Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138352e302f32342d3234203d3e20323633393037.roa
File:                     3133382e3230342e3138352e302f32342d3234203d3e20323633393037.roa (raw, json)
Hash identifier:          peOXWtApHPvdshINXswwCSkP9CsS5SpVIsONgPFBxik=
Subject key identifier:   79:77:FD:25:72:8B:45:6D:5A:5B:7D:50:0E:20:34:DD:87:D4:2F:BB
Certificate issuer:       /CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
Certificate serial:       1CA3639F486BDDBFB5B9D0E8FD308002C055B8A4
Authority key identifier: F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138352e302f32342d3234203d3e20323633393037.roa
Signing time:             Mon 01 Sep 2025 13:53:32 +0000
ROA not before:           Mon 01 Sep 2025 13:48:32 +0000
ROA not after:            Mon 31 Aug 2026 13:53:32 +0000
asID:                     263907
IP address blocks:        138.204.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl
                          rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a3:63:9f:48:6b:dd:bf:b5:b9:d0:e8:fd:30:80:02:c0:55:b8:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
        Validity
            Not Before: Sep  1 13:48:32 2025 GMT
            Not After : Aug 31 13:53:32 2026 GMT
        Subject: CN=7977FD25728B456D5A5B7D500E2034DD87D42FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5a:5f:0c:0c:ed:2b:a5:ad:2e:88:74:c8:7d:
                    fd:f4:8a:75:7c:1c:b5:cd:f9:15:f0:94:c2:e8:d0:
                    31:86:a4:92:f7:99:78:7f:44:7a:38:7e:a1:7f:74:
                    05:39:47:c4:8f:44:11:e2:b4:13:2d:ad:a4:13:39:
                    19:70:4c:5f:f0:60:c4:f9:cd:02:30:a7:7e:1b:e4:
                    ab:52:54:3c:42:72:c0:28:fa:9a:7f:36:af:82:25:
                    b8:c7:d4:95:28:ae:67:b2:33:ff:e8:5c:9f:cd:a4:
                    a0:25:fb:2d:1c:8f:08:1f:14:17:08:2e:4a:c7:a2:
                    74:dc:cd:89:ed:25:46:47:38:5a:43:34:fa:99:fa:
                    96:c6:2c:ee:d4:ce:cc:98:54:ed:7a:18:0c:35:9e:
                    20:30:df:36:3e:cf:13:2b:ff:65:f5:b0:02:6e:17:
                    b5:20:a8:7a:09:3a:ee:71:89:e2:6d:69:c6:34:38:
                    21:cf:ff:77:d3:db:6c:bb:7e:8b:e6:d6:cc:13:cd:
                    d6:ac:da:4d:b6:61:1b:07:46:ba:e8:a1:7c:01:78:
                    d1:7f:de:d1:3d:68:49:d6:29:31:2b:69:a6:af:57:
                    0f:8f:e2:74:78:84:c4:cc:42:59:07:fd:93:d7:95:
                    0a:f4:e6:f5:95:a2:3d:3c:d1:94:02:bb:5b:17:8d:
                    1a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:77:FD:25:72:8B:45:6D:5A:5B:7D:50:0E:20:34:DD:87:D4:2F:BB
            X509v3 Authority Key Identifier:
                keyid:F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138352e302f32342d3234203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:9e:51:72:1d:ee:22:38:df:5a:1d:3c:0e:86:2c:61:8a:5b:
         68:0a:2c:bd:47:cf:c1:f9:df:28:05:20:3a:ec:63:a1:32:80:
         01:18:08:ef:8b:1f:b2:70:b7:7e:ab:96:f7:ac:fa:0e:c1:ad:
         9b:a7:df:9d:ec:cf:a4:cf:e3:1a:f3:17:bd:de:27:9d:f3:aa:
         c7:f5:0e:0b:31:b0:73:92:96:13:be:f5:62:2d:b1:a1:cd:42:
         67:b1:5b:ad:bf:ec:0a:9c:55:8f:d5:34:99:2f:ff:c0:ba:1f:
         60:6b:98:76:da:f6:80:0f:cc:17:65:03:e0:94:63:74:a3:b2:
         9c:8c:c9:f5:5e:53:01:24:ae:fa:37:d6:d2:dd:2a:be:53:a2:
         0e:3b:97:5e:c4:24:33:49:49:da:41:98:80:34:7b:95:f4:f0:
         e7:0b:20:f2:71:ba:3c:58:46:b3:03:7f:0a:f9:2f:c6:6f:3a:
         62:89:d8:47:36:ea:c2:bd:3b:97:fb:48:31:e0:ab:6b:85:e5:
         39:92:f5:8c:d1:a7:40:5f:c8:78:ac:f1:b2:8f:fe:a4:87:fa:
         b5:28:cf:68:ea:3c:ab:89:eb:7a:57:08:a5:1f:4e:d4:4e:f4:
         18:34:b7:f4:57:02:f3:ac:11:13:b2:3d:d8:03:8f:5e:45:56:
         94:15:cc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:51:51 2025 by rpki-client