Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvtrAZtFUwPALZrXQNZEoMyqLSGgugaVAaniypYooh2m/0/3138362e3139352e3136392e302f32342d3332203d3e20323734383034.roa
File:                     3138362e3139352e3136392e302f32342d3332203d3e20323734383034.roa (raw, json)
Hash identifier:          BbJiPYBegc/gN+ejharCWjPtkxtO5TI/QtLvPf6mkLg=
Subject key identifier:   8F:F0:3B:10:B2:25:4D:FC:9B:EE:FA:F1:98:26:84:56:18:13:39:98
Certificate issuer:       /CN=D24870C23BC5C4B17395133D86E7CCFFB997CE6F
Certificate serial:       06CE5DEF08F294BCABC48956C1700CE690DBE3FF
Authority key identifier: D2:48:70:C2:3B:C5:C4:B1:73:95:13:3D:86:E7:CC:FF:B9:97:CE:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D24870C23BC5C4B17395133D86E7CCFFB997CE6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvtrAZtFUwPALZrXQNZEoMyqLSGgugaVAaniypYooh2m/0/3138362e3139352e3136392e302f32342d3332203d3e20323734383034.roa
Signing time:             Sun 27 Jul 2025 18:43:23 +0000
ROA not before:           Sun 27 Jul 2025 18:38:23 +0000
ROA not after:            Sun 26 Jul 2026 18:43:23 +0000
asID:                     274804
IP address blocks:        186.195.169.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DvtrAZtFUwPALZrXQNZEoMyqLSGgugaVAaniypYooh2m/0/D24870C23BC5C4B17395133D86E7CCFFB997CE6F.crl
                          rsync://rpki-repo.registro.br/repo/DvtrAZtFUwPALZrXQNZEoMyqLSGgugaVAaniypYooh2m/0/D24870C23BC5C4B17395133D86E7CCFFB997CE6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D24870C23BC5C4B17395133D86E7CCFFB997CE6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ce:5d:ef:08:f2:94:bc:ab:c4:89:56:c1:70:0c:e6:90:db:e3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D24870C23BC5C4B17395133D86E7CCFFB997CE6F
        Validity
            Not Before: Jul 27 18:38:23 2025 GMT
            Not After : Jul 26 18:43:23 2026 GMT
        Subject: CN=8FF03B10B2254DFC9BEEFAF19826845618133998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c3:be:0b:9e:4b:79:13:bf:70:81:15:3d:1a:
                    11:45:1c:1c:da:5b:b9:b8:5e:bc:ec:1a:ba:17:b0:
                    ad:5a:95:ce:4c:01:8f:c9:1b:df:f0:07:7d:1a:a1:
                    41:81:f3:33:00:a1:9b:bd:cb:e3:4a:f3:5f:af:97:
                    ca:a2:ab:e9:87:0e:0b:63:d3:58:9a:92:69:b5:86:
                    db:eb:78:a5:e3:5a:e9:92:90:a4:f1:b7:b0:aa:3d:
                    04:92:be:b7:37:ee:e4:17:ba:5c:7b:f0:bc:5b:2d:
                    d3:ff:9a:d5:e2:43:60:12:4f:ff:d1:93:8e:68:8e:
                    6a:70:59:52:0a:37:d9:d5:b1:db:58:a8:fe:4d:f5:
                    6a:b9:44:e5:81:a2:a6:bd:60:39:13:73:c7:26:98:
                    53:1f:77:e1:cb:c6:4c:30:d7:50:64:6e:4f:86:a2:
                    2d:d9:2b:f9:b7:a9:c5:15:fb:85:7e:bb:cf:ec:dc:
                    e2:02:b7:e7:c5:7d:1a:70:aa:1b:51:30:44:42:b8:
                    b6:67:62:3d:a5:ba:e7:c8:c4:84:41:33:3b:4e:82:
                    86:d0:bf:41:14:85:aa:23:71:ed:f8:ad:42:f6:04:
                    ff:7e:4d:f8:18:5e:1a:3f:65:5f:5f:6c:19:6c:b0:
                    76:5a:8f:5f:8c:0a:4e:53:64:76:50:85:a1:f8:39:
                    bb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F0:3B:10:B2:25:4D:FC:9B:EE:FA:F1:98:26:84:56:18:13:39:98
            X509v3 Authority Key Identifier:
                keyid:D2:48:70:C2:3B:C5:C4:B1:73:95:13:3D:86:E7:CC:FF:B9:97:CE:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvtrAZtFUwPALZrXQNZEoMyqLSGgugaVAaniypYooh2m/0/D24870C23BC5C4B17395133D86E7CCFFB997CE6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D24870C23BC5C4B17395133D86E7CCFFB997CE6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvtrAZtFUwPALZrXQNZEoMyqLSGgugaVAaniypYooh2m/0/3138362e3139352e3136392e302f32342d3332203d3e20323734383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:e9:0e:56:8f:ba:81:29:44:2c:3f:02:30:dd:da:9e:44:9b:
         11:15:3c:15:36:4d:e7:5d:05:d1:4a:2e:1f:07:f9:b1:2e:53:
         55:cd:c0:84:0c:5a:20:b4:ab:63:16:64:63:50:63:be:1b:b3:
         e2:c9:0c:80:8f:8a:0c:0c:ab:05:d0:fe:2d:c0:1f:81:fa:ea:
         14:25:6b:95:23:8f:7f:2d:50:0b:1d:cc:6d:6b:12:0e:69:72:
         55:78:6d:00:f5:17:da:c7:82:e8:6d:00:28:e7:9f:00:90:dc:
         46:32:ac:93:99:0d:b5:b2:4b:7d:a2:3c:c7:eb:c3:cc:25:03:
         6a:8b:ae:6b:f9:2f:02:b1:f5:1f:a8:df:c5:6d:c1:3a:d5:b7:
         89:00:64:e1:f6:58:ca:3c:1f:df:1b:ab:72:be:01:72:b3:46:
         e5:66:c3:be:e6:fa:c6:59:5e:31:63:53:50:89:48:68:01:e2:
         29:5d:fb:18:1a:c3:87:0a:dc:e6:d0:9c:3a:72:f8:15:bd:87:
         d0:62:31:56:a4:b5:52:04:97:f9:73:50:62:9d:b3:a2:c6:83:
         9a:ff:a8:5b:05:be:f9:56:62:f6:8f:57:80:a7:33:5a:18:81:
         91:8a:89:9e:41:33:6b:ca:b2:23:63:2c:31:19:ba:d2:cf:9b:
         67:49:a5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:31 2025 by rpki-client