Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/3138372e3130392e3139322e302f32302d3332203d3e20313938393439.roa
File:                     3138372e3130392e3139322e302f32302d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          6ezk2I65S592vTg6TbE8cLrlUSyrgMUOdYnyeaQIoCA=
Subject key identifier:   02:E7:E6:D9:05:04:82:C3:65:47:AF:4B:3B:96:25:81:21:34:C8:6D
Certificate issuer:       /CN=600921937E8C82CCBB357FE8103E7D3356A4C6BE
Certificate serial:       0E00608F91FA7B2B39C0421368F8006B66C6970F
Authority key identifier: 60:09:21:93:7E:8C:82:CC:BB:35:7F:E8:10:3E:7D:33:56:A4:C6:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/3138372e3130392e3139322e302f32302d3332203d3e20313938393439.roa
Signing time:             Fri 15 Aug 2025 20:07:59 +0000
ROA not before:           Fri 15 Aug 2025 20:02:59 +0000
ROA not after:            Fri 14 Aug 2026 20:07:59 +0000
asID:                     198949
IP address blocks:        187.109.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.crl
                          rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:00:60:8f:91:fa:7b:2b:39:c0:42:13:68:f8:00:6b:66:c6:97:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600921937E8C82CCBB357FE8103E7D3356A4C6BE
        Validity
            Not Before: Aug 15 20:02:59 2025 GMT
            Not After : Aug 14 20:07:59 2026 GMT
        Subject: CN=02E7E6D9050482C36547AF4B3B9625812134C86D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fe:91:77:e5:ab:14:1a:96:d3:ac:58:ec:5f:
                    fd:37:ef:37:b1:7c:35:e0:88:72:7b:18:e8:63:ef:
                    bd:60:4f:84:ca:c6:f4:c6:f4:8e:b6:59:16:cb:82:
                    60:39:b9:66:51:5f:68:0d:7f:b5:8f:62:63:43:b9:
                    f1:8d:2a:94:c2:07:33:0b:fc:c4:68:90:43:31:89:
                    5d:f0:6d:3d:59:a8:48:71:1e:c2:6b:d6:cf:ec:bc:
                    50:f4:47:a3:c9:3f:34:51:c3:2d:7d:d0:de:e6:7e:
                    55:ff:9e:a9:f0:bf:b8:75:e7:d2:41:56:a5:87:32:
                    09:c8:29:32:8f:d3:59:9a:4e:e3:9a:4e:d9:ce:a5:
                    02:6d:b9:d1:d5:94:a6:59:97:08:b8:ed:46:91:fa:
                    a5:45:68:92:5f:0c:86:67:b4:b6:03:1d:2a:c8:97:
                    f8:39:1b:1e:a4:96:f3:52:80:5c:c7:a1:75:3f:65:
                    81:fd:84:35:43:33:2c:50:e7:fc:3c:9e:2e:b0:ff:
                    d7:c0:0d:6a:81:bb:f7:9c:5d:50:81:22:5c:a7:37:
                    f4:f5:16:f5:a2:34:ba:02:71:57:7b:7b:e1:02:f0:
                    e6:60:10:07:d7:94:26:18:b7:e3:f2:f5:80:f1:cb:
                    ca:45:91:27:92:1d:f3:70:77:02:4a:28:e4:dc:c8:
                    64:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E7:E6:D9:05:04:82:C3:65:47:AF:4B:3B:96:25:81:21:34:C8:6D
            X509v3 Authority Key Identifier:
                keyid:60:09:21:93:7E:8C:82:CC:BB:35:7F:E8:10:3E:7D:33:56:A4:C6:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/3138372e3130392e3139322e302f32302d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bd:74:0f:d0:b0:98:19:8e:3c:d3:b9:80:77:7e:92:1c:c6:d0:
         92:05:c1:6a:97:c4:5f:ed:90:a3:78:7d:05:9a:ef:be:31:d8:
         c1:52:0e:ac:87:04:6b:66:8d:66:00:2d:e5:f2:31:d4:02:ac:
         43:fe:75:a4:d9:30:ec:79:fe:e7:4b:1d:63:f3:bf:b0:5b:c5:
         33:87:7b:f3:a1:9c:b9:95:ba:e1:ce:1a:9a:df:f3:aa:68:66:
         c8:93:c9:c7:11:5a:c5:55:85:33:70:c1:fe:1e:9f:57:53:0e:
         e2:78:a2:43:43:79:70:ef:7b:a8:4a:cf:2f:c7:f1:d4:8f:ef:
         82:f2:52:bb:44:b8:96:a6:c9:1d:d0:82:33:30:41:5c:9c:2a:
         7f:a7:d5:93:82:fd:be:c2:b4:e4:73:bf:ba:32:b0:c8:e7:8a:
         89:9a:30:d0:65:1d:c7:3d:ad:c8:bd:5a:36:7b:97:5e:62:93:
         0c:30:f2:6d:01:b4:6e:f5:e9:66:61:5d:ea:cf:90:2a:d4:f3:
         c0:65:de:6b:5f:ae:24:17:05:87:c4:9d:12:17:ac:b8:2b:c5:
         e5:5e:e5:03:41:cc:44:41:db:ab:75:9d:13:e2:f3:90:b4:b5:
         f2:ef:26:83:c4:ce:fa:87:ac:8b:8a:9a:1d:7c:ea:ea:76:19:
         a5:a7:71:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:03:21 2025 by rpki-client