Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3138362e3230322e3132382e302f31382d3332203d3e203237373135.roa
File:                     3138362e3230322e3132382e302f31382d3332203d3e203237373135.roa (raw, json)
Hash identifier:          KqE6gXKcveAmescsoip/UcF8sbn9ttBdK/7nmvlSKYo=
Subject key identifier:   8F:2D:3E:84:B4:37:AC:8C:F3:E8:A7:46:DD:B6:82:07:CC:12:A3:59
Certificate issuer:       /CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
Certificate serial:       4D814319CCA90E7CE88B4C003A4968A7422C304A
Authority key identifier: F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3138362e3230322e3132382e302f31382d3332203d3e203237373135.roa
Signing time:             Thu 25 Sep 2025 11:18:22 +0000
ROA not before:           Thu 25 Sep 2025 11:13:22 +0000
ROA not after:            Thu 24 Sep 2026 11:18:22 +0000
asID:                     27715
IP address blocks:        186.202.128.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl
                          rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:81:43:19:cc:a9:0e:7c:e8:8b:4c:00:3a:49:68:a7:42:2c:30:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Validity
            Not Before: Sep 25 11:13:22 2025 GMT
            Not After : Sep 24 11:18:22 2026 GMT
        Subject: CN=8F2D3E84B437AC8CF3E8A746DDB68207CC12A359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:65:7d:e4:08:ac:cd:d5:08:89:0c:72:25:
                    60:62:ae:0b:c9:71:ba:24:d0:01:20:ce:bb:8d:fc:
                    68:2c:06:b0:11:c0:7f:b2:85:49:55:52:ec:9d:a8:
                    b7:bc:f2:42:1e:68:ad:17:c0:e5:34:f8:b0:f1:3f:
                    79:2c:e4:ca:e0:ef:cb:03:30:03:2d:27:aa:c3:d4:
                    9c:0c:27:65:f6:77:81:19:cc:c2:a2:67:83:7e:34:
                    74:80:c0:79:1a:b3:af:25:91:85:f5:06:38:bb:b1:
                    b6:45:c8:41:a9:67:d0:0d:0c:b1:fd:bd:2f:85:b2:
                    37:fa:a9:af:1f:bd:81:fb:2c:44:96:68:10:ec:64:
                    b7:66:ce:61:86:24:c9:98:94:43:d4:b6:97:dd:55:
                    d7:c7:96:67:0d:05:63:97:c2:c9:5d:e0:0d:bf:9a:
                    ec:e5:a1:34:86:4b:5b:a7:04:36:20:63:ed:41:c2:
                    eb:a7:ad:65:73:a9:a8:d7:4d:c5:1a:68:92:42:da:
                    3a:8c:3f:ba:a3:90:f5:e0:a3:51:2c:71:82:d4:0d:
                    d3:b9:61:70:fa:27:e6:f9:92:e8:ba:09:7c:30:bc:
                    41:e2:ac:54:4b:fa:e7:ab:2f:01:ba:d0:88:6c:aa:
                    2a:dd:8c:7d:d1:27:a8:f2:3d:1a:50:a4:d6:8e:7c:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2D:3E:84:B4:37:AC:8C:F3:E8:A7:46:DD:B6:82:07:CC:12:A3:59
            X509v3 Authority Key Identifier:
                keyid:F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3138362e3230322e3132382e302f31382d3332203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.202.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         77:46:db:db:cc:bf:81:c5:bd:c1:27:82:c1:b2:b5:5b:4e:f2:
         43:cd:84:4b:46:bf:01:f1:4d:11:eb:47:d6:04:12:8c:d9:56:
         1e:84:e6:bf:7a:26:b8:4a:c3:1c:1e:00:72:96:65:71:a2:99:
         8c:6f:4d:22:d6:6e:8a:6a:20:5a:41:28:fe:ac:82:cd:02:79:
         23:a6:a6:30:91:e3:58:7c:61:20:b2:46:57:38:07:25:d2:d1:
         80:17:46:89:d2:a5:6f:96:35:85:6b:91:0d:98:e1:d5:bd:a2:
         ec:ec:89:a3:46:37:c2:d8:81:ab:33:35:51:04:43:94:4a:71:
         e6:c5:4c:ad:8d:1f:81:b1:5a:90:06:ca:3c:aa:56:32:8a:1f:
         e1:3c:55:18:95:3a:a1:5d:6d:f4:3f:5c:04:c7:de:34:02:49:
         f1:0d:39:f4:2f:53:5e:fa:7b:b3:16:8f:63:0d:e2:7c:43:4c:
         3a:42:27:53:f8:b3:91:95:80:4b:96:df:71:45:78:9e:a2:7d:
         08:b4:ca:88:92:31:7d:7d:ae:00:8e:b8:fa:05:d7:91:cd:35:
         c6:10:e6:68:70:3a:70:66:83:52:52:8d:8a:aa:de:38:4f:45:
         a7:e6:93:d5:da:40:fb:5f:8a:c9:62:63:35:bb:6f:a6:ce:c8:
         e0:4c:96:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:11:37 2025 by rpki-client