Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/3138312e3139312e3130342e302f32322d3332203d3e20323636303039.roa
File:                     3138312e3139312e3130342e302f32322d3332203d3e20323636303039.roa (raw, json)
Hash identifier:          fRRq8uMAi3NTusVpa7q7YUpsRhKr91/ymEmEWwaO2uM=
Subject key identifier:   81:75:6B:04:06:A4:07:F5:2C:D1:4B:01:67:9D:B6:FF:4D:A7:C8:FE
Certificate issuer:       /CN=F482C4382B0037562E8B74732EFC39249BF7C068
Certificate serial:       4E126C648184C378A997D8D0E35DA3E0C90C61A7
Authority key identifier: F4:82:C4:38:2B:00:37:56:2E:8B:74:73:2E:FC:39:24:9B:F7:C0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F482C4382B0037562E8B74732EFC39249BF7C068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/3138312e3139312e3130342e302f32322d3332203d3e20323636303039.roa
Signing time:             Sat 04 Oct 2025 15:54:55 +0000
ROA not before:           Sat 04 Oct 2025 15:49:55 +0000
ROA not after:            Sat 03 Oct 2026 15:54:55 +0000
asID:                     266009
IP address blocks:        181.191.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/F482C4382B0037562E8B74732EFC39249BF7C068.crl
                          rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/F482C4382B0037562E8B74732EFC39249BF7C068.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F482C4382B0037562E8B74732EFC39249BF7C068.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:12:6c:64:81:84:c3:78:a9:97:d8:d0:e3:5d:a3:e0:c9:0c:61:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F482C4382B0037562E8B74732EFC39249BF7C068
        Validity
            Not Before: Oct  4 15:49:55 2025 GMT
            Not After : Oct  3 15:54:55 2026 GMT
        Subject: CN=81756B0406A407F52CD14B01679DB6FF4DA7C8FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3d:96:44:97:c1:fa:b0:a0:37:0f:2e:be:5c:
                    23:2f:ce:66:2c:3f:90:17:6e:fb:34:fb:fc:0d:8e:
                    a5:0b:76:15:8a:f1:cc:0a:d2:be:d5:ce:00:e7:23:
                    98:60:7e:fe:a9:66:c5:1d:d1:b4:99:3c:26:95:1d:
                    c6:c0:25:e3:b1:b7:ee:db:e4:32:d9:93:d0:31:ec:
                    db:be:3a:af:2a:a7:f4:4a:02:18:7e:bb:9c:2e:74:
                    6a:cd:54:3b:ee:64:42:d4:9f:31:5b:a5:96:61:e6:
                    63:93:e1:1c:dc:fd:b8:17:47:34:6c:7b:a4:ef:b5:
                    59:fa:91:ba:6b:6c:1e:c5:c8:fa:e8:79:fa:82:ea:
                    96:f5:bc:10:06:dc:48:a3:49:0a:02:13:ac:78:b9:
                    68:cd:3c:e0:66:3c:a9:e1:02:dd:62:ec:66:2b:ef:
                    34:ec:93:0d:82:e5:78:ee:7c:80:88:00:c1:d9:91:
                    67:59:78:32:d9:77:82:91:a9:ff:09:f2:33:f4:4c:
                    5c:31:c6:f3:a2:38:29:a5:c0:14:4d:06:a3:0c:15:
                    e0:e8:a0:69:18:42:33:8b:04:db:99:d2:1b:98:c5:
                    ab:74:8a:19:2f:09:98:b7:66:e7:25:41:42:ad:58:
                    07:6a:68:e2:80:57:83:58:f9:e1:48:fd:40:a3:a1:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:75:6B:04:06:A4:07:F5:2C:D1:4B:01:67:9D:B6:FF:4D:A7:C8:FE
            X509v3 Authority Key Identifier:
                keyid:F4:82:C4:38:2B:00:37:56:2E:8B:74:73:2E:FC:39:24:9B:F7:C0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/F482C4382B0037562E8B74732EFC39249BF7C068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F482C4382B0037562E8B74732EFC39249BF7C068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/3138312e3139312e3130342e302f32322d3332203d3e20323636303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:1f:18:33:4d:ec:8f:0b:f1:17:6a:7a:83:01:2a:95:fc:09:
         97:f4:db:a8:ad:84:49:f2:24:68:3b:78:27:64:4f:f6:e2:8b:
         a3:ee:dd:84:fc:36:35:85:11:f4:ca:5b:01:6e:b0:be:db:a6:
         11:d2:84:3d:a7:13:16:82:5c:e4:24:11:66:95:4c:23:e7:f3:
         8f:c0:b4:3d:50:eb:89:7e:de:36:23:e4:d7:b8:07:11:a0:92:
         1e:cf:71:8c:df:ef:ec:33:1b:1c:b4:c6:b3:71:cb:f4:4d:cb:
         73:12:cd:85:29:90:bf:a4:ad:58:b6:97:9b:bb:0e:3b:b5:97:
         dc:ba:3a:c1:3e:f1:94:65:d6:e9:47:9a:ac:85:ca:54:d7:6b:
         3d:e2:26:41:e1:51:0c:b7:55:01:74:48:4a:b7:e8:d4:48:23:
         3b:38:ef:e3:f4:13:71:e0:5c:b8:13:a9:35:05:a6:91:ee:ff:
         7b:d1:2d:24:11:ac:be:4a:18:b3:d2:94:be:6f:42:9c:19:b5:
         6a:be:6e:32:12:cf:0a:7d:94:f9:95:d3:96:20:80:b2:db:32:
         b7:12:e3:c3:47:ee:a7:79:f7:16:74:d6:2e:6a:65:de:a6:24:
         f7:90:c0:27:f3:29:f4:26:75:6c:72:68:49:7d:38:95:2d:7f:
         c7:95:76:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:32:42 2025 by rpki-client