Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fRJwMo9dxuCgxKGn9p33ErpMtGXMrcjqrNHe8HFQytk/0/3133382e3230342e38342e302f32322d3234203d3e20323633383836.roa
File:                     3133382e3230342e38342e302f32322d3234203d3e20323633383836.roa (raw, json)
Hash identifier:          tC6uTLd0AutQOPGyUX4aj7e+MAwgx4bDFIJEq2cZ3JE=
Subject key identifier:   8A:8C:01:20:4A:8B:B8:E4:36:FC:43:9C:2A:02:5B:FC:7C:F4:F1:06
Certificate issuer:       /CN=6C2438C730A4200897293A47493AF193498BB45F
Certificate serial:       175D15840DEA3D41FB2E88113F66591CA4F6A53C
Authority key identifier: 6C:24:38:C7:30:A4:20:08:97:29:3A:47:49:3A:F1:93:49:8B:B4:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C2438C730A4200897293A47493AF193498BB45F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fRJwMo9dxuCgxKGn9p33ErpMtGXMrcjqrNHe8HFQytk/0/3133382e3230342e38342e302f32322d3234203d3e20323633383836.roa
Signing time:             Wed 29 Oct 2025 21:16:05 +0000
ROA not before:           Wed 29 Oct 2025 21:11:05 +0000
ROA not after:            Wed 28 Oct 2026 21:16:05 +0000
asID:                     263886
IP address blocks:        138.204.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fRJwMo9dxuCgxKGn9p33ErpMtGXMrcjqrNHe8HFQytk/0/6C2438C730A4200897293A47493AF193498BB45F.crl
                          rsync://rpki-repo.registro.br/repo/2fRJwMo9dxuCgxKGn9p33ErpMtGXMrcjqrNHe8HFQytk/0/6C2438C730A4200897293A47493AF193498BB45F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C2438C730A4200897293A47493AF193498BB45F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 16:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5d:15:84:0d:ea:3d:41:fb:2e:88:11:3f:66:59:1c:a4:f6:a5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C2438C730A4200897293A47493AF193498BB45F
        Validity
            Not Before: Oct 29 21:11:05 2025 GMT
            Not After : Oct 28 21:16:05 2026 GMT
        Subject: CN=8A8C01204A8BB8E436FC439C2A025BFC7CF4F106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:58:ba:41:58:61:87:25:eb:10:aa:59:eb:
                    dd:21:af:eb:49:92:a5:03:8e:e5:4a:7c:38:57:a3:
                    4b:e5:ee:6d:e0:a7:02:f3:c6:a8:ea:b2:64:28:6c:
                    0b:13:01:8f:d3:fd:7f:c4:24:61:d6:b9:e3:83:23:
                    59:e2:60:69:4a:70:c5:60:62:38:ed:4b:59:94:35:
                    c4:db:76:d3:79:42:bc:ee:3f:af:01:97:88:21:0f:
                    d3:73:4f:a6:f2:b7:8c:30:f8:66:43:63:68:64:d9:
                    ba:d1:0c:bd:49:2c:0c:54:52:5f:80:99:9e:ac:d3:
                    cf:3a:47:a4:53:31:44:b2:1e:5c:3b:83:ec:2e:2b:
                    50:f5:ac:53:3f:b8:9c:59:85:42:8d:fb:1f:a2:0e:
                    d7:b0:b0:08:c2:43:af:57:15:33:68:d4:b8:6a:2f:
                    61:24:53:0f:87:52:13:fe:13:f2:81:f5:5e:3d:bb:
                    3a:0a:44:42:f7:fd:cd:f1:96:13:82:1a:81:ca:c4:
                    c9:75:a9:fa:74:cf:b7:2d:b0:80:cb:ee:0e:3f:f4:
                    a8:90:0e:ab:9e:26:3f:d0:66:73:dc:31:31:3b:18:
                    a8:83:33:ab:a5:a7:3d:81:02:dc:73:1e:74:1f:98:
                    ba:bd:6c:94:a9:3c:20:bc:b6:23:bd:4b:ec:cf:eb:
                    63:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8C:01:20:4A:8B:B8:E4:36:FC:43:9C:2A:02:5B:FC:7C:F4:F1:06
            X509v3 Authority Key Identifier:
                keyid:6C:24:38:C7:30:A4:20:08:97:29:3A:47:49:3A:F1:93:49:8B:B4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fRJwMo9dxuCgxKGn9p33ErpMtGXMrcjqrNHe8HFQytk/0/6C2438C730A4200897293A47493AF193498BB45F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C2438C730A4200897293A47493AF193498BB45F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fRJwMo9dxuCgxKGn9p33ErpMtGXMrcjqrNHe8HFQytk/0/3133382e3230342e38342e302f32322d3234203d3e20323633383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:d6:2c:a8:29:2a:da:2b:5a:97:38:10:c0:3c:9f:b3:9a:89:
         5c:72:21:dd:dc:a0:0b:1d:fc:a3:7e:92:ff:32:e9:44:b1:00:
         ca:ea:d4:be:72:3f:58:c5:47:dc:98:52:21:76:0e:c6:ff:1a:
         de:af:3e:30:d3:0e:90:ec:d9:f0:c1:82:00:84:d5:81:3c:09:
         b7:8a:0c:9a:58:ae:f7:c6:b4:0a:ab:9c:21:6f:79:3a:dd:a8:
         af:15:fc:fd:36:71:9f:21:c7:be:42:28:f9:65:ae:bc:bd:62:
         c8:37:69:04:ea:01:3e:6e:ec:c7:a6:c4:94:01:4a:e0:66:89:
         bd:48:cf:b9:80:b0:cb:f9:89:23:db:a6:69:28:40:e9:d3:ad:
         98:bd:f7:48:65:f5:34:f3:56:1b:94:43:5c:9f:14:5f:99:e9:
         df:81:eb:cb:77:e6:95:8d:f1:05:88:dd:db:20:ed:4a:f8:5f:
         8d:09:49:f6:b9:ff:e0:58:fa:6b:17:4f:a6:4f:8b:42:a3:9b:
         d5:5d:82:3c:b7:5f:37:74:ed:d6:64:40:20:a6:4d:4f:96:0e:
         22:00:fe:f5:8d:a0:1b:10:61:5b:b4:d1:72:a3:b2:fd:83:c6:
         22:0d:38:02:0c:0c:21:ec:3c:7a:be:a0:93:be:81:72:32:2a:
         50:25:91:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:36:37 2025 by rpki-client