Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa
File:                     3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa (raw, json)
Hash identifier:          qMIhhqokI9UZbnDBW/n6UnYcso6t1jqDn1aPpoB7gCY=
Subject key identifier:   B8:5C:AC:C4:37:3A:73:10:E4:13:AE:B5:5F:EF:C8:43:E6:4E:FF:1D
Certificate issuer:       /CN=1804D2BCEBB56DD0A9EC9664C75921C60E3D9616
Certificate serial:       6B38471351F327753F76FF4C9A3C36F580AA6DF4
Authority key identifier: 18:04:D2:BC:EB:B5:6D:D0:A9:EC:96:64:C7:59:21:C6:0E:3D:96:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa
Signing time:             Mon 15 Sep 2025 14:46:12 +0000
ROA not before:           Mon 15 Sep 2025 14:41:12 +0000
ROA not after:            Mon 14 Sep 2026 14:46:12 +0000
asID:                     263911
IP address blocks:        138.204.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.crl
                          rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 18:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:38:47:13:51:f3:27:75:3f:76:ff:4c:9a:3c:36:f5:80:aa:6d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1804D2BCEBB56DD0A9EC9664C75921C60E3D9616
        Validity
            Not Before: Sep 15 14:41:12 2025 GMT
            Not After : Sep 14 14:46:12 2026 GMT
        Subject: CN=B85CACC4373A7310E413AEB55FEFC843E64EFF1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:ab:3c:29:21:0e:c9:5d:b8:56:3f:40:2e:
                    7d:c1:b6:f0:54:05:0b:08:3e:34:76:93:1c:7f:44:
                    6e:ed:13:ff:ee:f2:77:53:8c:dc:fc:b3:10:85:08:
                    6d:30:e7:81:ae:49:e1:7a:f5:73:a6:cc:cc:86:4c:
                    ee:d6:07:fa:8b:c5:8d:cd:cf:0f:b7:72:9f:e6:0e:
                    fd:db:ab:2f:30:93:47:51:35:9a:71:0a:66:28:92:
                    cb:c6:e9:a7:1d:d0:15:69:4e:fa:ff:7e:ad:15:40:
                    86:4f:57:6a:60:21:ad:44:44:b7:b2:1f:2d:e7:d8:
                    d2:00:12:16:ef:ad:f2:29:a8:b1:fe:f9:05:67:12:
                    9d:ec:11:10:d8:05:d0:9d:a4:f0:b8:47:3c:73:01:
                    d1:27:26:02:f6:5c:e3:7e:bf:e7:5c:45:f9:c5:4b:
                    0c:61:87:48:a2:75:be:b1:e5:56:70:a0:c1:0d:da:
                    5d:b6:78:9b:94:76:b6:c7:32:e5:f3:25:6f:9d:23:
                    32:cb:42:c9:3d:08:a0:b8:32:54:54:e6:d3:b5:4f:
                    b1:36:f7:ad:bd:c7:cf:1b:c3:98:21:5b:20:96:8f:
                    7f:ef:83:ed:4d:9e:94:02:66:c9:a2:3b:49:35:0e:
                    e0:bf:e3:54:00:b4:1b:fa:52:63:fe:53:82:40:21:
                    56:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5C:AC:C4:37:3A:73:10:E4:13:AE:B5:5F:EF:C8:43:E6:4E:FF:1D
            X509v3 Authority Key Identifier:
                keyid:18:04:D2:BC:EB:B5:6D:D0:A9:EC:96:64:C7:59:21:C6:0E:3D:96:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:45:a1:0d:f8:06:9d:7c:65:40:6f:7a:4b:68:91:19:fd:cd:
         a2:17:3d:36:40:13:98:34:5c:64:90:a3:87:68:a4:01:d0:9d:
         0e:3c:bf:d8:15:e2:71:99:3d:84:fe:c6:d0:a5:79:7a:18:a1:
         a8:9a:c5:a5:2d:bd:56:11:cc:bc:ce:bd:af:8e:e6:21:82:10:
         14:28:e9:5c:82:f7:1c:87:bc:f6:40:c3:a9:e2:75:7c:88:96:
         d8:fd:83:75:63:4c:23:e0:97:34:5a:d3:d0:67:89:8c:69:2a:
         3f:bc:dc:e1:98:13:12:5b:94:86:25:46:22:e5:ca:4b:48:29:
         29:0c:8c:ac:f7:8f:49:27:70:79:df:9c:70:f4:39:50:2f:10:
         67:70:a5:5b:ce:63:f2:e5:f4:04:82:14:31:23:5f:d6:26:d9:
         1a:6b:f0:ab:67:2d:6f:3f:ed:4e:af:5a:93:84:d4:90:3b:75:
         03:a7:39:79:5d:a1:1e:d6:c9:31:7a:d2:67:53:1b:48:53:82:
         a2:7e:d3:90:f7:d7:c6:21:5d:d9:6e:10:75:8d:8c:03:38:a8:
         f0:f9:00:2d:ba:04:00:5d:81:f6:af:0a:a7:8c:1e:c9:33:0f:
         33:a6:c7:f5:1f:2d:74:09:95:6b:02:87:7a:14:fc:9c:2b:73:
         d8:47:6b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:41:49 2025 by rpki-client