Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/3138362e3139342e3134342e302f32302d3332203d3e203533303635.roa
File:                     3138362e3139342e3134342e302f32302d3332203d3e203533303635.roa (raw, json)
Hash identifier:          9iXD8MB4J/G1uBGgKQWb6dHJYp120yhEEMQ+cpb1ti4=
Subject key identifier:   F8:F6:57:E4:44:CB:0A:A4:C0:89:0D:45:22:5F:ED:7F:24:7D:93:77
Certificate issuer:       /CN=4C774192AB5886D743BDEAE813B49508256649E8
Certificate serial:       356F8306757D6C582A3D43AEA0973AD38E6D7C0C
Authority key identifier: 4C:77:41:92:AB:58:86:D7:43:BD:EA:E8:13:B4:95:08:25:66:49:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C774192AB5886D743BDEAE813B49508256649E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/3138362e3139342e3134342e302f32302d3332203d3e203533303635.roa
Signing time:             Wed 01 Oct 2025 20:26:39 +0000
ROA not before:           Wed 01 Oct 2025 20:21:39 +0000
ROA not after:            Wed 30 Sep 2026 20:26:39 +0000
asID:                     53065
IP address blocks:        186.194.144.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/4C774192AB5886D743BDEAE813B49508256649E8.crl
                          rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/4C774192AB5886D743BDEAE813B49508256649E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C774192AB5886D743BDEAE813B49508256649E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6f:83:06:75:7d:6c:58:2a:3d:43:ae:a0:97:3a:d3:8e:6d:7c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C774192AB5886D743BDEAE813B49508256649E8
        Validity
            Not Before: Oct  1 20:21:39 2025 GMT
            Not After : Sep 30 20:26:39 2026 GMT
        Subject: CN=F8F657E444CB0AA4C0890D45225FED7F247D9377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9d:0a:ef:9b:05:6c:e9:61:51:3b:7a:b1:e1:
                    bf:68:8b:0e:06:e1:39:73:d1:74:89:5c:05:f5:85:
                    bf:0b:7a:53:a3:ba:63:f9:93:5f:68:a2:93:dd:a2:
                    aa:e1:26:ec:6e:03:4d:db:3d:a4:0b:4a:0c:ab:6e:
                    24:81:f2:a1:3e:27:38:55:dc:72:1a:3e:45:8c:ee:
                    58:79:f9:a9:9f:22:2b:e7:67:cf:ae:0f:68:1c:37:
                    10:be:4b:cf:cd:ed:43:6f:1f:37:93:95:0f:fd:1e:
                    8a:fc:3b:6d:14:05:ee:9d:96:ad:b0:fc:49:40:e9:
                    69:13:e9:9c:d7:c6:18:5b:15:79:af:5b:41:da:54:
                    95:3b:f2:56:43:85:bd:9c:80:f6:25:3b:db:10:7a:
                    dc:f8:a1:40:90:e2:9e:0c:09:f6:b6:06:c9:ea:72:
                    b3:eb:5a:d4:59:53:f8:79:74:07:97:e2:95:f6:a8:
                    74:5e:80:de:cf:e0:d6:12:09:00:7d:6c:9c:c2:ea:
                    c7:12:eb:89:7e:18:86:9b:1c:c0:e3:d9:50:df:68:
                    df:c9:7c:16:02:df:b2:ea:ab:9b:7a:70:ef:28:c1:
                    2f:f5:2a:2f:e8:9d:08:c4:cb:87:22:91:83:d7:03:
                    15:32:61:c0:50:8a:1e:10:4e:db:90:18:2a:24:ca:
                    c5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F6:57:E4:44:CB:0A:A4:C0:89:0D:45:22:5F:ED:7F:24:7D:93:77
            X509v3 Authority Key Identifier:
                keyid:4C:77:41:92:AB:58:86:D7:43:BD:EA:E8:13:B4:95:08:25:66:49:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/4C774192AB5886D743BDEAE813B49508256649E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C774192AB5886D743BDEAE813B49508256649E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/3138362e3139342e3134342e302f32302d3332203d3e203533303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:4d:07:cd:42:72:39:ee:23:a4:94:16:3b:14:44:ef:21:e3:
         83:6b:8f:e4:dd:14:13:e1:cc:8c:f0:22:7d:99:7f:38:47:0f:
         f1:aa:5a:89:4e:55:ed:97:5e:e4:c5:a2:db:99:30:9e:ec:d7:
         04:a8:2d:6c:c5:f1:2b:97:a9:11:34:48:e5:ba:55:9e:b1:14:
         e5:73:31:5f:43:c9:e9:a0:fe:56:f0:8a:16:5b:09:27:17:57:
         a4:65:c0:bf:89:83:2a:4b:12:08:01:c0:ef:34:50:12:70:9d:
         c6:eb:b4:8e:3f:92:0a:5c:cc:72:75:00:35:1b:3e:f2:b1:4d:
         1e:b0:e6:92:bd:57:f7:81:a4:2a:b8:43:59:73:e8:78:19:78:
         98:cd:49:8d:50:0a:71:03:a5:d3:4d:52:9c:a6:d5:b1:c1:8c:
         71:7f:39:35:cc:b5:e3:e0:63:a2:bd:09:38:65:df:38:9e:4a:
         af:2a:8a:8d:2b:10:0c:be:95:22:bc:25:27:82:a1:5b:c6:67:
         59:da:cf:59:78:7c:64:ff:93:a7:40:3d:78:38:8a:db:94:b5:
         53:3c:d5:bd:c4:3f:1e:5c:f3:5b:8d:1e:4d:59:a0:11:47:17:
         11:c9:7f:87:78:69:d7:24:63:fa:4b:fb:34:f3:54:42:b7:8d:
         d5:5d:f4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:35:49 2025 by rpki-client