Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137332e302f32342d3234203d3e20323633393131.roa
File:                     3133382e3230342e3137332e302f32342d3234203d3e20323633393131.roa (raw, json)
Hash identifier:          FD2xiVmnQbDE5F+CceqjDe+u7SeNym8q8be7ZuYi0L8=
Subject key identifier:   4B:91:7C:F7:63:03:CB:5F:B3:C3:E5:D6:34:D7:57:3D:53:14:3A:46
Certificate issuer:       /CN=1804D2BCEBB56DD0A9EC9664C75921C60E3D9616
Certificate serial:       2884CB624574F67173BE133FFB741B1215C1AA36
Authority key identifier: 18:04:D2:BC:EB:B5:6D:D0:A9:EC:96:64:C7:59:21:C6:0E:3D:96:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137332e302f32342d3234203d3e20323633393131.roa
Signing time:             Mon 15 Sep 2025 14:46:11 +0000
ROA not before:           Mon 15 Sep 2025 14:41:11 +0000
ROA not after:            Mon 14 Sep 2026 14:46:11 +0000
asID:                     263911
IP address blocks:        138.204.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.crl
                          rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 18:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:84:cb:62:45:74:f6:71:73:be:13:3f:fb:74:1b:12:15:c1:aa:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1804D2BCEBB56DD0A9EC9664C75921C60E3D9616
        Validity
            Not Before: Sep 15 14:41:11 2025 GMT
            Not After : Sep 14 14:46:11 2026 GMT
        Subject: CN=4B917CF76303CB5FB3C3E5D634D7573D53143A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:22:16:e9:cf:59:7f:b6:06:1d:53:55:e9:e2:
                    9e:75:91:3c:e1:a5:39:fa:17:4a:03:ee:f6:fc:65:
                    8f:32:f3:f5:c4:74:86:da:43:4e:28:54:16:e6:b0:
                    ec:e8:7e:d7:ab:65:9a:36:2c:99:96:07:75:be:14:
                    2e:c1:a8:bf:a0:df:77:36:7a:49:2d:e6:7f:a9:a4:
                    76:3e:89:62:84:a4:d9:05:d7:3d:8a:ce:d8:74:57:
                    db:f2:af:4e:68:51:4c:94:7f:ff:2f:45:2e:ab:ac:
                    17:8a:5b:f4:1e:6d:b9:b1:c5:ce:cc:9a:1e:54:64:
                    4f:63:06:64:ac:2a:3c:87:dc:b8:46:41:e5:45:93:
                    5d:38:1e:a1:f2:ab:5e:39:16:32:8a:09:ab:ae:81:
                    89:d2:e2:80:ad:46:c4:97:55:a2:a5:57:7d:db:8d:
                    c4:2b:7c:6b:15:09:c9:e8:ea:f6:eb:02:ae:61:12:
                    df:bf:d3:67:62:e9:e7:68:50:d4:04:0e:57:18:c2:
                    92:f1:73:aa:18:b5:93:c0:de:e7:3f:de:5e:86:30:
                    74:2e:bb:19:1b:fc:d5:d1:1c:32:c7:8e:78:73:5c:
                    0e:7d:1e:bd:1a:b1:ce:b7:71:86:99:9c:9e:b9:6e:
                    e7:0e:0e:95:e9:68:d7:67:6a:2d:7e:c0:d8:82:57:
                    24:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:91:7C:F7:63:03:CB:5F:B3:C3:E5:D6:34:D7:57:3D:53:14:3A:46
            X509v3 Authority Key Identifier:
                keyid:18:04:D2:BC:EB:B5:6D:D0:A9:EC:96:64:C7:59:21:C6:0E:3D:96:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137332e302f32342d3234203d3e20323633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:b2:51:c9:2a:3c:dc:97:cd:39:6a:b2:1c:a8:3f:1c:40:89:
         5b:32:2e:ff:45:2a:c4:09:9a:ee:c7:cc:99:3f:4c:46:c0:c4:
         a4:87:3c:7d:c8:73:9e:7e:bb:21:42:83:09:86:ed:40:f9:c2:
         eb:5e:33:fc:c6:f7:f1:c5:10:01:a3:aa:97:c1:06:5a:b0:58:
         0f:86:b9:fb:12:e2:d0:be:eb:82:62:26:fe:03:86:65:d8:c5:
         d7:8d:5b:80:1b:88:d8:cc:70:61:36:46:b3:05:a2:ee:49:f6:
         af:fe:f8:f0:d9:8a:93:75:45:6f:3a:8c:c7:be:da:fc:74:f7:
         2d:91:34:dd:ce:61:65:5d:89:63:b2:28:0f:83:35:ca:96:e6:
         56:0a:85:c7:a4:37:44:6a:7f:ea:d2:6b:1b:3c:37:9c:21:d5:
         f4:63:ee:32:b3:08:ba:db:96:e8:dd:4b:f8:9d:f7:63:ef:78:
         2b:9f:ac:ee:ab:d3:24:15:b5:4d:3e:cb:c8:18:10:6d:7d:a0:
         b2:41:e2:23:22:56:a2:00:6f:ac:b6:55:37:50:15:eb:ec:a6:
         35:24:5e:98:1a:ba:39:02:2b:55:42:ef:a7:b4:2a:37:97:9a:
         81:8d:1b:0b:5a:77:5a:2f:85:9d:fd:ec:10:24:98:0b:a5:c4:
         e4:4d:98:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:40:49 2025 by rpki-client