Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa
File:                     3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa (raw, json)
Hash identifier:          4rw4Uail/JnVkUqBw1XhL5zOOCFkwqiFSWQ2yKJ8vLc=
Subject key identifier:   3D:E4:B7:DC:C0:DF:74:CF:FE:3C:12:87:8B:3B:91:3A:4D:9A:8A:D0
Certificate issuer:       /CN=9675F8853862F77109315A71203F65D7C66AD7D3
Certificate serial:       7DBA6D3853BAE22692887B7E70E1D98E78510772
Authority key identifier: 96:75:F8:85:38:62:F7:71:09:31:5A:71:20:3F:65:D7:C6:6A:D7:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9675F8853862F77109315A71203F65D7C66AD7D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa
Signing time:             Wed 16 Jul 2025 17:13:37 +0000
ROA not before:           Wed 16 Jul 2025 17:08:37 +0000
ROA not after:            Wed 15 Jul 2026 17:13:37 +0000
asID:                     263252
IP address blocks:        189.201.232.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/9675F8853862F77109315A71203F65D7C66AD7D3.crl
                          rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/9675F8853862F77109315A71203F65D7C66AD7D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9675F8853862F77109315A71203F65D7C66AD7D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 15:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ba:6d:38:53:ba:e2:26:92:88:7b:7e:70:e1:d9:8e:78:51:07:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9675F8853862F77109315A71203F65D7C66AD7D3
        Validity
            Not Before: Jul 16 17:08:37 2025 GMT
            Not After : Jul 15 17:13:37 2026 GMT
        Subject: CN=3DE4B7DCC0DF74CFFE3C12878B3B913A4D9A8AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:93:1e:b9:e5:e8:9a:83:61:8c:01:b5:08:ae:
                    2f:1b:d9:2d:bb:e1:ee:73:44:3b:c7:f9:f1:64:83:
                    58:99:80:70:b6:f8:6a:8f:d1:1e:d2:b4:78:fe:a4:
                    e1:e6:09:63:4f:55:76:d4:32:bb:fe:c7:c7:e3:95:
                    90:33:b8:25:61:34:a4:73:55:26:31:01:08:c7:4f:
                    f8:60:a9:7b:ad:45:2e:f2:95:f8:e4:f7:f0:05:ac:
                    f8:83:2d:f1:7b:fb:91:68:20:51:39:64:7c:69:fb:
                    87:13:c6:96:6d:a5:4b:ae:b4:33:07:30:93:33:c0:
                    ae:5f:ba:76:6f:be:5c:be:07:4d:df:62:5e:db:1d:
                    24:b8:da:33:c1:26:46:9c:f9:bf:54:cb:ad:4c:dd:
                    4c:40:82:88:cc:a7:cf:0a:b6:76:20:b6:f8:91:ab:
                    d7:85:c9:b9:a7:13:6d:31:e4:58:df:24:13:f9:24:
                    2e:37:2b:ca:90:30:a8:2b:0f:b8:28:ae:04:a1:ac:
                    16:c5:f5:85:5e:bf:90:4f:1a:6c:45:d5:92:48:ba:
                    98:1e:b3:30:b3:c8:c1:f8:ee:2f:1e:68:c4:25:bf:
                    2b:64:c2:17:ee:93:06:2e:db:ac:ed:c7:dd:45:18:
                    91:f5:ac:a4:26:72:3d:ce:8c:e8:75:c8:e6:a0:81:
                    43:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E4:B7:DC:C0:DF:74:CF:FE:3C:12:87:8B:3B:91:3A:4D:9A:8A:D0
            X509v3 Authority Key Identifier:
                keyid:96:75:F8:85:38:62:F7:71:09:31:5A:71:20:3F:65:D7:C6:6A:D7:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/9675F8853862F77109315A71203F65D7C66AD7D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9675F8853862F77109315A71203F65D7C66AD7D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:d9:27:bb:82:90:49:23:15:a4:c7:87:d6:fa:95:a4:39:fd:
         86:00:5b:08:dd:d8:38:c5:f2:e4:aa:3e:0e:5c:ad:66:d1:15:
         a6:f5:68:12:43:46:f1:7b:b4:32:bb:b6:80:a5:46:92:8b:68:
         20:a0:73:e1:ee:6c:f6:41:7e:15:09:37:6d:3b:94:02:fa:8d:
         9e:35:52:12:13:5d:a4:27:23:17:2d:69:ca:fa:c4:cd:dc:30:
         71:ce:ee:0d:74:2f:d6:55:a5:f6:21:b0:22:a1:3e:a5:be:fa:
         36:f4:44:eb:be:df:44:5d:e4:39:f5:b6:f9:a0:30:a1:eb:e9:
         e2:84:88:50:af:d9:1e:2a:05:ae:4d:94:38:68:a3:9e:75:d2:
         12:25:94:ea:bb:72:81:b4:fb:77:ba:fe:e6:bb:f6:dd:b3:c7:
         6b:e8:e9:b4:a2:a3:23:d1:f5:ca:90:c3:67:60:9e:cf:3b:cb:
         e8:47:ff:ea:79:d1:51:28:10:35:c6:ab:2b:bf:21:c5:07:36:
         45:85:44:db:7b:f1:b8:84:e4:d5:ee:a5:b7:ba:4b:c4:8f:dc:
         94:04:60:ac:12:2b:df:53:25:75:03:51:27:ef:70:25:50:45:
         5c:4c:f9:9a:92:d0:6f:6e:d9:4f:44:11:e1:96:45:28:30:0d:
         41:8d:41:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:06:39 2025 by rpki-client