Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32332d3233203d3e20323633393131.roa
File:                     3133382e3230342e3137322e302f32332d3233203d3e20323633393131.roa (raw, json)
Hash identifier:          5YC3RHP7YzFxVgDCIEzYfd3CPWfzeSPdYGjKbMK4mMs=
Subject key identifier:   E8:09:0F:AE:9D:11:03:29:CB:A9:7B:D8:1F:52:82:D8:58:AE:46:53
Certificate issuer:       /CN=1804D2BCEBB56DD0A9EC9664C75921C60E3D9616
Certificate serial:       0B4EBF882D4D62BBAD1DE26BC20625885840306C
Authority key identifier: 18:04:D2:BC:EB:B5:6D:D0:A9:EC:96:64:C7:59:21:C6:0E:3D:96:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32332d3233203d3e20323633393131.roa
Signing time:             Mon 15 Sep 2025 14:46:11 +0000
ROA not before:           Mon 15 Sep 2025 14:41:11 +0000
ROA not after:            Mon 14 Sep 2026 14:46:11 +0000
asID:                     263911
IP address blocks:        138.204.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.crl
                          rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 18:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4e:bf:88:2d:4d:62:bb:ad:1d:e2:6b:c2:06:25:88:58:40:30:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1804D2BCEBB56DD0A9EC9664C75921C60E3D9616
        Validity
            Not Before: Sep 15 14:41:11 2025 GMT
            Not After : Sep 14 14:46:11 2026 GMT
        Subject: CN=E8090FAE9D110329CBA97BD81F5282D858AE4653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c8:3e:05:58:a8:58:4c:35:7d:e7:33:74:58:
                    b5:a6:42:5e:55:48:07:b0:a6:d7:a1:a5:2b:3e:79:
                    6e:59:cf:ae:c2:ec:d5:74:6d:ae:82:b0:ec:2f:7f:
                    17:4e:e1:7a:42:5f:41:9f:f4:e6:a3:bd:f4:b3:42:
                    c1:53:56:a1:78:d6:aa:33:fb:e1:f8:52:8f:67:80:
                    ba:bc:fc:20:9a:de:31:2b:f5:46:e4:45:ae:d9:6f:
                    1c:fc:84:a1:bf:a2:be:0d:ff:94:0a:61:e2:41:31:
                    d1:a6:72:fd:8a:e9:8f:95:42:60:53:9a:90:07:67:
                    2c:93:73:9c:27:07:8a:47:76:41:77:74:98:9e:df:
                    ad:fb:03:06:2a:ee:1e:6d:65:9a:03:fc:b1:dd:f4:
                    5e:04:6f:4a:63:86:f0:e3:c5:d4:f0:ff:83:38:9c:
                    a9:f1:d6:42:8b:01:a0:6f:21:ed:f3:d3:c5:ef:4d:
                    a3:14:30:f2:0b:46:ae:8c:76:e1:06:08:ee:d2:41:
                    09:04:6b:a4:89:25:63:f5:b6:f1:3e:03:56:f3:3e:
                    68:7f:27:55:54:ad:99:49:04:00:a2:7e:db:a4:18:
                    4b:8d:3f:56:47:8d:9a:f4:88:e1:33:38:0a:f7:5f:
                    45:53:15:5e:1e:fe:9a:67:32:be:49:ee:8d:09:79:
                    c4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:09:0F:AE:9D:11:03:29:CB:A9:7B:D8:1F:52:82:D8:58:AE:46:53
            X509v3 Authority Key Identifier:
                keyid:18:04:D2:BC:EB:B5:6D:D0:A9:EC:96:64:C7:59:21:C6:0E:3D:96:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32332d3233203d3e20323633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:6c:f2:fb:d1:ad:e1:65:16:7f:23:d3:4a:66:53:8e:60:d9:
         e4:e7:e1:a2:27:b5:d7:b0:3c:8d:5d:b7:4f:01:c0:41:37:b6:
         4d:c9:77:4c:68:cd:4d:5e:01:06:38:97:07:75:93:35:50:db:
         1f:46:55:00:a5:a6:36:3b:d8:a4:d9:64:c3:7b:a1:93:dd:4a:
         50:21:4a:d4:eb:99:c3:fe:67:7d:df:3b:d3:8a:6f:e3:2f:ba:
         6a:ab:d0:d6:ec:a4:88:45:be:42:2f:64:12:b6:c6:2f:c5:17:
         ad:19:48:26:b7:d0:d3:6a:a3:65:36:f8:d7:3a:1e:69:fc:24:
         e9:cd:55:70:2b:46:aa:e1:88:a2:4f:95:eb:0c:ab:ad:1b:01:
         40:33:15:e5:1a:a7:44:c3:0f:28:1e:92:38:ee:7d:c8:3e:42:
         b6:f2:44:24:95:8a:c7:be:e3:b5:2c:5e:a6:a2:f3:22:b8:60:
         1a:4d:be:99:58:25:eb:54:de:3b:62:18:5a:17:71:38:bb:f6:
         32:c3:b4:c1:94:6f:3b:07:2c:0d:a3:8f:e9:7e:36:56:b6:d7:
         d7:75:43:5e:52:bd:fd:8c:b1:6a:14:7d:2b:03:95:13:5c:65:
         83:df:1a:32:7c:5c:f2:bb:be:a2:a5:53:d0:66:18:ab:05:cd:
         77:6f:bc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:41:50 2025 by rpki-client