Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/3133382e39392e38302e302f32332d3332203d3e20323731353936.roa
File:                     3133382e39392e38302e302f32332d3332203d3e20323731353936.roa (raw, json)
Hash identifier:          HLRC3ILU1/Q0mbHQEP1oVDDagjnMAzt8TFJhqxGdn2k=
Subject key identifier:   12:2D:A5:17:CC:B5:6F:4C:6F:A9:F0:D3:64:90:8D:A0:17:A8:D0:1B
Certificate issuer:       /CN=D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC
Certificate serial:       0B065D3943204DF89D13737A11ED470D6AAB511C
Authority key identifier: D1:40:32:9A:9C:2C:7F:8E:F6:7D:07:AE:69:78:FC:F2:C2:57:CB:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/3133382e39392e38302e302f32332d3332203d3e20323731353936.roa
Signing time:             Wed 27 Aug 2025 02:06:44 +0000
ROA not before:           Wed 27 Aug 2025 02:01:44 +0000
ROA not after:            Wed 26 Aug 2026 02:06:44 +0000
asID:                     271596
IP address blocks:        138.99.80.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl
                          rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 01:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:06:5d:39:43:20:4d:f8:9d:13:73:7a:11:ed:47:0d:6a:ab:51:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC
        Validity
            Not Before: Aug 27 02:01:44 2025 GMT
            Not After : Aug 26 02:06:44 2026 GMT
        Subject: CN=122DA517CCB56F4C6FA9F0D364908DA017A8D01B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:56:20:34:e7:bb:29:24:ba:1c:31:80:0a:dc:
                    a9:7e:00:30:e1:fd:60:d8:c1:98:43:fc:42:1c:b2:
                    c4:fe:3d:28:aa:44:a1:32:53:12:25:08:df:43:7f:
                    23:2d:09:37:0b:96:81:03:70:9f:49:43:b4:b4:f1:
                    18:79:b4:fe:67:c9:84:b7:0a:e2:ed:3d:57:2e:bf:
                    23:8c:ae:3d:96:fa:7c:86:88:0b:fb:2d:36:9a:47:
                    28:70:5d:b7:e4:34:37:97:bb:23:8d:2f:02:86:d5:
                    02:49:94:ff:61:37:b6:7a:b2:60:87:f6:69:16:97:
                    56:18:97:d7:4c:d6:83:df:dc:c6:3d:91:fa:28:d8:
                    b0:3f:71:d0:1f:26:e5:0b:3a:87:3a:2d:ec:ba:44:
                    94:3d:de:69:65:d5:19:e6:d0:47:24:bf:b2:4e:90:
                    4b:4f:93:a4:bd:cd:ac:af:c1:c8:7b:f2:bd:43:94:
                    1e:24:1c:93:ad:dd:98:29:7b:a8:e3:e2:d5:0e:1d:
                    b4:73:86:bb:b8:ff:70:5d:81:bf:18:75:89:e4:55:
                    44:94:5a:54:f6:e9:72:d7:9a:b8:8e:51:f5:96:d2:
                    9a:24:7b:09:cb:65:42:3e:61:a6:96:27:6f:7c:19:
                    67:93:88:76:8e:5e:8d:95:f9:2d:f5:4c:80:02:58:
                    3d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2D:A5:17:CC:B5:6F:4C:6F:A9:F0:D3:64:90:8D:A0:17:A8:D0:1B
            X509v3 Authority Key Identifier:
                keyid:D1:40:32:9A:9C:2C:7F:8E:F6:7D:07:AE:69:78:FC:F2:C2:57:CB:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/3133382e39392e38302e302f32332d3332203d3e20323731353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:b6:3a:29:cf:dd:57:ff:8d:77:c3:c7:2d:06:05:6a:be:33:
         8a:25:9c:c9:9b:e9:30:2d:dd:f2:92:28:11:26:46:2b:cc:21:
         f2:c5:dc:4f:c6:1d:5c:ce:43:5a:ae:62:81:cc:68:8a:2a:3c:
         b9:f6:46:89:47:b4:5a:45:5e:eb:c5:a2:17:f2:3e:29:59:3d:
         28:60:c9:cf:6d:c5:05:47:45:ca:a4:62:29:07:b0:49:65:2e:
         cd:30:f2:fb:ad:51:79:67:09:99:32:d6:61:3a:44:8a:b5:aa:
         34:41:36:f1:1b:19:48:9b:80:48:6d:a1:cd:a8:63:43:1b:2f:
         c5:d8:49:15:ef:b3:2b:a4:d0:1c:12:da:2d:53:af:ca:71:4a:
         49:66:8a:49:51:8f:a4:28:74:2a:a1:21:89:2e:24:68:06:f0:
         c0:e0:1c:08:de:52:4c:6c:2c:b4:20:11:a2:b3:7a:84:c0:16:
         9b:1c:6c:1f:7a:93:b3:7a:a7:05:92:d7:ac:b0:21:d5:4a:e6:
         91:a1:04:f0:31:53:e7:15:4a:f1:79:50:83:0b:63:91:a2:ed:
         97:ba:de:52:0c:d2:94:c2:18:36:56:c1:b3:15:72:35:5d:3d:
         7b:07:3d:1a:c6:27:2d:24:1e:fd:2a:51:c8:75:45:c9:23:66:
         69:4c:5d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:16:02 2025 by rpki-client