Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/3138362e3233362e3234312e302f32342d3234203d3e20323633363338.roa
File:                     3138362e3233362e3234312e302f32342d3234203d3e20323633363338.roa (raw, json)
Hash identifier:          3BOk5zuEQmBmwi7JDlseWA+srYn59RRDDoIdBXoHQTE=
Subject key identifier:   E9:97:97:6A:7D:95:1D:AF:02:7B:9D:84:6C:C2:66:5B:3C:67:25:70
Certificate issuer:       /CN=783FF5947307C60922650955561D38DF088C82A7
Certificate serial:       4F2B9CB1115E549C228C64F58B4B0D5B5C08B1C2
Authority key identifier: 78:3F:F5:94:73:07:C6:09:22:65:09:55:56:1D:38:DF:08:8C:82:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783FF5947307C60922650955561D38DF088C82A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/3138362e3233362e3234312e302f32342d3234203d3e20323633363338.roa
Signing time:             Thu 04 Sep 2025 12:46:02 +0000
ROA not before:           Thu 04 Sep 2025 12:41:02 +0000
ROA not after:            Thu 03 Sep 2026 12:46:02 +0000
asID:                     263638
IP address blocks:        186.236.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/783FF5947307C60922650955561D38DF088C82A7.crl
                          rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/783FF5947307C60922650955561D38DF088C82A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783FF5947307C60922650955561D38DF088C82A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2b:9c:b1:11:5e:54:9c:22:8c:64:f5:8b:4b:0d:5b:5c:08:b1:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783FF5947307C60922650955561D38DF088C82A7
        Validity
            Not Before: Sep  4 12:41:02 2025 GMT
            Not After : Sep  3 12:46:02 2026 GMT
        Subject: CN=E997976A7D951DAF027B9D846CC2665B3C672570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:f9:d4:63:e8:1f:a3:41:8d:76:80:15:f6:
                    0f:8c:c6:b7:30:3f:49:c9:54:d3:9a:9a:fd:be:f7:
                    5d:dc:2c:ef:34:0c:0c:c1:e3:69:98:fe:8f:d7:72:
                    9e:a0:d1:a9:26:42:b3:68:b0:aa:c9:0d:e3:8d:79:
                    02:26:f0:19:60:76:e5:be:c2:00:28:8c:ca:48:c6:
                    ac:49:33:8b:37:56:e3:3d:5b:d0:bf:e9:b3:2f:3b:
                    f6:33:27:cd:9b:ce:96:f0:3a:81:e1:ff:a6:4b:bb:
                    d3:f6:6c:a1:fe:a2:e1:d4:82:e2:20:a9:84:50:c2:
                    df:91:18:f4:8e:90:04:69:c9:ff:29:18:38:b6:df:
                    21:bd:ee:66:f2:a5:1c:c2:c4:4b:de:44:d7:65:54:
                    89:29:bc:6b:db:1f:e4:4b:08:56:05:f8:67:03:6c:
                    36:70:6a:e2:48:97:1e:00:6a:f8:c6:3a:da:b6:f3:
                    31:d2:d1:c9:3e:a2:50:f7:b9:7d:5f:09:93:ff:e1:
                    af:5f:ed:4b:0c:2e:78:df:bb:e6:84:07:c4:21:6a:
                    ef:ed:b9:3b:9f:c1:ea:61:88:fa:e4:06:f7:e4:b3:
                    e0:fd:d1:76:cc:4e:9d:9d:c4:e0:2a:3c:3f:76:b6:
                    53:2d:2c:fa:a8:35:0e:3f:f5:0a:6c:a5:65:cd:fc:
                    d3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:97:97:6A:7D:95:1D:AF:02:7B:9D:84:6C:C2:66:5B:3C:67:25:70
            X509v3 Authority Key Identifier:
                keyid:78:3F:F5:94:73:07:C6:09:22:65:09:55:56:1D:38:DF:08:8C:82:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/783FF5947307C60922650955561D38DF088C82A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783FF5947307C60922650955561D38DF088C82A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/3138362e3233362e3234312e302f32342d3234203d3e20323633363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:6b:f8:ce:19:68:ee:32:e9:87:79:8b:7b:c8:04:89:15:7f:
         5a:08:0a:15:14:0a:59:04:b9:f3:e1:57:4d:13:74:c7:92:39:
         e9:7d:e8:12:d0:87:f1:c7:a3:76:e5:aa:45:bc:34:b8:3a:77:
         54:4a:d7:a8:bb:94:b4:bd:a3:b5:f0:7a:38:e6:db:10:d1:c1:
         1c:a0:8f:78:2e:dd:78:ec:47:51:71:21:5a:e9:d1:bc:b2:77:
         88:60:da:d7:1f:fb:ac:af:95:27:1e:f6:32:37:cd:ec:92:42:
         00:db:fe:48:c8:6e:b6:a0:ff:50:92:d1:50:b6:c3:69:bb:14:
         41:f7:15:58:11:fd:ce:9a:a7:5b:e8:e6:44:65:51:67:8e:d9:
         2f:b7:57:60:0b:a8:1f:36:cf:3c:3e:ba:af:0c:9b:54:87:a2:
         fb:71:f7:f9:fb:97:25:0d:62:b9:f4:ad:1b:f1:d3:62:fb:5f:
         b6:ea:27:3a:3a:32:1b:62:b5:52:c6:af:36:dc:97:f7:a0:ad:
         a6:40:15:22:87:30:53:22:2f:ec:8a:0e:63:39:19:c5:4a:2e:
         c9:10:2c:bc:c1:76:b6:7b:7f:40:fe:da:3c:0b:4a:68:a5:03:
         76:e2:77:8b:53:e8:e2:99:9f:0f:e2:a0:87:4b:9e:78:a2:b6:
         31:17:1e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:55:23 2025 by rpki-client