Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138392e34352e3232342e302f32302d3234203d3e20323730383134.roa
File:                     3138392e34352e3232342e302f32302d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          A4dHJBAEKF5kzvacaWQuQrwzJnATM4/1LK2RLBhKMoA=
Subject key identifier:   31:28:0C:E4:88:3F:81:BC:0F:0D:58:CD:68:13:0A:B8:8D:4D:A7:F5
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       50A66480137CDCE291DA73640021B4050337A80B
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138392e34352e3232342e302f32302d3234203d3e20323730383134.roa
Signing time:             Mon 27 Oct 2025 17:06:46 +0000
ROA not before:           Mon 27 Oct 2025 17:01:46 +0000
ROA not after:            Mon 26 Oct 2026 17:06:46 +0000
asID:                     270814
IP address blocks:        189.45.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a6:64:80:13:7c:dc:e2:91:da:73:64:00:21:b4:05:03:37:a8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Oct 27 17:01:46 2025 GMT
            Not After : Oct 26 17:06:46 2026 GMT
        Subject: CN=31280CE4883F81BC0F0D58CD68130AB88D4DA7F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:3a:7b:1c:b3:7d:19:c7:4e:40:81:f0:17:
                    fd:23:95:f1:97:d0:81:62:73:15:27:d6:32:28:6e:
                    44:62:ca:a1:59:79:91:7d:fa:6d:43:2b:b0:46:21:
                    06:cc:fd:fd:50:29:9b:36:8d:e3:8d:67:d6:fb:a1:
                    af:da:2f:bc:a4:61:84:92:ec:4e:af:f6:e2:50:41:
                    3c:86:11:77:17:2c:5f:1a:95:78:5e:f8:49:3a:96:
                    5f:53:66:a0:55:46:db:69:2b:59:ca:7c:64:2c:09:
                    64:ea:61:de:f9:57:80:7f:f9:53:d7:1a:db:17:8d:
                    cb:fa:4a:06:be:10:79:22:b7:db:95:4f:3f:89:c2:
                    14:95:09:8c:75:c3:35:1c:99:d0:80:3f:6a:d0:9f:
                    9c:4c:f7:4e:ee:de:9b:47:30:ca:fc:86:17:49:a4:
                    e8:cc:8e:4c:ba:06:e4:96:8f:3f:d5:59:46:5a:53:
                    8d:9e:31:a5:95:65:0f:37:7e:01:a3:76:5d:8d:f8:
                    ef:4c:95:03:7b:c3:48:ed:1b:5d:5e:93:6e:c1:08:
                    dd:ca:ea:5f:e9:fa:16:93:03:39:49:46:5e:09:c9:
                    f9:b0:3d:ab:ef:30:b2:10:5a:11:59:ff:d7:11:ed:
                    3f:90:28:1d:d4:11:2b:64:1f:2f:96:f0:70:de:23:
                    70:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:28:0C:E4:88:3F:81:BC:0F:0D:58:CD:68:13:0A:B8:8D:4D:A7:F5
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138392e34352e3232342e302f32302d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a8:5a:d1:dc:b1:f5:13:89:a5:c1:6e:23:44:00:72:42:05:12:
         9a:29:e3:12:34:ef:90:b2:ba:1b:1d:d5:0a:d8:6a:75:91:b2:
         b2:b3:6e:0d:f2:75:88:30:1a:e0:3c:c9:be:1b:ab:3d:75:cc:
         4b:4c:cd:75:a0:a3:20:49:06:68:f1:a1:a8:c1:4b:b4:4f:3a:
         fa:23:1a:3d:3e:17:56:b8:84:1d:eb:38:c8:36:5e:f0:75:a3:
         71:85:e6:9f:a1:42:f9:56:bb:a5:fa:ad:32:1d:9c:30:19:18:
         f2:e7:f9:28:40:5b:3a:61:fa:c2:84:36:e7:4e:13:a1:58:8e:
         96:55:27:d0:fc:d8:6a:ad:0c:d4:ca:0b:21:cc:42:29:91:e4:
         fe:6a:43:6f:0a:d4:d9:c9:29:f3:25:2a:77:79:66:75:b9:b7:
         ce:d8:b5:fd:d4:ca:3b:4b:29:ce:68:b1:47:92:71:2e:5c:ab:
         f4:c4:4a:8c:09:90:13:99:96:04:36:32:09:18:d6:83:23:f9:
         77:64:97:c8:48:94:15:9e:a1:8d:ad:14:2e:c6:92:2a:b4:90:
         4f:84:45:44:da:8f:68:f4:e5:83:c9:35:7b:92:76:6a:8a:a7:
         50:c6:14:04:b3:c6:b0:e5:54:7a:ab:2e:fb:51:19:35:c0:9d:
         04:b7:cc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:31:27 2025 by rpki-client