Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34302e302f32322d3234203d3e20323633303836.roa
File:                     3133382e39392e34302e302f32322d3234203d3e20323633303836.roa (raw, json)
Hash identifier:          f9KWgO26AF5ltgZSdWEsRCma0z5Mv6UBxqMGaZ8mfTY=
Subject key identifier:   DA:E0:6C:FD:53:2D:97:FA:9E:87:E3:D8:49:30:88:22:18:CA:64:FE
Certificate issuer:       /CN=99075A5B6164230A73705A6E393D26CF802B45B4
Certificate serial:       3638EC826989A74829C72C73F917C81A35DE0029
Authority key identifier: 99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34302e302f32322d3234203d3e20323633303836.roa
Signing time:             Thu 21 Aug 2025 18:43:41 +0000
ROA not before:           Thu 21 Aug 2025 18:38:41 +0000
ROA not after:            Thu 20 Aug 2026 18:43:41 +0000
asID:                     263086
IP address blocks:        138.99.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl
                          rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:38:ec:82:69:89:a7:48:29:c7:2c:73:f9:17:c8:1a:35:de:00:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99075A5B6164230A73705A6E393D26CF802B45B4
        Validity
            Not Before: Aug 21 18:38:41 2025 GMT
            Not After : Aug 20 18:43:41 2026 GMT
        Subject: CN=DAE06CFD532D97FA9E87E3D84930882218CA64FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:99:05:91:08:dd:45:ef:3a:80:cc:29:88:bb:
                    4a:4a:7b:12:02:66:19:08:e5:9b:78:2d:2c:c7:5a:
                    1e:de:5a:24:6a:aa:a8:89:ab:77:41:6a:6b:10:21:
                    89:b5:56:45:a5:bd:4b:f6:35:62:1b:8d:23:25:77:
                    58:f4:ce:52:76:66:e6:70:20:f7:b7:ae:9f:9b:5e:
                    b4:9b:b0:1f:00:1e:d0:7e:df:54:31:57:d0:23:41:
                    60:30:fc:f7:0e:8f:ec:99:44:82:09:26:fb:f1:9a:
                    40:c9:bc:b5:c1:2b:fe:e7:09:cf:6b:2e:0c:4d:42:
                    5b:b9:7e:f5:9d:87:2b:c7:d7:de:0f:4d:57:a0:32:
                    24:26:99:68:be:f4:8d:08:4e:d9:f5:69:72:70:e7:
                    c3:e1:93:7f:a0:42:30:99:82:ea:63:ac:43:f3:bf:
                    d2:23:ae:84:d5:47:27:cb:d5:13:96:8f:9f:9c:2e:
                    e8:7f:af:a8:bd:93:24:d1:f6:f8:d8:ff:53:11:2a:
                    9f:04:e5:95:14:57:b9:ed:f9:58:56:9b:ce:e4:e3:
                    cc:0d:81:57:3a:e0:0f:a5:7c:39:a9:c0:df:05:f2:
                    37:ce:b3:00:92:79:41:f9:1d:38:73:0b:b5:8b:31:
                    64:a6:b3:09:63:ed:dd:d6:1f:e9:d7:40:c1:0c:dc:
                    92:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E0:6C:FD:53:2D:97:FA:9E:87:E3:D8:49:30:88:22:18:CA:64:FE
            X509v3 Authority Key Identifier:
                keyid:99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34302e302f32322d3234203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:e6:5a:db:6c:92:1c:16:d5:06:f7:10:2e:0d:53:0c:06:69:
         08:52:9d:71:fd:9d:b5:67:fe:1c:42:18:6a:e9:be:be:e7:5e:
         ec:f4:cd:64:a0:3e:d5:e1:a7:9f:b2:2e:f4:37:85:86:68:40:
         09:36:e5:cb:6d:48:21:92:0a:66:0c:93:40:44:5c:4c:a1:7f:
         48:16:57:53:1a:86:4a:c5:d0:8e:21:7f:13:1f:6f:49:0d:37:
         59:0e:17:7e:ca:97:ab:7a:32:b0:cf:02:b6:e4:30:e9:93:24:
         3b:86:2e:0b:ca:24:43:cc:94:9e:0a:bc:37:9f:3d:ee:22:da:
         54:80:60:d8:17:6e:6f:6c:1b:52:f8:d7:1e:ab:0f:42:2a:34:
         67:20:2e:72:ee:a2:58:bf:c7:96:5d:f9:7b:72:eb:79:1a:a0:
         a3:7b:eb:11:d5:f9:92:37:05:42:03:74:1e:b2:51:55:22:00:
         34:14:28:15:a8:f8:b1:58:95:83:b2:e1:dc:67:a3:9a:e5:04:
         24:30:d8:30:10:a5:34:01:d7:6c:de:85:be:5a:ae:ef:12:e0:
         3d:63:d4:bd:32:51:5f:07:2a:ea:db:cc:5a:79:16:b5:4b:d8:
         35:f0:ca:1d:c5:5e:f8:99:73:df:7f:9e:aa:ad:34:cb:04:14:
         59:87:d2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:05:27 2025 by rpki-client