Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3138362e3230322e302e302f31372d3332203d3e203237373135.roa
File:                     3138362e3230322e302e302f31372d3332203d3e203237373135.roa (raw, json)
Hash identifier:          EFEHMeUnubDXjOqctEVbiMdyyo5llXQ2ks3rv8U7EgA=
Subject key identifier:   F7:D3:67:DD:72:14:05:74:92:4A:BD:CE:80:1B:8B:3E:0D:BB:BE:6C
Certificate issuer:       /CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
Certificate serial:       4CD7DEF6EDA513391B624A6F5C8510ECFC869D6D
Authority key identifier: F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3138362e3230322e302e302f31372d3332203d3e203237373135.roa
Signing time:             Thu 25 Sep 2025 12:26:44 +0000
ROA not before:           Thu 25 Sep 2025 12:21:44 +0000
ROA not after:            Thu 24 Sep 2026 12:26:44 +0000
asID:                     27715
IP address blocks:        186.202.0.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl
                          rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d7:de:f6:ed:a5:13:39:1b:62:4a:6f:5c:85:10:ec:fc:86:9d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Validity
            Not Before: Sep 25 12:21:44 2025 GMT
            Not After : Sep 24 12:26:44 2026 GMT
        Subject: CN=F7D367DD72140574924ABDCE801B8B3E0DBBBE6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:73:ac:2f:22:4a:93:2f:e8:e6:86:83:3f:
                    5c:bc:2a:9f:f6:de:7f:08:de:7b:51:0a:9f:74:6e:
                    2e:8e:49:80:ef:d2:c7:33:1f:42:a8:83:fc:7e:e1:
                    7f:38:47:97:aa:82:76:9a:f6:7c:61:f1:69:76:0b:
                    5d:d3:4e:fe:e5:a3:2b:b6:49:fc:16:91:f2:51:a5:
                    09:d5:75:8c:51:7c:d7:39:e9:e8:15:9c:3b:dd:0b:
                    01:7f:f5:5f:ab:e1:3c:15:1c:9e:fd:43:bd:c0:d5:
                    05:30:b0:ca:7c:af:e7:c6:2b:22:d3:19:4e:3e:ea:
                    be:42:2a:85:df:ad:14:84:18:c2:75:3c:09:2f:e2:
                    5e:e1:96:99:93:14:59:4f:41:c0:5e:80:cc:ab:31:
                    00:be:f1:7f:5c:80:73:04:b9:54:c4:bd:13:1b:e5:
                    c4:60:54:d9:6e:f1:6c:7a:f1:9e:b7:ca:02:95:60:
                    9c:d2:cd:fc:38:3e:01:e6:34:63:6d:07:04:94:e7:
                    c4:bc:60:fb:83:13:b3:3a:9e:f5:8f:3d:60:c5:4c:
                    28:d2:de:d9:aa:8d:b0:d1:3e:2f:65:59:99:0a:b2:
                    cf:d9:2a:1a:ac:d9:e1:63:6b:66:6c:6b:ad:59:c7:
                    03:4e:2c:ca:ea:cb:f2:64:dd:cb:f7:9a:e8:e9:a4:
                    4e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D3:67:DD:72:14:05:74:92:4A:BD:CE:80:1B:8B:3E:0D:BB:BE:6C
            X509v3 Authority Key Identifier:
                keyid:F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3138362e3230322e302e302f31372d3332203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.202.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:8d:97:f4:2b:82:05:67:d1:fa:fc:9e:fc:c9:48:d5:11:
         ba:7c:fb:a1:20:00:8b:1c:3c:50:6d:c4:d2:26:5e:eb:29:14:
         d9:17:bf:24:09:f3:c4:45:ee:74:d7:96:26:f9:04:2d:d9:47:
         88:2c:8c:47:d8:1f:88:53:e0:3b:a7:6c:0f:bf:9e:11:33:8c:
         3e:67:48:9f:06:9a:b0:9c:ef:ef:58:12:2a:e8:7e:9e:98:86:
         cd:e8:1c:b0:f3:06:91:b4:68:14:d1:d3:83:05:3b:27:f4:f6:
         e8:b1:06:5e:71:3d:6a:f4:26:78:b9:72:03:a7:f1:8b:bf:cd:
         c9:4b:3e:29:1b:c6:1c:ec:c9:a1:86:15:5c:77:9b:2f:76:3f:
         4e:d0:e8:2c:2b:7d:29:90:9a:f3:9f:58:f4:91:92:68:93:b3:
         e5:b8:97:f0:ec:8c:c2:a2:e4:fc:1a:14:c6:75:94:30:a1:fc:
         d8:68:e8:b0:26:5a:30:b8:43:4e:9d:e4:95:e3:66:a4:5a:ec:
         a7:6b:73:6e:d6:b5:f5:35:28:2e:b6:dd:2a:c9:d4:f7:08:06:
         8c:57:ef:1e:0b:95:42:61:83:02:a1:5f:80:0d:c0:89:3f:e7:
         33:3a:21:df:8b:27:09:92:ac:6b:82:81:28:32:3b:b0:12:0c:
         78:40:56:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:11:37 2025 by rpki-client