Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32322d3232203d3e20323633393131.roa
File:                     3133382e3230342e3137322e302f32322d3232203d3e20323633393131.roa (raw, json)
Hash identifier:          hl1dL7mIJkOrxuDrQH+UpsBeVQRQbGeMF+mANlKP7HM=
Subject key identifier:   B7:48:CF:98:AA:F5:3D:FC:5C:69:BE:16:AC:A0:D7:98:CA:E2:AF:FD
Certificate issuer:       /CN=1804D2BCEBB56DD0A9EC9664C75921C60E3D9616
Certificate serial:       7271D656196CC0847A1E89A58768D93AAF22133A
Authority key identifier: 18:04:D2:BC:EB:B5:6D:D0:A9:EC:96:64:C7:59:21:C6:0E:3D:96:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32322d3232203d3e20323633393131.roa
Signing time:             Mon 15 Sep 2025 14:46:13 +0000
ROA not before:           Mon 15 Sep 2025 14:41:13 +0000
ROA not after:            Mon 14 Sep 2026 14:46:13 +0000
asID:                     263911
IP address blocks:        138.204.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.crl
                          rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 18:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:71:d6:56:19:6c:c0:84:7a:1e:89:a5:87:68:d9:3a:af:22:13:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1804D2BCEBB56DD0A9EC9664C75921C60E3D9616
        Validity
            Not Before: Sep 15 14:41:13 2025 GMT
            Not After : Sep 14 14:46:13 2026 GMT
        Subject: CN=B748CF98AAF53DFC5C69BE16ACA0D798CAE2AFFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:01:76:c4:19:38:e7:b7:41:45:b7:ce:06:f7:
                    5b:43:18:95:5e:13:e2:29:49:5f:ee:b9:e8:94:2c:
                    c5:90:63:16:1f:55:dd:20:06:56:00:7a:77:86:d6:
                    22:bd:57:25:36:24:3d:e7:f6:b7:e5:2a:fa:a0:7f:
                    4a:89:52:60:8a:3c:65:01:e5:8a:5b:34:ec:b8:4f:
                    45:16:e5:5d:7f:46:5a:18:ae:9c:99:b2:16:b5:27:
                    a8:90:96:03:f2:b6:24:55:4c:98:3f:7b:fa:1d:14:
                    0d:c2:ee:b5:d5:80:c1:3a:d9:07:c6:32:2d:1b:3c:
                    83:1a:45:7b:a6:83:62:60:7d:12:6b:db:84:41:4e:
                    90:ff:a7:16:42:52:1f:97:11:14:9e:bc:b0:93:78:
                    ea:a7:79:18:3f:47:c3:79:74:b3:63:ec:66:52:86:
                    c1:a4:37:27:a5:f1:54:ac:cd:31:f4:c1:57:8a:70:
                    ba:7a:61:a9:9f:32:93:39:d9:0d:5b:b5:cd:86:c2:
                    a8:4a:0a:32:f0:4c:f8:b4:ce:12:38:e0:5b:c1:e6:
                    32:66:45:35:94:33:4e:96:fb:c4:54:04:d9:f9:be:
                    4a:a0:df:10:17:e4:53:86:78:d6:0a:1e:3e:d8:28:
                    12:9f:e7:d5:58:49:11:43:ad:0f:74:75:2c:38:c2:
                    6b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:48:CF:98:AA:F5:3D:FC:5C:69:BE:16:AC:A0:D7:98:CA:E2:AF:FD
            X509v3 Authority Key Identifier:
                keyid:18:04:D2:BC:EB:B5:6D:D0:A9:EC:96:64:C7:59:21:C6:0E:3D:96:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32322d3232203d3e20323633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:42:90:a8:9d:f1:d1:38:03:ea:66:9b:b8:0d:2d:7b:a5:f0:
         c5:f6:5a:ac:b2:76:49:f3:60:45:49:4a:ef:9d:62:61:75:ef:
         64:c6:11:ce:42:47:f5:b9:81:64:66:24:72:fc:a3:25:43:e6:
         4e:da:9b:d1:b0:79:ad:27:c7:bb:a5:53:82:12:cc:de:d9:e7:
         f9:da:c8:81:ed:44:93:ed:ee:a6:5e:1b:e2:e3:63:9a:62:0c:
         53:85:7b:6b:84:4c:94:b8:88:1a:87:b2:3f:be:7a:3d:9a:3d:
         35:d1:d8:03:11:82:be:4d:64:d5:c2:f4:9e:bf:ec:bf:a5:00:
         47:2a:ab:8f:99:4b:ab:46:eb:24:b6:db:07:35:d2:49:4e:bc:
         c7:f1:8e:e3:95:4c:3a:9c:37:74:6f:5e:d2:fb:32:60:5f:7d:
         f2:58:d2:64:04:c0:38:df:2b:73:d2:ed:2f:e1:ea:2e:ea:4d:
         36:f0:55:6e:34:be:a2:e8:f3:0b:dd:98:38:55:91:ae:11:6e:
         f2:68:be:67:0f:c5:2f:78:43:9c:23:11:2e:4b:ec:c3:d5:6d:
         28:87:12:ed:02:c6:bf:c5:d4:35:68:0b:88:aa:65:34:b5:92:
         31:ce:45:4a:88:99:44:88:4c:a0:61:36:bd:29:66:56:a4:ba:
         57:33:d1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:18:56 2025 by rpki-client