Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3133382e3231392e3134392e302f32342d3234203d3e20323632383137.roa
File:                     3133382e3231392e3134392e302f32342d3234203d3e20323632383137.roa (raw, json)
Hash identifier:          32oOPHsXT0FuB0muz/g4zusOH5Zvk4UD7nD4nxKJAOQ=
Subject key identifier:   8A:85:32:7D:F9:C4:EC:EF:4C:3D:CD:4A:76:17:EA:2B:42:41:30:1C
Certificate issuer:       /CN=D65657C29D82DD94BF5CCD512A0A176A5F35259F
Certificate serial:       75721537A67222E8FD64D41E10AFA799C4C72532
Authority key identifier: D6:56:57:C2:9D:82:DD:94:BF:5C:CD:51:2A:0A:17:6A:5F:35:25:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D65657C29D82DD94BF5CCD512A0A176A5F35259F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3133382e3231392e3134392e302f32342d3234203d3e20323632383137.roa
Signing time:             Fri 03 Oct 2025 13:25:48 +0000
ROA not before:           Fri 03 Oct 2025 13:20:48 +0000
ROA not after:            Fri 02 Oct 2026 13:25:48 +0000
asID:                     262817
IP address blocks:        138.219.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/D65657C29D82DD94BF5CCD512A0A176A5F35259F.crl
                          rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/D65657C29D82DD94BF5CCD512A0A176A5F35259F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D65657C29D82DD94BF5CCD512A0A176A5F35259F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:72:15:37:a6:72:22:e8:fd:64:d4:1e:10:af:a7:99:c4:c7:25:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D65657C29D82DD94BF5CCD512A0A176A5F35259F
        Validity
            Not Before: Oct  3 13:20:48 2025 GMT
            Not After : Oct  2 13:25:48 2026 GMT
        Subject: CN=8A85327DF9C4ECEF4C3DCD4A7617EA2B4241301C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5d:06:8d:cb:bf:bc:a1:e6:87:b9:c7:75:d0:
                    5a:21:b5:08:95:57:ad:0e:f5:05:dd:b0:5b:08:ce:
                    b5:c9:ce:24:0d:55:68:d8:93:c6:a9:5e:08:7f:f9:
                    63:1c:1e:95:3d:73:fa:7d:5b:9d:2f:07:07:fa:ea:
                    7e:75:8c:10:fa:13:ca:d7:34:13:63:9c:ec:7e:48:
                    4c:6f:f5:94:74:e5:4f:1d:f5:6e:25:98:44:a4:4f:
                    37:10:01:b1:b7:42:8d:a3:8e:56:51:bf:b4:4f:eb:
                    08:5c:7c:85:ce:98:66:4c:15:6d:a9:c9:3d:c1:d7:
                    1f:1d:42:a6:bc:52:25:d6:c4:5d:d4:d6:d7:84:0d:
                    ae:ed:c7:de:49:7a:df:d6:cc:af:af:76:76:0d:11:
                    c8:cd:88:30:ae:f7:14:83:c6:88:9a:c1:4b:3f:2c:
                    96:c4:b2:71:01:87:45:de:f2:2d:45:a5:55:7f:82:
                    83:f9:ee:95:04:5d:93:fc:9b:49:5d:6d:c4:a7:a1:
                    66:73:d4:8e:ef:52:70:4e:30:d7:96:38:8a:02:5c:
                    58:dc:e3:a2:41:26:cc:bf:2f:d3:a2:cc:22:db:e9:
                    4a:ff:a9:a1:13:b8:de:af:0d:c7:02:9d:15:dd:6a:
                    02:bb:e9:a2:a1:12:32:0b:e5:9d:27:f3:ac:54:8e:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:85:32:7D:F9:C4:EC:EF:4C:3D:CD:4A:76:17:EA:2B:42:41:30:1C
            X509v3 Authority Key Identifier:
                keyid:D6:56:57:C2:9D:82:DD:94:BF:5C:CD:51:2A:0A:17:6A:5F:35:25:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/D65657C29D82DD94BF5CCD512A0A176A5F35259F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D65657C29D82DD94BF5CCD512A0A176A5F35259F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3133382e3231392e3134392e302f32342d3234203d3e20323632383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:72:7c:c7:ed:0e:c0:d0:f6:cf:47:96:5b:b5:82:08:3a:45:
         01:51:4a:03:99:a4:f2:b5:ce:b4:00:f6:af:76:2a:f8:24:be:
         74:bd:f6:d0:98:70:46:4e:1b:b9:0e:0a:81:4f:85:8a:84:70:
         8b:76:53:fc:dc:0c:01:88:9f:0d:34:68:69:27:d4:33:0b:e6:
         ea:6a:d4:c5:9c:21:30:26:67:aa:9d:7c:0f:74:e2:e4:ce:74:
         94:bb:73:43:55:ed:f8:de:27:51:6e:3b:22:aa:79:62:33:36:
         45:fa:4f:e0:17:63:4c:2b:0e:1d:85:4e:a2:73:f8:d7:c4:46:
         8a:f5:72:d7:2d:aa:ad:37:e2:ba:01:71:d6:51:e1:bc:31:86:
         cc:bf:76:76:44:22:05:46:d1:2c:4d:34:50:2a:f6:8c:6a:5f:
         53:ec:83:06:ff:5d:d2:44:90:08:44:53:14:1a:95:46:9b:e9:
         74:92:1e:d2:0f:ac:34:a3:9f:9d:b9:41:8d:f4:bd:14:0f:a4:
         7d:0b:31:57:41:85:c3:f0:fb:b1:5f:48:91:5c:1d:a3:6f:c1:
         41:e0:5f:f8:b7:5a:2a:0d:46:c9:36:73:49:14:cb:c4:86:b7:
         d0:10:9a:82:95:44:aa:a2:02:aa:9f:27:cc:1d:3d:ce:c5:3d:
         4a:79:2f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:36:06 2025 by rpki-client