Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/3133382e302e32362e302f32332d3233203d3e20323634353339.roa
File:                     3133382e302e32362e302f32332d3233203d3e20323634353339.roa (raw, json)
Hash identifier:          n7VUHQcNOmvpKkdOGe1gXA4rK9P7yhRv4Le5yIF9UPk=
Subject key identifier:   6C:C1:4F:8C:14:CA:C8:EE:24:6F:32:6B:47:01:7A:AE:0D:C1:AB:EB
Certificate issuer:       /CN=08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4
Certificate serial:       58E7CCF68CB0949AA05B1250F6D4721F37C84014
Authority key identifier: 08:B1:D7:2F:42:6C:63:FA:24:93:BC:63:B6:A7:4B:4F:4B:4E:F6:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/3133382e302e32362e302f32332d3233203d3e20323634353339.roa
Signing time:             Mon 01 Sep 2025 16:48:08 +0000
ROA not before:           Mon 01 Sep 2025 16:43:08 +0000
ROA not after:            Mon 31 Aug 2026 16:48:08 +0000
asID:                     264539
IP address blocks:        138.0.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.crl
                          rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 18:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e7:cc:f6:8c:b0:94:9a:a0:5b:12:50:f6:d4:72:1f:37:c8:40:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4
        Validity
            Not Before: Sep  1 16:43:08 2025 GMT
            Not After : Aug 31 16:48:08 2026 GMT
        Subject: CN=6CC14F8C14CAC8EE246F326B47017AAE0DC1ABEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:20:bd:d6:60:bc:9e:04:c3:c8:dc:1f:a6:
                    63:26:dd:64:79:f6:b2:08:10:f3:e8:3c:e2:13:b7:
                    ee:65:41:22:69:6a:03:7c:89:51:34:90:ef:c9:9b:
                    ac:3f:5e:9d:2c:b9:48:e5:36:47:cb:12:e3:f7:66:
                    85:88:bb:70:82:fe:6a:7d:7c:cf:1c:3a:6c:57:15:
                    65:8e:7e:ce:71:6d:4a:14:4c:ad:db:fb:3e:02:07:
                    c3:0e:20:47:b3:9e:49:41:02:04:e9:42:5d:5f:e5:
                    19:27:9c:54:3d:62:af:47:c7:d4:9f:86:d3:91:f4:
                    1c:f5:83:c2:22:47:2c:36:1a:ed:a4:f1:c7:81:08:
                    05:52:d6:cf:c0:27:19:36:18:c5:8c:97:af:ba:73:
                    aa:01:f8:4d:95:66:25:57:ca:5f:0e:b1:d0:e4:ff:
                    f0:6d:0d:6d:ac:6f:45:ec:ca:e2:b6:ef:29:2f:2b:
                    e0:2f:bb:4f:41:53:bb:07:1f:0e:aa:59:fd:11:24:
                    70:6a:d2:e2:63:a4:83:05:60:43:73:1a:7b:c6:9e:
                    a9:9e:13:4a:5d:de:bc:62:8c:6b:30:60:70:9a:c9:
                    59:00:c0:b8:14:cf:4f:60:66:e9:f3:40:21:97:34:
                    78:e5:c9:08:19:5d:6d:60:7f:b4:34:2f:f2:e4:60:
                    8c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C1:4F:8C:14:CA:C8:EE:24:6F:32:6B:47:01:7A:AE:0D:C1:AB:EB
            X509v3 Authority Key Identifier:
                keyid:08:B1:D7:2F:42:6C:63:FA:24:93:BC:63:B6:A7:4B:4F:4B:4E:F6:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/3133382e302e32362e302f32332d3233203d3e20323634353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:ab:d0:5b:26:c9:16:78:c8:b1:b4:1e:c9:1c:46:1b:a0:b9:
         90:a4:d4:e3:86:99:7f:0e:d3:ad:18:58:55:cd:20:c0:a8:46:
         38:68:d8:ec:cf:9b:02:44:f4:20:39:f5:da:04:9b:65:46:24:
         39:4d:53:33:1f:64:5a:d8:99:5a:ed:1c:cc:e9:d7:ef:c3:96:
         80:58:42:04:fa:f7:4f:10:4f:3d:09:1a:95:99:b9:7d:09:48:
         8a:4a:53:f6:56:bd:ed:31:f4:7e:00:21:63:d3:fa:0c:09:e9:
         55:2c:02:9b:f8:ae:27:58:d7:7d:60:d8:77:b0:5f:70:2d:11:
         5e:0e:5f:7a:67:1e:24:56:d9:de:2b:b7:2f:30:99:e9:1a:a6:
         ee:a3:f4:56:e5:9a:c2:7d:21:c3:35:6e:dc:63:7a:76:6b:7a:
         74:a0:29:46:d0:32:6d:9d:36:dd:52:77:61:10:d5:26:bb:88:
         2f:bd:e4:7a:52:ac:27:7e:bc:40:09:9e:dd:da:a7:68:82:ee:
         89:b8:6c:73:30:d9:b4:21:7e:fa:bb:8c:c9:73:3e:40:17:80:
         bd:66:62:84:f1:4e:76:91:05:78:c9:29:7d:97:c8:f7:6f:44:
         7b:b3:07:9b:03:ea:a5:23:5d:a2:37:d9:8f:67:2b:14:41:3e:
         28:15:97:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:35:08 2025 by rpki-client