Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232382e302f32342d3234203d3e20323633393935.roa
File:                     3133382e3235352e3232382e302f32342d3234203d3e20323633393935.roa (raw, json)
Hash identifier:          FaFXr1rwB5AC1MqddXh9lljyBWnl3t2y6/lFX3oJ/uc=
Subject key identifier:   3C:89:F3:C6:AD:0E:F4:65:73:EA:FE:77:73:42:CB:2D:3B:45:F8:BB
Certificate issuer:       /CN=98408164D264D668D190CF3DE6A09CDF1BD9915D
Certificate serial:       139F9DCFE1F14D49A043DD9A0DEC7E3F2CE1F9B3
Authority key identifier: 98:40:81:64:D2:64:D6:68:D1:90:CF:3D:E6:A0:9C:DF:1B:D9:91:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98408164D264D668D190CF3DE6A09CDF1BD9915D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232382e302f32342d3234203d3e20323633393935.roa
Signing time:             Tue 28 Oct 2025 19:35:31 +0000
ROA not before:           Tue 28 Oct 2025 19:30:31 +0000
ROA not after:            Tue 27 Oct 2026 19:35:31 +0000
asID:                     263995
IP address blocks:        138.255.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/98408164D264D668D190CF3DE6A09CDF1BD9915D.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/98408164D264D668D190CF3DE6A09CDF1BD9915D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98408164D264D668D190CF3DE6A09CDF1BD9915D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9f:9d:cf:e1:f1:4d:49:a0:43:dd:9a:0d:ec:7e:3f:2c:e1:f9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98408164D264D668D190CF3DE6A09CDF1BD9915D
        Validity
            Not Before: Oct 28 19:30:31 2025 GMT
            Not After : Oct 27 19:35:31 2026 GMT
        Subject: CN=3C89F3C6AD0EF46573EAFE777342CB2D3B45F8BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:10:96:d3:c8:23:b2:71:d2:4e:bb:d6:e1:
                    8a:20:39:7f:70:ab:91:d8:2d:22:3c:6c:75:a5:7a:
                    40:b3:a3:96:8f:f8:70:aa:a2:43:00:0a:9e:03:f2:
                    d5:d1:0f:2a:c3:6d:ad:ba:68:60:75:87:a3:ce:34:
                    77:41:90:8b:75:11:0e:7f:3e:a1:ef:80:10:95:3a:
                    25:e3:03:eb:af:15:24:2b:23:39:22:b9:f6:b8:77:
                    80:f2:86:5e:39:a7:2b:41:89:15:9a:ee:17:c8:36:
                    80:68:7f:c9:c6:6e:f3:5f:8a:a2:2c:32:f1:3a:0f:
                    9e:ee:6a:5f:dc:45:79:bb:4e:ac:d1:5a:76:61:35:
                    c4:4a:9b:40:e4:a1:e1:fd:dd:ec:24:17:c2:37:50:
                    b2:9d:c4:0b:f1:3f:2f:e4:72:14:66:13:c7:f0:b5:
                    c2:08:b4:de:49:ea:de:8a:92:3c:38:73:7f:08:6c:
                    4e:43:e7:7a:67:2d:62:29:59:4b:99:a2:a9:9b:ee:
                    a3:8e:c1:6f:80:3f:b7:93:87:e7:35:37:f5:ff:f0:
                    46:20:66:b9:8e:3d:98:b2:dd:d3:6c:68:c5:af:54:
                    99:1f:b3:38:6a:84:6f:fc:2d:36:0f:a8:3e:8c:ca:
                    c6:73:11:06:b8:ea:3b:28:fa:97:70:77:c9:ba:51:
                    7b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:89:F3:C6:AD:0E:F4:65:73:EA:FE:77:73:42:CB:2D:3B:45:F8:BB
            X509v3 Authority Key Identifier:
                keyid:98:40:81:64:D2:64:D6:68:D1:90:CF:3D:E6:A0:9C:DF:1B:D9:91:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/98408164D264D668D190CF3DE6A09CDF1BD9915D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98408164D264D668D190CF3DE6A09CDF1BD9915D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232382e302f32342d3234203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:14:8f:a3:2f:43:48:1e:ec:69:a5:dd:ab:46:e7:b5:fc:b8:
         03:d7:93:af:be:1a:fa:c5:f7:c9:81:a0:e5:c6:d9:c6:e1:90:
         8f:1d:0e:45:7c:43:51:c7:1e:97:cf:b0:60:a8:18:32:77:25:
         36:ae:48:a8:40:4b:8a:3f:c8:45:0e:4c:ec:61:f7:be:3e:b0:
         a6:02:06:dd:01:19:ff:31:3a:f4:4f:01:ea:f0:8f:60:3c:3e:
         2b:50:e7:11:ab:23:5c:79:d5:31:26:b4:05:b2:4e:13:b5:c9:
         58:c4:d7:cc:db:22:be:37:de:13:f5:2e:9e:71:4c:58:e9:17:
         1b:80:43:da:3b:06:f7:d8:1c:bc:15:71:cc:b3:30:80:86:d9:
         d5:d3:be:ec:97:b6:14:40:65:ed:c9:67:d6:65:f5:16:6b:27:
         61:33:46:6b:bd:53:bd:44:74:6c:df:ea:7b:5d:e8:4b:43:39:
         9f:d8:98:d3:91:6d:b6:61:cb:26:e1:4a:cb:a8:3e:73:5f:b2:
         e3:f5:3c:da:46:1f:a5:75:e5:74:5e:21:f4:88:35:82:45:68:
         75:2f:32:73:d6:5b:11:6f:36:64:5d:72:f2:07:5f:ce:a1:2f:
         33:5c:aa:79:39:d3:ef:06:cf:95:ff:63:62:7f:5f:fe:4c:88:
         69:38:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:30:17 2025 by rpki-client