Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32322d3332203d3e203238333630.roa
File:                     3133382e39342e382e302f32322d3332203d3e203238333630.roa (raw, json)
Hash identifier:          qVFu16WURJiIjC5/CAUBfP8XkesupOfzx1EfYvhtmoU=
Subject key identifier:   3A:A8:3A:2E:F9:AA:09:9E:3B:D4:80:92:88:BB:BA:48:6C:C5:DF:62
Certificate issuer:       /CN=00AA5B8577C0697C844375D4EF4400A37FA7FA18
Certificate serial:       5F595A70327E8028B8984A1C4727A15D58AF2CE2
Authority key identifier: 00:AA:5B:85:77:C0:69:7C:84:43:75:D4:EF:44:00:A3:7F:A7:FA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32322d3332203d3e203238333630.roa
Signing time:             Sat 13 Sep 2025 22:33:22 +0000
ROA not before:           Sat 13 Sep 2025 22:28:22 +0000
ROA not after:            Sat 12 Sep 2026 22:33:22 +0000
asID:                     28360
IP address blocks:        138.94.8.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.crl
                          rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 10:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:59:5a:70:32:7e:80:28:b8:98:4a:1c:47:27:a1:5d:58:af:2c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00AA5B8577C0697C844375D4EF4400A37FA7FA18
        Validity
            Not Before: Sep 13 22:28:22 2025 GMT
            Not After : Sep 12 22:33:22 2026 GMT
        Subject: CN=3AA83A2EF9AA099E3BD4809288BBBA486CC5DF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ed:29:ae:5c:e8:72:4e:cd:a8:1f:28:a9:0d:
                    f0:c6:2d:aa:26:aa:a6:61:ba:29:30:47:ad:18:a1:
                    9e:88:17:21:30:66:2e:4e:30:e4:b1:4c:95:c1:5b:
                    22:04:c4:f8:27:4e:ea:2b:c5:81:7b:e9:d8:3b:0c:
                    ef:2e:33:50:45:f1:11:00:cd:be:c5:84:e7:3c:ed:
                    a1:ee:09:ff:bd:22:dd:f4:7a:b8:a2:6d:ff:01:11:
                    6b:70:1e:23:50:1f:ef:4c:1c:aa:06:57:d8:de:2d:
                    f2:2f:14:5d:6c:13:42:0a:a4:39:f5:73:0f:b0:88:
                    90:3b:35:b4:cc:20:98:80:1e:a9:34:19:da:f3:4b:
                    56:97:9c:a0:38:59:7c:46:d3:bb:4c:f4:79:ef:01:
                    03:ac:f9:36:06:0f:fe:59:73:98:55:af:bc:cb:fc:
                    ff:94:b8:ff:ef:dd:01:8f:c2:3c:c9:17:35:01:f0:
                    d3:a2:37:0e:e7:45:ec:b4:cb:bc:3d:62:39:f8:e6:
                    9f:5e:c8:77:fe:f4:84:7f:01:47:80:88:46:20:8a:
                    fc:40:2b:66:01:08:a0:ea:3f:40:bf:3e:7e:6b:d4:
                    cf:dc:b4:90:da:a6:f6:95:1d:8b:11:43:21:4f:d5:
                    86:d8:1f:8e:0b:98:e9:1b:79:7c:75:d9:71:93:c1:
                    01:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A8:3A:2E:F9:AA:09:9E:3B:D4:80:92:88:BB:BA:48:6C:C5:DF:62
            X509v3 Authority Key Identifier:
                keyid:00:AA:5B:85:77:C0:69:7C:84:43:75:D4:EF:44:00:A3:7F:A7:FA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32322d3332203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:ec:6a:b9:4e:47:a2:63:23:57:0a:dc:b2:96:ca:8b:a2:8a:
         64:8e:ba:18:26:a0:73:a2:64:95:b9:67:7a:fe:aa:0b:25:b2:
         1e:c2:b8:e0:f2:b2:00:7f:56:51:f0:3c:2d:7e:07:ee:ad:03:
         9b:76:70:bd:ad:19:93:43:93:01:84:67:87:84:a4:d8:81:69:
         fa:ca:9f:18:9e:55:81:1f:8e:3a:d0:dc:53:3e:b4:fe:88:40:
         73:6d:6e:a6:47:c3:10:38:90:6a:1c:4c:14:25:cd:51:52:da:
         14:06:58:9b:92:60:29:fa:2f:5a:56:ee:a9:35:04:e0:06:c2:
         d6:ce:89:6e:a8:9e:8a:bc:23:3f:96:96:76:56:62:78:30:9b:
         43:80:2f:40:db:5c:13:6e:4a:1a:6a:3b:3c:63:d0:67:8a:71:
         25:5d:19:15:f0:39:da:bc:ac:bd:6d:48:77:c1:da:9c:33:ce:
         bc:8c:45:9d:28:ef:04:a5:9e:33:74:de:9e:0a:84:b3:23:6e:
         14:8b:15:00:af:78:54:d4:a3:d4:60:a1:88:7f:1f:75:f1:55:
         2f:e5:b5:e2:c3:d7:50:5c:b5:42:ab:73:42:7f:7f:d9:db:64:
         0d:66:ce:6b:bb:f6:ca:9c:3e:ae:7e:80:ab:1b:a6:c0:4c:f9:
         14:cf:2d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:59:59 2025 by rpki-client