc:fa:c0:
                    6f:55:71:fe:e4:65:7f:13:81:fa:4e:a6:a6:90:5e:
                    af:26:53:81:80:be:b7:31:0f:d3:bd:0e:df:ba:ea:
                    6c:be:c8:fd:e5:61:a7:db:79:17:d6:8d:e8:44:fd:
                    bc:5d:5a:e2:51:76:96:90:63:e5:68:50:72:90:d1:
                    19:64:94:1d:16:98:27:e7:d8:59:65:df:48:db:72:
                    df:4a:c1:1b:b7:67:4f:ad:6e:72:70:59:e1:35:07:
                    15:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7E:C1:E7:88:84:E4:6D:59:44:68:EC:40:F5:42:4E:67:26:47:7A
            X509v3 Authority Key Identifier:
                keyid:37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/3134332e302e3139362e302f32322d3234203d3e20323634303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:80:11:95:59:ab:c5:cc:35:d1:14:75:e9:88:fc:79:37:84:
         eb:e1:85:a0:5a:a4:f7:80:63:90:11:a3:88:bd:8a:48:22:94:
         c8:cd:94:22:6d:c9:c3:db:13:75:ee:7b:d7:2f:29:14:51:a3:
         90:6e:73:20:9f:e8:2c:36:72:96:fe:e4:29:00:de:0f:2d:c0:
         e8:82:0d:e0:0f:bd:90:cc:00:db:44:a8:4a:af:06:4f:39:54:
         fb:7c:11:d8:2a:cd:04:a1:f3:09:15:41:b6:55:86:12:e5:63:
         62:2a:06:c4:99:df:49:e1:51:86:fc:d8:f3:b6:c0:e3:e2:92:
         9f:99:2b:7a:10:ca:4e:4c:0a:8a:2f:f7:81:d1:a7:36:9b:22:
         47:b4:de:8b:60:fb:df:bd:8e:a8:78:49:24:12:91:d4:01:af:
         b5:c8:58:4d:c4:7f:02:62:a2:a7:42:24:6d:8b:2c:41:7e:7d:
         bb:b4:d8:0e:42:4a:e6:30:44:1f:73:eb:28:a6:30:62:59:be:
         4b:1c:87:0d:99:27:25:78:f0:1b:30:4a:40:55:7a:b7:18:15:
         93:4a:6a:6e:be:64:a2:8f:62:8c:13:ea:46:22:27:43:f9:b8:
         05:cd:0a:da:31:2b:d6:40:58:82:42:5c:d8:16:3f:53:95:eb:
         93:93:c6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:51:37 2025 by rpki-client