Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/3133382e3138352e35382e302f32332d3234203d3e20323634333430.roa
File:                     3133382e3138352e35382e302f32332d3234203d3e20323634333430.roa (raw, json)
Hash identifier:          z40kQ2FrluycTh3wf8a19KA+CVVWg13C4ti8ApWj7Q8=
Subject key identifier:   3E:16:A4:B9:56:3A:32:19:F6:92:5E:4C:00:20:12:35:BF:49:5C:AC
Certificate issuer:       /CN=E51F4485F9763AA97D6708E7BC03EADB0D86715F
Certificate serial:       08C3E8E1B581A4AC0BF4E90E3885E0711238F116
Authority key identifier: E5:1F:44:85:F9:76:3A:A9:7D:67:08:E7:BC:03:EA:DB:0D:86:71:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E51F4485F9763AA97D6708E7BC03EADB0D86715F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/3133382e3138352e35382e302f32332d3234203d3e20323634333430.roa
Signing time:             Mon 15 Sep 2025 17:20:01 +0000
ROA not before:           Mon 15 Sep 2025 17:15:01 +0000
ROA not after:            Mon 14 Sep 2026 17:20:01 +0000
asID:                     264340
IP address blocks:        138.185.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/E51F4485F9763AA97D6708E7BC03EADB0D86715F.crl
                          rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/E51F4485F9763AA97D6708E7BC03EADB0D86715F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E51F4485F9763AA97D6708E7BC03EADB0D86715F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c3:e8:e1:b5:81:a4:ac:0b:f4:e9:0e:38:85:e0:71:12:38:f1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E51F4485F9763AA97D6708E7BC03EADB0D86715F
        Validity
            Not Before: Sep 15 17:15:01 2025 GMT
            Not After : Sep 14 17:20:01 2026 GMT
        Subject: CN=3E16A4B9563A3219F6925E4C00201235BF495CAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:16:21:5d:fb:ef:cc:e2:a6:c2:a0:1a:6c:ff:
                    cf:cd:83:3d:5f:db:94:13:1a:f2:d3:59:3f:13:f8:
                    af:22:a9:1e:df:80:ab:ac:52:5f:f5:78:b8:8f:8d:
                    56:f8:6f:81:c1:d3:b3:50:9e:23:af:45:f9:c8:19:
                    bd:57:3c:85:a0:1a:06:f6:a1:f2:7e:2b:4b:5a:eb:
                    6a:82:4f:29:f3:26:d1:fc:bc:6c:6f:61:85:fd:b1:
                    a3:f8:1e:35:b1:9e:6d:95:55:99:68:61:4f:ca:33:
                    a1:cc:a0:ce:41:ef:d1:ec:46:70:5c:7b:77:b0:ea:
                    87:3b:24:8d:10:68:79:31:20:fe:d0:ca:c7:cf:12:
                    14:b5:0c:ad:f6:a2:68:4a:e1:dc:bb:04:23:56:46:
                    da:18:82:9e:c1:9b:8e:b8:22:72:9a:65:32:f6:3a:
                    cf:f9:9d:e4:f3:34:30:24:a6:1f:14:6a:90:41:9b:
                    8d:85:27:40:2f:74:01:1d:75:6e:60:dd:4c:71:bc:
                    23:f8:e9:fe:db:41:29:20:d8:6b:88:a8:0c:23:f5:
                    ec:0a:4d:94:d3:a6:7b:5f:d8:74:6a:6c:3e:bf:c2:
                    eb:50:17:5e:27:06:8a:fb:2e:0e:c0:60:60:ad:d3:
                    78:f4:60:4e:99:86:99:c3:dc:f9:1f:c0:f7:50:b9:
                    58:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:16:A4:B9:56:3A:32:19:F6:92:5E:4C:00:20:12:35:BF:49:5C:AC
            X509v3 Authority Key Identifier:
                keyid:E5:1F:44:85:F9:76:3A:A9:7D:67:08:E7:BC:03:EA:DB:0D:86:71:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/E51F4485F9763AA97D6708E7BC03EADB0D86715F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E51F4485F9763AA97D6708E7BC03EADB0D86715F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/3133382e3138352e35382e302f32332d3234203d3e20323634333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:48:80:9c:97:31:ac:1f:65:76:c9:c9:1e:e3:71:9e:4d:9c:
         cc:28:9f:48:3a:2b:1f:2a:87:9c:be:f1:a9:e5:96:76:88:85:
         9f:82:53:3a:c4:43:a1:5c:86:ab:90:d8:20:fa:2b:1e:38:5a:
         d1:c5:11:5a:2a:80:d1:b3:39:0d:c8:9c:ca:0b:42:6b:52:d6:
         9a:3f:12:63:a9:fb:03:ff:9b:23:e4:39:08:94:7b:08:b0:dd:
         cd:1c:39:26:b6:34:33:0e:b3:cb:66:8e:16:bd:4f:8f:db:c4:
         11:34:67:96:4a:2a:5c:0d:e0:68:13:59:49:fa:5d:72:9f:97:
         b9:50:00:96:39:ba:ae:a4:62:6a:db:d1:87:e6:ec:67:16:08:
         39:b9:05:06:92:c0:42:64:62:b8:0d:fe:c1:01:de:8c:66:c2:
         87:76:aa:f7:2a:82:03:5c:45:da:d6:e6:b7:88:be:e6:8a:d0:
         e2:9d:18:1a:49:13:f3:c1:c2:16:65:79:04:3c:6c:5d:5a:54:
         ce:81:5a:f6:4b:20:2b:4d:de:91:e0:c3:01:76:98:9c:48:1f:
         f4:bd:48:6a:b7:56:b7:39:c0:e2:c8:78:fc:91:64:b9:58:3d:
         93:c6:ef:be:41:dd:a5:82:b8:eb:ee:8a:5b:81:ce:5d:d5:47:
         18:02:83:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:50:49 2025 by rpki-client