Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/3138372e36322e38342e302f32322d3234203d3e20323639373135.roa
File:                     3138372e36322e38342e302f32322d3234203d3e20323639373135.roa (raw, json)
Hash identifier:          cIOoWBFoPaallVyOqjKMdlA4wZSGeZqEoaQVfLpXrMg=
Subject key identifier:   CD:71:6B:BF:1F:41:55:86:FC:EC:24:97:9E:07:17:B8:7C:CB:3C:9B
Certificate issuer:       /CN=2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F
Certificate serial:       3FA1E22C3AE5F6D95D3FE0C04A7DCC292F0ACF1B
Authority key identifier: 25:67:BA:1F:37:C1:9D:60:81:BA:21:7D:8C:AF:5D:F0:6F:DD:9F:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/3138372e36322e38342e302f32322d3234203d3e20323639373135.roa
Signing time:             Mon 23 Jun 2025 19:11:38 +0000
ROA not before:           Mon 23 Jun 2025 19:06:38 +0000
ROA not after:            Mon 22 Jun 2026 19:11:38 +0000
asID:                     269715
IP address blocks:        187.62.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.crl
                          rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 18:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a1:e2:2c:3a:e5:f6:d9:5d:3f:e0:c0:4a:7d:cc:29:2f:0a:cf:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F
        Validity
            Not Before: Jun 23 19:06:38 2025 GMT
            Not After : Jun 22 19:11:38 2026 GMT
        Subject: CN=CD716BBF1F415586FCEC24979E0717B87CCB3C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:8a:b2:1f:0a:9a:35:f6:07:76:f8:b7:0f:
                    3f:d1:94:b3:ec:1f:61:53:1b:c6:55:44:a4:09:72:
                    46:21:77:7c:f5:79:54:e7:87:5f:e1:d6:42:26:37:
                    75:19:9a:4f:42:31:89:0a:b8:09:99:54:3b:ee:a2:
                    60:c0:6d:8a:5a:b4:57:82:8a:50:8d:c3:c5:ee:bf:
                    82:41:b8:ca:3c:69:40:fa:b0:e3:bc:5c:1c:5d:09:
                    ca:d1:2d:13:02:07:2e:07:3d:de:37:bc:02:ee:c1:
                    c2:4a:fe:76:7a:02:15:5f:e9:d9:6c:86:25:46:58:
                    00:42:4f:a3:3d:2b:9d:9f:cf:33:e0:ff:63:80:c1:
                    51:fe:22:05:23:44:de:78:f8:cf:29:98:1b:74:0c:
                    a4:40:c8:b7:ae:ad:f4:d3:f9:15:4b:ea:f5:ac:ac:
                    9a:00:e7:a1:5d:28:4f:a9:5b:8c:12:86:bc:7f:af:
                    49:84:7d:91:80:c0:66:3e:ed:a9:f4:c0:35:a9:b3:
                    bf:14:05:1b:28:97:c3:8b:13:65:39:cd:39:5d:db:
                    a4:aa:cd:9d:9b:f8:6f:4e:9e:9c:06:53:da:db:80:
                    3d:72:40:82:ea:81:ae:b5:9f:74:32:08:65:af:ad:
                    52:5c:bc:62:f6:ba:5d:b3:38:56:ef:a4:e7:98:5d:
                    6a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:71:6B:BF:1F:41:55:86:FC:EC:24:97:9E:07:17:B8:7C:CB:3C:9B
            X509v3 Authority Key Identifier:
                keyid:25:67:BA:1F:37:C1:9D:60:81:BA:21:7D:8C:AF:5D:F0:6F:DD:9F:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/3138372e36322e38342e302f32322d3234203d3e20323639373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:78:b6:a5:f5:21:2d:89:93:d0:58:66:a3:65:eb:70:c0:41:
         3e:17:de:50:20:6b:ed:9e:1e:cf:1c:2d:53:13:3a:be:f6:1b:
         d8:ea:63:bf:2f:6e:82:09:29:c5:96:e7:98:e1:c5:86:26:56:
         1a:db:85:a3:6a:e1:29:c6:2a:74:aa:c4:14:1f:ce:df:d5:58:
         a7:d6:88:fb:fc:b5:56:87:64:5b:2d:42:ac:8a:fd:b4:ba:53:
         99:63:26:3e:f0:8e:91:91:60:3c:e1:1f:61:cb:5c:48:e2:59:
         0b:2a:8b:fb:13:bc:3f:40:30:47:37:e0:90:73:7f:6c:c5:51:
         8d:79:ca:60:5d:c7:29:1d:e6:fc:9c:9a:5b:13:e4:f0:45:27:
         0e:48:61:6f:84:a2:32:c2:cb:64:4c:88:46:12:ce:86:23:81:
         bb:04:da:5d:e1:f4:08:d8:34:6f:28:ae:58:cb:61:7a:a3:5c:
         8d:9e:1a:db:78:fd:36:8d:45:f6:24:09:dd:d6:54:f6:fa:71:
         1f:fc:9d:82:64:e9:05:6b:5a:a7:d6:4d:94:0e:ba:c9:ab:45:
         3f:1e:33:9b:31:3d:21:99:be:b8:0b:54:82:9e:ec:e6:ea:b6:
         50:e9:1b:18:40:46:2e:34:58:3a:29:cc:ee:55:cb:9c:bd:4c:
         9a:85:9e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:12:03 2025 by rpki-client