Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36342e302f32302d3332203d3e203238323736.roa
File:                     3138392e31342e36342e302f32302d3332203d3e203238323736.roa (raw, json)
Hash identifier:          Pfl7jBlpLNz7cOroz8jBR2Lux2EXoEBFushu0bPcZ4Q=
Subject key identifier:   39:F8:DA:72:0E:1C:28:55:34:0A:86:9E:09:7C:42:AC:B6:5B:8C:FE
Certificate issuer:       /CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
Certificate serial:       26407A671002A06EF140E50DD92D6F36F5444ADF
Authority key identifier: 8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36342e302f32302d3332203d3e203238323736.roa
Signing time:             Thu 09 Oct 2025 14:32:39 +0000
ROA not before:           Thu 09 Oct 2025 14:27:39 +0000
ROA not after:            Thu 08 Oct 2026 14:32:39 +0000
asID:                     28276
IP address blocks:        189.14.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl
                          rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:40:7a:67:10:02:a0:6e:f1:40:e5:0d:d9:2d:6f:36:f5:44:4a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
        Validity
            Not Before: Oct  9 14:27:39 2025 GMT
            Not After : Oct  8 14:32:39 2026 GMT
        Subject: CN=39F8DA720E1C2855340A869E097C42ACB65B8CFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:71:5e:58:7d:ad:89:da:0a:6c:7c:e5:24:55:
                    fb:a7:cb:13:b6:32:9e:f6:2c:6b:5b:9f:10:90:54:
                    8e:6c:46:45:72:9d:a2:e6:a2:57:61:79:3f:6c:48:
                    1e:2a:e7:b1:3d:fc:0b:13:e4:ee:37:56:20:08:e3:
                    66:02:8f:92:16:6b:ab:42:cb:28:ba:3e:06:dd:75:
                    c7:1c:6f:92:5c:d3:43:fc:bd:70:81:c4:8a:eb:45:
                    ba:07:73:55:cf:e5:60:fd:71:c8:a5:1c:85:14:cb:
                    a0:93:aa:d3:0b:3e:fc:4c:83:ad:ae:81:25:ab:3c:
                    4c:41:0f:c0:60:d9:cc:bd:cb:eb:8c:be:a1:39:e3:
                    c1:96:85:12:b1:ae:f2:d5:ca:81:1d:e2:dd:49:ba:
                    0a:e6:07:2f:d5:a9:05:81:74:79:03:c0:b7:30:d1:
                    02:38:92:0e:63:d4:a3:1b:1d:25:3a:31:ce:4b:2c:
                    cb:20:d5:b7:b7:76:d0:80:34:5c:6e:b4:1c:ed:cf:
                    9c:81:f7:a6:e2:9f:09:2c:06:99:78:46:27:fc:ad:
                    92:52:5b:72:d5:c5:96:94:4b:32:79:2d:24:a2:7e:
                    b7:68:b3:7f:ee:ef:ac:15:08:c9:c7:28:35:4f:bc:
                    e7:43:da:ea:b5:b9:9b:b8:1a:ae:7f:a1:18:9d:ce:
                    ee:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F8:DA:72:0E:1C:28:55:34:0A:86:9E:09:7C:42:AC:B6:5B:8C:FE
            X509v3 Authority Key Identifier:
                keyid:8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36342e302f32302d3332203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:c5:0b:bf:4b:ab:81:a4:a1:b3:7c:4d:7d:d3:c3:1f:a5:8d:
         50:9f:11:c1:38:37:2c:f8:ff:eb:53:80:41:ac:b4:ad:42:9d:
         05:26:6a:28:3e:15:79:7d:15:f8:70:0c:37:b0:b0:5b:22:24:
         0c:db:ad:f7:12:8f:66:bc:55:94:6a:aa:10:75:33:b7:53:65:
         d4:ed:e3:da:d2:18:a1:a1:fc:bb:64:31:62:19:23:fb:95:66:
         18:77:f1:27:2f:9c:c0:a1:90:21:a7:7d:23:03:69:36:a4:d0:
         b2:0f:db:84:06:5f:84:de:db:d4:d8:f9:08:2a:ee:4f:9e:cf:
         dd:ab:98:4f:b0:a1:ce:92:80:a1:c8:55:1f:72:23:66:17:c0:
         d0:d9:d6:c6:dd:b8:1c:6c:6f:e1:02:66:a7:b1:ac:b2:43:ae:
         e6:8b:a4:00:5f:cf:0c:b3:a4:8d:cd:fa:54:22:0f:11:7e:f7:
         9d:48:be:6e:df:0e:c4:cd:f7:1e:a9:3b:6d:00:ab:35:3a:df:
         99:00:ee:39:17:44:8a:a4:eb:fa:25:b3:1b:47:0c:cc:9f:c8:
         d9:7f:90:9f:5b:8e:d2:99:d2:95:13:09:45:9c:ec:da:90:7f:
         42:25:94:f0:b8:b1:81:41:6a:a3:48:6d:67:5f:dd:69:06:32:
         1e:53:7f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:26:47 2025 by rpki-client