Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/3138362e3139352e3137302e302f32332d3233203d3e20323734343836.roa
File:                     3138362e3139352e3137302e302f32332d3233203d3e20323734343836.roa (raw, json)
Hash identifier:          X+mCLrq1lF4TuBCG729FsKiX1sKXwVJf5LMMbYOAHpA=
Subject key identifier:   D0:B3:E4:05:91:78:02:B6:3A:06:ED:EC:A8:A6:34:92:66:2B:33:7C
Certificate issuer:       /CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F
Certificate serial:       744CD2C5763FAFDC9806F8FE270ECE53C187F65A
Authority key identifier: 39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/3138362e3139352e3137302e302f32332d3233203d3e20323734343836.roa
Signing time:             Mon 29 Sep 2025 22:25:21 +0000
ROA not before:           Mon 29 Sep 2025 22:20:21 +0000
ROA not after:            Mon 28 Sep 2026 22:25:21 +0000
asID:                     274486
IP address blocks:        186.195.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl
                          rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 03:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4c:d2:c5:76:3f:af:dc:98:06:f8:fe:27:0e:ce:53:c1:87:f6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F
        Validity
            Not Before: Sep 29 22:20:21 2025 GMT
            Not After : Sep 28 22:25:21 2026 GMT
        Subject: CN=D0B3E405917802B63A06EDECA8A63492662B337C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:0e:cd:dc:17:23:25:ba:64:15:05:17:ca:
                    ed:3f:38:6c:48:3a:04:01:18:a5:f3:c6:21:03:b5:
                    0d:55:1d:e7:ff:ee:11:bf:f9:a2:dc:dc:2c:2a:8a:
                    fe:3c:1c:a0:bd:41:99:63:89:b2:e1:ff:8f:ca:07:
                    65:6e:1a:ef:e5:1c:ba:02:a7:dd:0b:dc:5e:9a:f1:
                    9a:5c:46:b4:38:af:b6:cc:b1:2d:e2:ca:ca:fe:04:
                    d3:1f:92:db:24:02:b1:9a:05:45:2e:49:d7:ee:24:
                    52:5d:87:ea:ec:40:d6:51:d7:61:a0:60:fd:54:30:
                    83:a9:42:78:da:c8:89:6e:31:51:ee:6a:29:75:8b:
                    68:2c:b6:e6:7f:16:b9:8e:22:7b:f2:0b:38:3c:3e:
                    f9:ad:9e:c3:2e:5f:5c:7a:44:33:67:a2:5d:72:9c:
                    78:31:5f:80:0a:a3:28:06:4d:16:a8:43:07:35:da:
                    99:17:83:e2:31:59:6d:47:54:dd:16:4e:42:9c:96:
                    94:1d:dd:32:32:26:e1:1c:51:6e:0e:c6:52:54:dd:
                    ff:83:d5:0a:85:bc:63:af:7b:29:d6:af:0f:70:73:
                    3c:e0:a4:f0:d1:fc:60:05:0f:78:de:17:f6:b0:a2:
                    c1:11:4a:11:6a:1a:af:a5:0b:ac:30:46:73:ad:5f:
                    b5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B3:E4:05:91:78:02:B6:3A:06:ED:EC:A8:A6:34:92:66:2B:33:7C
            X509v3 Authority Key Identifier:
                keyid:39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/3138362e3139352e3137302e302f32332d3233203d3e20323734343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:05:4b:28:2a:31:02:78:2c:75:cf:32:9c:ef:38:74:8e:66:
         68:24:29:a0:1d:7f:cf:60:ea:0a:f2:5a:70:d9:ea:8e:7e:f1:
         5c:91:39:68:0d:18:7d:5b:ae:c9:21:a3:df:b6:89:d4:e5:0b:
         42:52:84:d3:37:24:2e:12:f1:69:a9:aa:f3:61:9d:7b:d2:3a:
         67:4f:9b:a7:33:2a:0b:5b:13:6e:5e:f8:6c:b0:88:ba:2f:86:
         78:2f:76:d8:e8:16:60:b6:bb:c3:f9:73:74:6d:db:26:3c:ca:
         fb:5b:df:e6:9b:0a:e9:f5:84:94:94:53:fc:db:78:90:03:c1:
         80:9e:4c:e6:35:29:c9:dc:a7:45:2d:bd:99:59:ed:8d:82:d2:
         df:1e:03:17:95:63:dd:87:89:3f:ca:d1:a4:e6:4f:44:e2:d7:
         47:1a:9c:93:53:73:73:52:14:a7:3d:d2:98:40:c2:84:77:ad:
         c3:27:81:27:d4:1f:88:96:c6:89:20:1e:0b:0f:7a:16:e5:51:
         29:b8:34:ed:cd:8b:e1:02:cb:2a:42:10:b2:45:a6:c1:47:59:
         08:2d:31:0f:a9:aa:c0:51:95:76:79:e5:cd:1a:ba:b6:4d:aa:
         00:77:0d:ca:58:13:f8:99:02:46:03:10:d7:6a:c0:c2:f9:11:
         d1:64:ad:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:38:50 2025 by rpki-client