Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137352e302f32342d3234203d3e20323633393131.roa
File:                     3133382e3230342e3137352e302f32342d3234203d3e20323633393131.roa (raw, json)
Hash identifier:          eKGzHjUDwIyCxDwgizckM7LtsCfhTXnHMVS4guEhcv0=
Subject key identifier:   2E:88:0F:E2:E8:60:F9:D7:C5:C9:30:25:F5:99:DC:41:18:62:01:B7
Certificate issuer:       /CN=1804D2BCEBB56DD0A9EC9664C75921C60E3D9616
Certificate serial:       6B7866ADB69536EB78E30697996694B8D93F06AC
Authority key identifier: 18:04:D2:BC:EB:B5:6D:D0:A9:EC:96:64:C7:59:21:C6:0E:3D:96:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137352e302f32342d3234203d3e20323633393131.roa
Signing time:             Mon 15 Sep 2025 14:46:13 +0000
ROA not before:           Mon 15 Sep 2025 14:41:13 +0000
ROA not after:            Mon 14 Sep 2026 14:46:13 +0000
asID:                     263911
IP address blocks:        138.204.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.crl
                          rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 18:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:78:66:ad:b6:95:36:eb:78:e3:06:97:99:66:94:b8:d9:3f:06:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1804D2BCEBB56DD0A9EC9664C75921C60E3D9616
        Validity
            Not Before: Sep 15 14:41:13 2025 GMT
            Not After : Sep 14 14:46:13 2026 GMT
        Subject: CN=2E880FE2E860F9D7C5C93025F599DC41186201B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3e:bb:ba:a7:e1:85:34:0b:cd:d9:8f:b1:00:
                    79:aa:6c:c3:09:57:a0:d1:5f:30:2a:65:40:df:67:
                    78:48:f6:68:6f:55:a4:0b:a0:1a:ae:85:5b:c3:41:
                    17:0a:db:c5:b2:85:8b:31:89:ea:40:08:47:4d:9f:
                    ff:df:49:cb:e0:3f:57:26:42:75:ba:0d:6e:b3:f1:
                    a2:4c:22:03:8f:76:47:15:12:c0:39:c7:36:5b:58:
                    eb:82:51:19:6f:ed:37:5d:6b:f1:f7:a0:a3:8e:2f:
                    92:85:32:2c:26:71:55:e9:21:fb:7d:7f:28:1d:0e:
                    b8:64:84:99:4e:bb:00:0f:5a:1f:29:fa:3f:62:9e:
                    45:62:12:81:65:19:82:a4:84:f2:92:5e:30:6d:ef:
                    e7:54:f8:02:ff:8d:17:37:1b:ff:a0:e3:79:71:2e:
                    76:58:5d:e9:b9:19:7b:ce:7b:f5:ef:47:88:cf:80:
                    03:43:aa:23:38:cf:17:77:7f:01:91:e7:e6:7a:c4:
                    dd:0a:cb:46:17:6d:62:f7:c9:d6:99:c9:f0:29:51:
                    b1:d8:f7:60:2a:67:17:7e:53:38:38:39:db:d0:42:
                    93:8b:33:12:b6:ba:02:dc:d1:ed:7f:13:a6:34:91:
                    d2:0f:ee:fd:36:93:77:3e:5f:ea:4b:86:97:78:4e:
                    4f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:88:0F:E2:E8:60:F9:D7:C5:C9:30:25:F5:99:DC:41:18:62:01:B7
            X509v3 Authority Key Identifier:
                keyid:18:04:D2:BC:EB:B5:6D:D0:A9:EC:96:64:C7:59:21:C6:0E:3D:96:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137352e302f32342d3234203d3e20323633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:53:6d:02:cf:1f:0d:3c:46:54:cc:0e:4f:d8:ef:ad:e1:7a:
         2d:f2:30:2d:88:c9:c3:8d:9a:5c:e4:db:99:2e:18:1f:37:e3:
         42:fb:d5:29:24:71:6d:72:63:ee:bf:b9:a0:82:47:03:3c:b8:
         8f:56:f9:d7:2c:87:c9:5b:ab:dd:6f:46:1c:55:b1:41:0b:12:
         64:5c:8b:a9:54:a2:ef:f1:d6:73:ae:a0:66:8e:71:00:3d:40:
         a3:50:a9:f3:0c:4e:f6:b6:1f:5a:93:75:57:f5:fe:00:79:11:
         ea:eb:77:32:c5:5e:f6:bb:69:a6:a1:7f:d7:ee:d3:aa:e5:09:
         97:76:ed:a5:24:bc:e9:f3:9c:58:f3:a0:b4:89:a6:99:09:a7:
         c1:8b:76:24:38:5b:4a:eb:3a:10:a1:91:88:51:f0:62:a9:be:
         92:3b:8b:6c:e2:4f:cf:3e:f5:7b:5b:59:59:e0:5d:f9:da:6d:
         7e:bd:bb:b8:e4:da:41:ec:07:0d:57:67:22:6d:31:f4:d9:03:
         4b:d2:3a:1c:68:5a:49:8a:04:57:7c:6f:0e:c5:e7:b5:10:23:
         8e:4f:5f:16:17:36:d4:cb:f9:4e:f9:91:5d:ee:aa:8e:cc:fb:
         a9:4b:bb:31:53:20:91:7b:4b:d3:2f:c6:4e:57:f7:c0:cc:d9:
         36:4a:54:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:40:28 2025 by rpki-client