Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2VSs2uMeaZWmuLkqzUHq6SdJCC3ZFqwDTWsHFYDT3rU/0/3133382e3132322e35362e302f32322d3332203d3e20323634333237.roa
File:                     3133382e3132322e35362e302f32322d3332203d3e20323634333237.roa (raw, json)
Hash identifier:          /5sTmh8CIrqdmn85Jx/rgCpOUpo+GadutfMVLl4jauk=
Subject key identifier:   C3:1A:77:32:ED:B0:CB:C8:C6:A7:5E:5A:BF:32:46:3E:4D:C2:D3:74
Certificate issuer:       /CN=9045801A4DC68DA953FC89CE34780D7EC29C95F7
Certificate serial:       02041EDBDBF2A258898E580C050F3CA85DF3523D
Authority key identifier: 90:45:80:1A:4D:C6:8D:A9:53:FC:89:CE:34:78:0D:7E:C2:9C:95:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9045801A4DC68DA953FC89CE34780D7EC29C95F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2VSs2uMeaZWmuLkqzUHq6SdJCC3ZFqwDTWsHFYDT3rU/0/3133382e3132322e35362e302f32322d3332203d3e20323634333237.roa
Signing time:             Thu 04 Sep 2025 20:27:07 +0000
ROA not before:           Thu 04 Sep 2025 20:22:07 +0000
ROA not after:            Thu 03 Sep 2026 20:27:07 +0000
asID:                     264327
IP address blocks:        138.122.56.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2VSs2uMeaZWmuLkqzUHq6SdJCC3ZFqwDTWsHFYDT3rU/0/9045801A4DC68DA953FC89CE34780D7EC29C95F7.crl
                          rsync://rpki-repo.registro.br/repo/D2VSs2uMeaZWmuLkqzUHq6SdJCC3ZFqwDTWsHFYDT3rU/0/9045801A4DC68DA953FC89CE34780D7EC29C95F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9045801A4DC68DA953FC89CE34780D7EC29C95F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 10:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:04:1e:db:db:f2:a2:58:89:8e:58:0c:05:0f:3c:a8:5d:f3:52:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9045801A4DC68DA953FC89CE34780D7EC29C95F7
        Validity
            Not Before: Sep  4 20:22:07 2025 GMT
            Not After : Sep  3 20:27:07 2026 GMT
        Subject: CN=C31A7732EDB0CBC8C6A75E5ABF32463E4DC2D374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d8:0c:c7:4f:21:c4:63:43:be:d7:83:bf:a5:
                    73:5d:5a:31:6b:9a:31:51:39:20:2f:68:04:d4:ee:
                    36:d5:38:f1:50:80:e8:94:59:8b:6b:14:39:b0:cb:
                    86:27:c3:eb:34:62:a7:a1:b2:74:f1:7e:0a:8f:70:
                    fe:2e:6f:2c:d1:d7:c4:2c:83:64:49:2a:a2:d2:be:
                    5f:28:4a:1f:35:e0:48:1e:29:13:b8:88:ee:ca:c1:
                    54:15:52:92:af:20:b4:92:1c:d2:12:49:73:58:8a:
                    4d:69:9a:46:53:94:f4:71:07:e3:b3:00:2a:48:a3:
                    e3:5f:4f:60:a7:d5:21:15:40:0e:01:a7:d7:96:a2:
                    2e:80:ae:46:04:43:7b:06:89:50:76:9b:25:39:ab:
                    5d:b9:88:62:42:a8:9c:34:f8:bc:0b:aa:6d:11:e8:
                    a7:c3:1a:be:2e:01:1a:4c:a0:24:f4:26:ae:71:fb:
                    36:96:90:19:06:60:fb:1e:c8:98:d9:80:5d:65:2f:
                    f9:4a:93:20:75:71:f9:a3:24:71:f2:0a:4a:fa:37:
                    5f:7d:66:ec:2e:6d:d9:04:73:d7:84:2f:c3:95:73:
                    e2:3e:fb:5b:5c:71:95:ad:fb:6f:53:e5:6b:81:2a:
                    f4:a7:9a:09:d2:35:21:12:cf:eb:d0:1b:ff:0f:0a:
                    15:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1A:77:32:ED:B0:CB:C8:C6:A7:5E:5A:BF:32:46:3E:4D:C2:D3:74
            X509v3 Authority Key Identifier:
                keyid:90:45:80:1A:4D:C6:8D:A9:53:FC:89:CE:34:78:0D:7E:C2:9C:95:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2VSs2uMeaZWmuLkqzUHq6SdJCC3ZFqwDTWsHFYDT3rU/0/9045801A4DC68DA953FC89CE34780D7EC29C95F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9045801A4DC68DA953FC89CE34780D7EC29C95F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2VSs2uMeaZWmuLkqzUHq6SdJCC3ZFqwDTWsHFYDT3rU/0/3133382e3132322e35362e302f32322d3332203d3e20323634333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:de:39:36:e0:ea:c4:3b:1f:e9:bc:03:de:e8:79:71:e2:5a:
         16:6b:c8:5a:b7:d9:cf:85:61:e2:03:7e:61:92:06:ee:34:b4:
         7e:5a:b9:59:9d:27:b5:a2:39:7e:89:ca:cd:0c:8a:af:4b:63:
         22:fc:8d:3c:24:b2:74:90:ca:a7:7f:24:84:07:4e:6a:a4:67:
         7f:09:22:ae:eb:1d:b5:aa:5d:5b:ca:45:d2:f7:d8:15:ec:6b:
         a9:05:07:34:98:14:71:77:08:94:b4:4f:a0:e3:45:76:13:dd:
         0d:38:1f:05:77:7f:bc:e0:9f:e6:bb:e2:83:6c:0b:41:7a:a2:
         bb:44:a1:27:52:b1:94:af:72:b1:07:26:b8:e6:75:1e:1b:27:
         4a:be:32:94:9a:3c:d1:4a:0f:f4:88:dc:cc:ac:89:fe:fa:9e:
         4c:de:2d:fe:31:a9:ee:19:1a:d8:f4:1f:c9:60:43:0c:8b:ec:
         7d:cc:87:84:ed:73:b2:30:14:e7:40:73:85:15:ad:0a:e3:8b:
         b3:01:a6:e2:e4:de:ed:03:a7:bd:14:54:25:c3:96:9a:22:c2:
         1d:08:62:d6:2d:15:90:17:fc:00:16:ca:fd:2b:08:33:fb:06:
         41:47:71:95:fc:fe:aa:25:c8:b2:ba:26:fd:8c:26:35:bf:a7:
         96:48:99:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:34:28 2025 by rpki-client