Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/3138372e302e3233362e302f32342d3234203d3e203631363039.roa
File:                     3138372e302e3233362e302f32342d3234203d3e203631363039.roa (raw, json)
Hash identifier:          K8nfJ26zMbvoU1dVbHftLQrRf4FOQdVtwB6fQYJC06A=
Subject key identifier:   79:D9:D9:77:79:60:F1:38:C6:EA:FC:36:24:8C:D0:88:86:14:22:88
Certificate issuer:       /CN=9E3215C480F080F897B1BC29041417B2B2F0668D
Certificate serial:       6F58557A4E55B8B774560AB83ECF6BB3622FEE41
Authority key identifier: 9E:32:15:C4:80:F0:80:F8:97:B1:BC:29:04:14:17:B2:B2:F0:66:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E3215C480F080F897B1BC29041417B2B2F0668D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/3138372e302e3233362e302f32342d3234203d3e203631363039.roa
Signing time:             Fri 08 Aug 2025 19:23:32 +0000
ROA not before:           Fri 08 Aug 2025 19:18:32 +0000
ROA not after:            Fri 07 Aug 2026 19:23:32 +0000
asID:                     61609
IP address blocks:        187.0.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/9E3215C480F080F897B1BC29041417B2B2F0668D.crl
                          rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/9E3215C480F080F897B1BC29041417B2B2F0668D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E3215C480F080F897B1BC29041417B2B2F0668D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 06:58:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:58:55:7a:4e:55:b8:b7:74:56:0a:b8:3e:cf:6b:b3:62:2f:ee:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E3215C480F080F897B1BC29041417B2B2F0668D
        Validity
            Not Before: Aug  8 19:18:32 2025 GMT
            Not After : Aug  7 19:23:32 2026 GMT
        Subject: CN=79D9D9777960F138C6EAFC36248CD08886142288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:28:d9:d4:52:ab:4d:ca:66:03:1e:8a:71:
                    b8:0d:9b:de:ca:7f:fe:f4:52:c3:0a:f1:57:af:e5:
                    52:37:f1:8f:8d:d9:58:83:9b:c0:c3:8f:8c:41:80:
                    79:e8:fc:ee:97:8e:b1:b2:a0:c6:8a:4a:4f:96:a9:
                    d1:ad:ed:0a:0a:ee:52:0d:40:01:87:b0:66:96:b7:
                    14:8f:64:9f:a5:4b:f6:5b:88:32:f7:6a:c2:80:0d:
                    d3:4c:e4:c2:96:25:be:ca:25:54:f0:c1:bb:f2:39:
                    e0:6d:e8:d1:60:5f:c1:43:a1:cd:9c:08:6c:80:64:
                    b5:ad:28:1a:41:a3:bc:28:63:65:4b:a2:9b:ea:8b:
                    f4:ef:d8:75:0c:a6:18:56:06:c9:33:70:70:a3:1a:
                    88:3a:f1:6f:85:59:47:08:82:e8:07:5f:03:e5:66:
                    b9:ff:dd:e7:89:37:ec:f5:5d:2c:57:20:10:87:2f:
                    43:99:49:ec:f6:74:6a:8f:38:99:5b:fc:48:2d:3e:
                    3c:ec:9a:5c:fa:aa:74:52:35:a7:d6:30:67:e5:ef:
                    45:79:97:4c:6d:98:57:cd:8e:1b:6e:2b:e0:cb:f0:
                    67:34:ae:a8:17:3b:3a:06:37:20:fa:ce:7c:73:f0:
                    30:cd:69:1d:f7:3c:47:8e:f7:2d:20:57:9a:10:aa:
                    06:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D9:D9:77:79:60:F1:38:C6:EA:FC:36:24:8C:D0:88:86:14:22:88
            X509v3 Authority Key Identifier:
                keyid:9E:32:15:C4:80:F0:80:F8:97:B1:BC:29:04:14:17:B2:B2:F0:66:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/9E3215C480F080F897B1BC29041417B2B2F0668D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E3215C480F080F897B1BC29041417B2B2F0668D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/3138372e302e3233362e302f32342d3234203d3e203631363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:25:a4:17:8f:3c:1a:92:7e:8c:7b:46:25:5b:bf:19:88:db:
         a7:aa:2a:b5:aa:76:84:c0:ac:96:d5:5d:7b:41:86:b6:50:f4:
         e9:53:04:c1:23:74:2e:ae:1e:ae:0b:bf:08:31:84:0b:0a:c3:
         86:f4:0a:5e:43:2f:f1:78:03:59:af:88:e9:6e:1e:31:3c:d7:
         9c:41:9f:0d:cf:5c:fb:09:06:5d:bc:d1:78:8c:b6:57:60:33:
         36:cb:15:b0:80:fc:00:43:fd:c6:fc:3f:8d:a6:13:6a:ce:e8:
         30:8c:65:f2:b1:47:c1:74:c3:71:5d:55:19:34:0f:67:c7:9b:
         6d:c2:1b:25:67:b6:d6:75:6b:41:c6:1b:02:4f:7a:32:4c:e7:
         54:60:fc:fa:ce:f9:1f:ec:87:37:66:58:b8:9a:9a:7e:04:78:
         63:62:74:86:f6:24:6b:92:f2:38:eb:66:81:64:06:07:06:d3:
         09:73:de:30:cd:c6:83:17:4a:e7:7f:db:36:43:83:e3:5e:86:
         ae:ad:9e:f7:4c:50:2f:29:48:97:c3:39:92:ea:7d:fa:0d:36:
         fa:7a:11:c4:08:dc:e4:1d:63:35:1a:16:d2:54:09:b4:04:74:
         91:da:70:30:ea:8c:e1:4f:70:f7:58:f0:e4:4f:b6:a8:1b:3b:
         9f:a0:b7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:16:03 2025 by rpki-client