Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa
File:                     3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa (raw, json)
Hash identifier:          hzzwHcjwkFpmLKu3Se6PKjpJb7Ge0rgRZ5sX48nN7Lg=
Subject key identifier:   7A:50:C9:93:9C:CE:C4:77:D9:3A:0C:C2:E2:A4:60:4C:B7:AC:D3:43
Certificate issuer:       /CN=1804D2BCEBB56DD0A9EC9664C75921C60E3D9616
Certificate serial:       544B75FBC36811DDFC4D7DB29DA841C09F8FA2AA
Authority key identifier: 18:04:D2:BC:EB:B5:6D:D0:A9:EC:96:64:C7:59:21:C6:0E:3D:96:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa
Signing time:             Mon 15 Sep 2025 14:46:14 +0000
ROA not before:           Mon 15 Sep 2025 14:41:14 +0000
ROA not after:            Mon 14 Sep 2026 14:46:14 +0000
asID:                     263911
IP address blocks:        138.204.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.crl
                          rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 18:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4b:75:fb:c3:68:11:dd:fc:4d:7d:b2:9d:a8:41:c0:9f:8f:a2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1804D2BCEBB56DD0A9EC9664C75921C60E3D9616
        Validity
            Not Before: Sep 15 14:41:14 2025 GMT
            Not After : Sep 14 14:46:14 2026 GMT
        Subject: CN=7A50C9939CCEC477D93A0CC2E2A4604CB7ACD343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4a:51:03:7d:4f:b5:fc:52:96:06:05:ed:09:
                    73:9c:c0:45:16:35:68:27:ce:a4:f5:5c:c5:3e:3f:
                    d8:01:a3:b1:56:e7:89:04:ab:9d:bb:fe:d8:d2:fd:
                    be:2d:15:7a:17:2e:fc:d5:41:25:31:3d:65:6c:61:
                    e8:2c:6b:0e:0d:be:8c:bb:84:77:a0:4c:8a:18:f5:
                    db:41:08:c7:33:ba:8f:8e:93:23:ef:8b:5e:f6:a4:
                    c9:2c:2d:e4:4e:0c:6d:e8:40:ae:f1:46:2d:df:1e:
                    8d:93:14:79:a4:5b:f2:0f:0f:9c:f7:3d:76:80:7b:
                    d4:3c:d7:db:18:ca:dd:bd:04:2a:67:a0:41:f6:52:
                    3b:e4:43:25:e3:8d:29:3d:3f:57:56:3d:35:15:ae:
                    0f:1e:79:3c:b4:eb:5e:33:42:80:bc:f6:3a:67:6c:
                    ba:b3:3b:bd:78:47:c9:28:9e:92:b5:24:12:c4:36:
                    37:c9:61:4b:3d:08:17:9f:98:45:d7:3c:56:b5:28:
                    33:31:88:77:53:3d:92:b5:b2:e1:cb:1a:7a:a9:96:
                    4f:f7:d2:75:24:18:6e:84:d7:8a:3d:22:4d:67:09:
                    85:5e:83:56:49:1e:bb:64:48:80:cb:de:27:0f:6d:
                    76:64:bf:ef:eb:ec:e0:ea:e4:ee:1c:d6:91:5c:bf:
                    dc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:50:C9:93:9C:CE:C4:77:D9:3A:0C:C2:E2:A4:60:4C:B7:AC:D3:43
            X509v3 Authority Key Identifier:
                keyid:18:04:D2:BC:EB:B5:6D:D0:A9:EC:96:64:C7:59:21:C6:0E:3D:96:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:5e:75:5e:97:ca:c4:e2:ad:80:3a:b2:25:f4:55:3b:cf:3a:
         c1:44:b6:06:ae:30:84:a8:03:1d:f1:fa:25:30:43:28:9d:77:
         a8:d6:f2:cf:d2:9e:87:ab:42:2b:9d:c0:1e:c0:cf:c9:77:6a:
         8f:e2:30:2e:f3:31:0f:4e:1a:09:a4:90:be:ad:98:4c:e1:73:
         5a:75:24:fc:76:4a:d5:58:db:ce:83:72:b0:44:dc:3d:d3:23:
         b4:f1:6c:e9:e6:f2:40:3c:ab:c2:1d:f8:19:c2:0b:5c:de:1a:
         2f:4d:ba:09:b0:14:15:14:a1:9b:b0:fc:74:a6:24:31:cc:a2:
         7c:42:36:0d:b3:f7:82:e5:26:6f:fa:22:d4:0d:62:9a:04:c8:
         ea:da:f0:4c:e5:26:7d:08:df:35:96:e3:e4:49:f9:df:4c:5c:
         8b:99:a9:b4:cc:10:9a:4f:84:29:6e:e9:55:d0:84:95:5c:6a:
         e0:be:e3:f0:b4:4c:a0:2f:1f:87:b7:c4:9b:dd:cb:b5:c0:98:
         a7:54:1c:70:ce:08:3e:f5:ab:c8:b7:3b:c6:28:f8:7a:df:54:
         21:89:ee:2e:08:ec:7b:9d:e5:fd:20:79:b1:82:f6:9c:83:7f:
         fd:59:02:33:0d:bf:de:a7:a4:c5:1a:b6:57:a5:e5:64:5c:a7:
         16:36:93:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:37:38 2025 by rpki-client