Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/3133382e302e32342e302f32332d3233203d3e20323634353339.roa
File:                     3133382e302e32342e302f32332d3233203d3e20323634353339.roa (raw, json)
Hash identifier:          Dlr3dp2RpZY9Vl3uYeNI5Gx492eCzYr7f8fQzlgiP5Q=
Subject key identifier:   25:0E:5E:F2:8A:B3:76:2E:1D:FD:D1:65:76:24:93:39:38:F0:E0:AF
Certificate issuer:       /CN=08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4
Certificate serial:       10DE7C2D89BAB1A0C668820CB8AF89C5C77C247C
Authority key identifier: 08:B1:D7:2F:42:6C:63:FA:24:93:BC:63:B6:A7:4B:4F:4B:4E:F6:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/3133382e302e32342e302f32332d3233203d3e20323634353339.roa
Signing time:             Mon 01 Sep 2025 16:48:08 +0000
ROA not before:           Mon 01 Sep 2025 16:43:08 +0000
ROA not after:            Mon 31 Aug 2026 16:48:08 +0000
asID:                     264539
IP address blocks:        138.0.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.crl
                          rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 18:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:de:7c:2d:89:ba:b1:a0:c6:68:82:0c:b8:af:89:c5:c7:7c:24:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4
        Validity
            Not Before: Sep  1 16:43:08 2025 GMT
            Not After : Aug 31 16:48:08 2026 GMT
        Subject: CN=250E5EF28AB3762E1DFDD1657624933938F0E0AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b6:7f:a5:9c:2d:d5:3e:ef:67:56:6c:c8:31:
                    fb:4a:1f:8a:42:96:25:0f:2b:19:c4:46:06:e1:62:
                    84:d2:72:eb:80:c2:c6:23:27:5f:37:a5:2e:df:83:
                    0b:78:67:72:6f:ae:5f:be:79:d5:8b:d9:58:24:3b:
                    f0:6b:bd:4f:9d:ec:11:1e:85:e9:43:3f:fc:6d:87:
                    fd:bd:80:26:66:f2:10:ca:26:a6:24:b2:75:bc:c8:
                    58:58:65:17:25:ca:79:28:96:e1:d8:b1:9d:a3:3d:
                    1d:98:ed:05:19:b9:5f:5d:da:a2:74:7d:f3:27:39:
                    e3:29:1f:96:5a:9e:95:4b:7e:62:84:bf:dd:9a:a2:
                    df:95:d8:73:1d:5f:79:f7:58:cb:87:50:63:d1:d3:
                    f8:20:94:f9:89:d6:29:71:91:55:4b:ee:be:69:7d:
                    97:5b:78:29:ac:de:44:58:85:38:45:21:ec:3f:8d:
                    84:83:18:f4:8b:f3:52:88:b0:23:7f:b3:ef:43:e7:
                    f1:0f:f7:3e:40:3f:1a:a3:65:6a:70:0b:f9:26:bf:
                    a2:82:7a:3f:b3:13:85:ba:9f:9d:d9:a9:5b:2a:6e:
                    23:27:59:40:3d:9c:84:1d:e4:ba:be:ba:62:24:a0:
                    00:f3:5d:c3:d2:09:39:55:3f:71:70:e2:44:7a:3f:
                    1e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0E:5E:F2:8A:B3:76:2E:1D:FD:D1:65:76:24:93:39:38:F0:E0:AF
            X509v3 Authority Key Identifier:
                keyid:08:B1:D7:2F:42:6C:63:FA:24:93:BC:63:B6:A7:4B:4F:4B:4E:F6:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/3133382e302e32342e302f32332d3233203d3e20323634353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:3f:b0:c7:80:c7:98:5d:66:d4:dd:64:08:3b:31:99:0f:00:
         0d:99:26:03:58:7c:42:7e:ce:0f:fe:d6:0e:52:16:5b:0e:26:
         46:e5:d9:14:27:c7:04:e1:14:f3:e3:16:dc:ec:74:2b:a1:70:
         c5:51:a1:0c:3d:ce:f4:c1:6b:cb:1c:fc:da:d1:73:95:12:e1:
         70:06:4a:5c:62:21:df:b5:19:6a:8b:6d:72:e5:42:ff:fd:1a:
         a5:86:4f:ba:ba:cf:8f:ad:fe:71:b0:b5:af:97:a8:01:d1:2a:
         67:be:48:e1:9d:04:e5:99:8c:4c:fa:dc:17:c3:db:21:7b:22:
         41:fe:81:22:c8:e6:9f:34:f2:04:8e:40:30:04:7a:34:73:68:
         53:3d:72:53:1c:f2:55:ff:7e:ad:ad:46:a5:29:f6:fb:f0:d8:
         d8:cd:99:ae:08:7a:ca:6a:11:11:1f:f4:a2:ff:21:fe:7c:98:
         e2:40:42:c3:96:10:68:c0:8b:51:0a:47:df:e2:f4:93:56:f2:
         e8:d9:40:17:1a:2a:fc:b2:e5:f6:ae:49:ff:a6:1e:a9:87:09:
         1a:d8:65:04:3d:34:95:07:cb:86:26:c8:16:5b:e4:44:9d:67:
         a5:5c:b0:a5:00:84:42:f9:73:f2:3a:79:f5:01:06:7f:90:2f:
         e0:aa:7c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:35:08 2025 by rpki-client