Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/3138372e38342e3134362e302f32342d3234203d3e20323734363835.roa
File:                     3138372e38342e3134362e302f32342d3234203d3e20323734363835.roa (raw, json)
Hash identifier:          E35oI5AHEaRqKb3rJm2qGU29fXsDquOrkbsZ/nhDm90=
Subject key identifier:   3F:52:20:AC:4B:0C:47:E5:4B:5E:B6:99:FE:4A:C1:B1:71:CA:7D:F7
Certificate issuer:       /CN=E9B8002BDBCBE0F1E3D38E8321C5A28564934F05
Certificate serial:       735521A0FA3994A2A473AAC58042A7DAEED0D738
Authority key identifier: E9:B8:00:2B:DB:CB:E0:F1:E3:D3:8E:83:21:C5:A2:85:64:93:4F:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/3138372e38342e3134362e302f32342d3234203d3e20323734363835.roa
Signing time:             Mon 21 Jul 2025 16:41:44 +0000
ROA not before:           Mon 21 Jul 2025 16:36:44 +0000
ROA not after:            Mon 20 Jul 2026 16:41:44 +0000
asID:                     274685
IP address blocks:        187.84.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.crl
                          rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 03:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:55:21:a0:fa:39:94:a2:a4:73:aa:c5:80:42:a7:da:ee:d0:d7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9B8002BDBCBE0F1E3D38E8321C5A28564934F05
        Validity
            Not Before: Jul 21 16:36:44 2025 GMT
            Not After : Jul 20 16:41:44 2026 GMT
        Subject: CN=3F5220AC4B0C47E54B5EB699FE4AC1B171CA7DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:35:f5:16:45:bf:3a:c2:19:e5:cc:bb:ad:b0:
                    7d:21:97:37:0d:04:9e:7f:4a:9a:29:b1:3d:23:21:
                    44:76:36:16:9a:82:35:f4:7f:25:18:f5:98:0f:bf:
                    72:5e:b5:a4:fe:4e:7d:45:59:b8:ba:05:cf:8d:47:
                    a4:5e:c6:a0:65:20:1e:0a:f3:4b:87:52:7f:0b:ac:
                    f2:93:fc:a2:ec:61:92:22:bc:12:4b:22:28:74:82:
                    de:00:82:9b:06:ea:18:fd:d0:7d:2f:04:e8:17:bf:
                    65:dd:f6:3a:30:4a:28:35:c7:70:af:e9:8c:cd:43:
                    92:27:47:4a:6c:33:07:09:6b:6d:e9:1d:0c:3e:58:
                    70:6e:e7:8c:7c:fb:69:98:94:f9:16:16:fe:22:46:
                    77:a1:04:67:74:50:e9:19:31:e7:6f:f7:a9:5e:a8:
                    7a:2a:f7:e5:89:39:ff:0c:e9:b2:c8:f6:b2:33:8a:
                    7e:9e:51:09:7e:72:53:01:fc:ac:16:50:81:ae:f4:
                    47:9e:2c:f1:17:4d:26:86:88:9b:e0:3b:b7:ff:89:
                    d3:c0:bc:78:24:4b:e8:66:e9:e8:26:8b:61:e3:1e:
                    d6:bd:4f:16:a8:46:d6:0c:a7:a9:62:8e:9f:99:5a:
                    47:fb:63:36:78:4e:a3:1b:45:e1:9c:b7:1b:fd:c3:
                    c4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:52:20:AC:4B:0C:47:E5:4B:5E:B6:99:FE:4A:C1:B1:71:CA:7D:F7
            X509v3 Authority Key Identifier:
                keyid:E9:B8:00:2B:DB:CB:E0:F1:E3:D3:8E:83:21:C5:A2:85:64:93:4F:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/3138372e38342e3134362e302f32342d3234203d3e20323734363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:e6:da:0f:66:0e:af:8c:7b:57:db:1f:37:94:5b:72:9a:c0:
         dd:06:44:da:e3:03:2c:1a:5e:e8:0b:27:ac:e6:7b:d0:23:b5:
         03:01:4a:82:7f:79:74:c2:81:e3:fe:fa:09:72:67:05:18:ea:
         c6:c8:0a:3c:fb:74:29:64:f1:03:48:33:68:68:4c:7b:d7:89:
         e4:24:a0:30:cd:5b:a1:7d:c3:b1:b4:2f:da:65:1f:9b:57:ee:
         f9:67:76:55:12:d0:1d:92:11:52:9e:16:aa:c5:db:63:b0:c0:
         53:09:7f:49:28:48:d5:fa:23:b7:3e:eb:81:bb:68:f4:47:e5:
         0b:93:51:f1:d3:ba:c8:08:9d:54:df:39:c6:68:89:a8:fb:83:
         aa:50:ae:39:94:78:c9:ef:96:a0:1b:d9:92:f8:0f:50:11:98:
         5c:90:cd:3a:63:05:8f:50:8d:31:a2:89:45:d3:7b:10:1b:1c:
         12:01:8b:fd:aa:d6:cf:3a:80:9f:74:6e:b5:43:aa:97:dc:14:
         3e:02:76:9d:60:7e:b3:70:fe:77:40:65:9e:59:88:4e:2a:cc:
         32:dd:4a:1c:e8:23:c8:67:49:7a:c9:a5:b5:10:6f:59:ee:b6:
         e0:01:2d:2d:61:58:4b:45:4c:0d:b4:f1:58:d1:64:cc:98:3b:
         90:c2:f7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:39:51 2025 by rpki-client