Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39382e302f32342d3234203d3e20323634313337.roa
File:                     3133382e39372e39382e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          B+FCJn4bAjn6vMakrBTebihcDhpRMZKxKquu1w8NMd8=
Subject key identifier:   F0:6B:2B:9B:23:E8:DB:7C:FA:C0:EE:43:6B:65:99:74:D9:AF:AB:94
Certificate issuer:       /CN=239C283AE95BF77707DED60A35EF02DFA2AE1930
Certificate serial:       6559848A2C55FC032E0A02E459D2F94A7EB9F757
Authority key identifier: 23:9C:28:3A:E9:5B:F7:77:07:DE:D6:0A:35:EF:02:DF:A2:AE:19:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/239C283AE95BF77707DED60A35EF02DFA2AE1930.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39382e302f32342d3234203d3e20323634313337.roa
Signing time:             Mon 08 Sep 2025 20:26:09 +0000
ROA not before:           Mon 08 Sep 2025 20:21:09 +0000
ROA not after:            Mon 07 Sep 2026 20:26:09 +0000
asID:                     264137
IP address blocks:        138.97.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/239C283AE95BF77707DED60A35EF02DFA2AE1930.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/239C283AE95BF77707DED60A35EF02DFA2AE1930.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/239C283AE95BF77707DED60A35EF02DFA2AE1930.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:59:84:8a:2c:55:fc:03:2e:0a:02:e4:59:d2:f9:4a:7e:b9:f7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239C283AE95BF77707DED60A35EF02DFA2AE1930
        Validity
            Not Before: Sep  8 20:21:09 2025 GMT
            Not After : Sep  7 20:26:09 2026 GMT
        Subject: CN=F06B2B9B23E8DB7CFAC0EE436B659974D9AFAB94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bc:65:60:67:6b:05:83:03:7b:d1:59:ec:4e:
                    70:5a:f5:9b:22:b4:8e:5a:24:74:dd:36:8c:9f:7a:
                    bd:9f:bd:a2:fe:54:a7:51:c0:f3:12:4e:92:5d:41:
                    87:4f:b9:b1:c3:0e:9c:b2:9c:68:b8:2e:c6:b0:42:
                    48:b1:81:5f:2c:c2:3f:9b:a9:b1:48:9a:32:ac:1a:
                    c7:61:8f:c5:9b:5b:b5:1b:86:2e:30:cb:d4:87:38:
                    b1:e4:b2:43:5d:c8:fb:54:96:b8:b2:35:28:bb:33:
                    11:34:ac:5e:31:f4:d4:0c:ce:8b:50:aa:47:26:fd:
                    91:d0:b0:4d:40:4e:60:b8:65:8c:70:bf:17:00:c3:
                    97:4d:57:68:42:0b:b7:da:01:ba:35:81:e5:56:79:
                    e8:7f:01:c8:b9:a0:a0:72:88:af:be:8b:c5:95:78:
                    cf:0b:01:95:02:69:71:c3:7c:a9:83:fc:da:31:d2:
                    81:a4:ff:1d:69:ad:86:5d:40:fa:73:8c:53:a0:0c:
                    f4:bb:2e:0a:dc:91:11:ff:ce:a1:ae:c5:76:60:2a:
                    7a:9b:d1:43:ca:9a:a6:f0:31:16:a2:3d:c0:34:94:
                    2c:c1:96:8f:1b:74:49:01:f5:66:bd:f5:f9:42:22:
                    97:2e:e0:df:1c:5b:96:5f:10:13:55:c3:5f:f9:a5:
                    62:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6B:2B:9B:23:E8:DB:7C:FA:C0:EE:43:6B:65:99:74:D9:AF:AB:94
            X509v3 Authority Key Identifier:
                keyid:23:9C:28:3A:E9:5B:F7:77:07:DE:D6:0A:35:EF:02:DF:A2:AE:19:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/239C283AE95BF77707DED60A35EF02DFA2AE1930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/239C283AE95BF77707DED60A35EF02DFA2AE1930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39382e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:73:b7:39:b6:47:6f:7f:28:65:e8:90:82:d8:a2:c0:03:10:
         84:a6:cb:ec:89:3b:15:9b:39:20:e5:99:00:02:3c:7d:6b:65:
         89:5c:39:a4:d7:f9:3f:5e:b5:7e:12:27:bc:d1:08:48:6b:3d:
         4c:c3:d0:a7:e4:b9:97:f9:81:51:07:b3:bc:25:4e:28:80:42:
         e0:51:e9:2a:e4:96:0b:cb:81:ef:77:71:7c:78:54:24:46:16:
         1d:20:8a:61:6e:82:89:63:86:99:d1:f2:a8:81:89:a4:75:9e:
         b0:7c:21:be:1e:ed:5e:1e:16:3d:02:3c:5c:41:f9:c8:24:39:
         69:ce:8a:74:48:d6:05:42:bc:67:5f:76:88:f4:eb:fb:5f:57:
         d0:f9:16:1f:78:e8:df:45:a3:8f:a2:d0:52:2a:aa:0f:c1:42:
         e1:14:8c:4c:a5:d9:1d:86:96:bb:90:cc:71:01:94:4d:76:59:
         7a:e4:5d:53:51:28:7d:a6:5d:cf:f6:ec:f8:b1:26:96:75:5a:
         48:9f:a0:65:c7:0c:1c:0d:7e:41:3a:ec:e5:6f:59:22:d7:c3:
         b8:d8:e0:0b:98:34:f4:0f:e9:3c:50:2e:fa:17:58:65:88:1b:
         5e:40:0b:85:92:7b:4b:97:de:74:66:e4:f3:d7:f2:b6:80:40:
         24:b8:4f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:58:08 2025 by rpki-client