Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/3138362e3233362e3234302e302f32332d3233203d3e20323633363338.roa
File:                     3138362e3233362e3234302e302f32332d3233203d3e20323633363338.roa (raw, json)
Hash identifier:          q4wzspaNpK0NZ5rs9zEr4L1AzGd9v+u+9z+O/ajoUko=
Subject key identifier:   CE:A1:03:77:BA:F8:DA:7A:ED:77:74:12:48:40:B1:0F:34:EA:2E:3A
Certificate issuer:       /CN=783FF5947307C60922650955561D38DF088C82A7
Certificate serial:       09F23A6213E2E5828322FF986BAB78B9B81764
Authority key identifier: 78:3F:F5:94:73:07:C6:09:22:65:09:55:56:1D:38:DF:08:8C:82:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783FF5947307C60922650955561D38DF088C82A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/3138362e3233362e3234302e302f32332d3233203d3e20323633363338.roa
Signing time:             Thu 04 Sep 2025 12:45:55 +0000
ROA not before:           Thu 04 Sep 2025 12:40:55 +0000
ROA not after:            Thu 03 Sep 2026 12:45:55 +0000
asID:                     263638
IP address blocks:        186.236.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/783FF5947307C60922650955561D38DF088C82A7.crl
                          rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/783FF5947307C60922650955561D38DF088C82A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783FF5947307C60922650955561D38DF088C82A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f2:3a:62:13:e2:e5:82:83:22:ff:98:6b:ab:78:b9:b8:17:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783FF5947307C60922650955561D38DF088C82A7
        Validity
            Not Before: Sep  4 12:40:55 2025 GMT
            Not After : Sep  3 12:45:55 2026 GMT
        Subject: CN=CEA10377BAF8DA7AED7774124840B10F34EA2E3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:e9:eb:86:15:da:66:e0:46:d9:23:85:64:
                    e8:93:fe:26:f6:ea:d0:b6:a9:47:02:92:3e:61:ba:
                    0e:8b:42:70:cd:81:a4:c1:da:c6:49:99:6a:cd:fc:
                    73:7d:fd:76:e3:db:5c:48:14:8c:a1:2d:26:95:b4:
                    0c:73:4e:40:77:2d:7e:45:23:01:14:ac:1f:64:d9:
                    d9:cd:d2:21:ab:27:36:3b:45:99:25:1d:63:4c:44:
                    aa:8a:0f:48:27:e7:4a:9b:48:49:6c:a3:46:ea:6b:
                    35:df:65:d9:92:b2:69:2a:65:8f:a4:95:21:7d:2e:
                    f8:9a:61:a6:9c:d6:6f:40:5b:28:5a:4f:4c:7c:ca:
                    4f:0e:9b:f2:d4:c5:31:74:74:e0:c1:a7:1f:18:e3:
                    19:91:ea:7c:37:fe:6e:36:5c:67:10:9d:99:db:f5:
                    68:e0:82:aa:ea:38:69:c6:4b:77:e1:ae:a5:a9:6e:
                    0a:e0:d9:eb:6e:c3:02:dc:dd:c5:ea:78:44:4e:b0:
                    c8:ab:ef:54:3e:49:60:28:e0:9a:7d:d0:bd:20:5b:
                    bd:61:2c:31:fe:96:c9:56:1f:08:21:f5:8f:f4:02:
                    64:ba:25:d8:3c:ac:f1:c4:e0:b1:29:13:e6:bf:d0:
                    88:0e:37:01:f5:48:d7:30:94:34:f8:db:f3:d1:cd:
                    2f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A1:03:77:BA:F8:DA:7A:ED:77:74:12:48:40:B1:0F:34:EA:2E:3A
            X509v3 Authority Key Identifier:
                keyid:78:3F:F5:94:73:07:C6:09:22:65:09:55:56:1D:38:DF:08:8C:82:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/783FF5947307C60922650955561D38DF088C82A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783FF5947307C60922650955561D38DF088C82A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/3138362e3233362e3234302e302f32332d3233203d3e20323633363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:b4:8c:92:31:be:db:82:1c:64:c5:fa:a1:98:cb:cb:2e:28:
         79:4b:b8:4e:61:a3:06:11:aa:c0:c4:15:cf:1b:25:16:b7:f7:
         4e:f8:22:a4:f0:9c:57:1c:19:ac:43:28:50:39:1e:0a:3b:e3:
         52:99:da:22:9d:cd:a1:d3:38:66:db:11:f4:c4:c0:02:2b:b1:
         95:ba:e7:57:0c:a2:b2:26:40:eb:c0:7b:09:a6:94:1f:ff:5b:
         e2:31:57:bf:18:26:60:4d:58:9c:12:b6:31:dd:00:b5:47:1c:
         0f:58:1a:cc:bb:b3:04:d2:b4:08:cc:b0:d2:fa:98:dc:d8:e6:
         29:b1:1b:8b:c7:7e:20:2a:c3:1e:0e:65:e7:44:8a:3b:bf:ed:
         e3:0f:f2:7b:f6:f0:0f:8c:1e:fb:84:de:a8:9b:b4:53:d7:f0:
         7c:7f:02:86:fc:7a:6a:72:db:82:fe:64:5f:87:55:4e:73:6e:
         fc:23:d3:c9:4b:80:9d:ea:5c:96:dd:c4:b0:3d:76:19:bf:69:
         c3:f9:da:c1:66:79:f9:80:52:e9:fc:db:b6:60:18:d6:6b:46:
         a9:de:ed:c7:8b:2a:b9:58:e9:9d:d8:42:16:53:7e:42:b3:02:
         71:1a:e4:19:ec:05:e6:8a:c8:fd:c8:20:ea:c4:d9:d1:c0:78:
         24:b5:dd:b4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgITCfI6YhPi5YKDIv+Ya6t4ubgXZDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg3ODNGRjU5NDczMDdDNjA5MjI2NTA5NTU1NjFEMzhERjA4
OEM4MkE3MB4XDTI1MDkwNDEyNDA1NVoXDTI2MDkwMzEyNDU1NVowMzExMC8GA1UE
AxMoQ0VBMTAzNzdCQUY4REE3QUVENzc3NDEyNDg0MEIxMEYzNEVBMkUzQTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALhd6euGFdpm4EbZI4Vk6JP+Jvbq
0LapRwKSPmG6DotCcM2BpMHaxkmZas38c339duPbXEgUjKEtJpW0DHNOQHctfkUj
ARSsH2TZ2c3SIasnNjtFmSUdY0xEqooPSCfnSptISWyjRuprNd9l2ZKyaSplj6SV
IX0u+JphppzWb0BbKFpPTHzKTw6b8tTFMXR04MGnHxjjGZHqfDf+bjZcZxCdmdv1
aOCCquo4acZLd+GupaluCuDZ627DAtzdxep4RE6wyKvvVD5JYCjgmn3QvSBbvWEs
Mf6WyVYfCCH1j/QCZLol2Dys8cTgsSkT5r/QiA43AfVI1zCUNPjb89HNLxECAwEA
AaOCAlAwggJMMB0GA1UdDgQWBBTOoQN3uvjaeu13dBJIQLEPNOouOjAfBgNVHSME
GDAWgBR4P/WUcwfGCSJlCVVWHTjfCIyCpzAOBgNVHQ8BAf8EBAMCB4AwgZIGA1Ud
HwSBijCBhzCBhKCBgaB/hn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9y
ZXBvL25GN0RyNFd5SEs2bXNXTlpEYWNxbkpjTU5yMlVraEJqTUJqNGRTbzlXS3Uv
MC83ODNGRjU5NDczMDdDNjA5MjI2NTA5NTU1NjFEMzhERjA4OEM4MkE3LmNybDB4
BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4M0ZGNTk0NzMwN0M2MDkyMjY1
MDk1NTU2MUQzOERGMDg4QzgyQTcuY2VyMIGvBggrBgEFBQcBCwSBojCBnzCBnAYI
KwYBBQUHMAuGgY9yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25G
N0RyNFd5SEs2bXNXTlpEYWNxbkpjTU5yMlVraEJqTUJqNGRTbzlXS3UvMC8zMTM4
MzYyZTMyMzMzNjJlMzIzNDMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzYzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBuuzwMA0GCSqGSIb3DQEBCwUAA4IBAQBctIySMb7b
ghxkxfqhmMvLLih5S7hOYaMGEarAxBXPGyUWt/dO+CKk8JxXHBmsQyhQOR4KO+NS
mdoinc2h0zhm2xH0xMACK7GVuudXDKKyJkDrwHsJppQf/1viMVe/GCZgTVicErYx
3QC1RxwPWBrMu7ME0rQIzLDS+pjc2OYpsRuLx34gKsMeDmXnRIo7v+3jD/J79vAP
jB77hN6om7RT1/B8fwKG/HpqctuC/mRfh1VOc278I9PJS4Cd6lyW3cSwPXYZv2nD
+drBZnn5gFLp/Nu2YBjWa0ap3u3Hiyq5WOmd2EIWU35CswJxGuQZ7AXmisj9yCDq
xNnRwHgktd20
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:55:18 2025 by rpki-client