Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138372e302f32342d3234203d3e20323633393037.roa
File:                     3133382e3230342e3138372e302f32342d3234203d3e20323633393037.roa (raw, json)
Hash identifier:          3Qv1bTknO1Qcx9tt3w1b+XhqgPlRdHwCSFYcDh44RPs=
Subject key identifier:   2E:25:44:8F:9F:B5:8D:53:88:E1:47:C1:48:B6:37:D9:62:F1:6A:17
Certificate issuer:       /CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
Certificate serial:       0FA491D0F3A190857B013174678FD71BFAE64FF1
Authority key identifier: F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138372e302f32342d3234203d3e20323633393037.roa
Signing time:             Mon 01 Sep 2025 13:53:27 +0000
ROA not before:           Mon 01 Sep 2025 13:48:27 +0000
ROA not after:            Mon 31 Aug 2026 13:53:27 +0000
asID:                     263907
IP address blocks:        138.204.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl
                          rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a4:91:d0:f3:a1:90:85:7b:01:31:74:67:8f:d7:1b:fa:e6:4f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
        Validity
            Not Before: Sep  1 13:48:27 2025 GMT
            Not After : Aug 31 13:53:27 2026 GMT
        Subject: CN=2E25448F9FB58D5388E147C148B637D962F16A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a6:08:53:f0:26:16:c5:1e:76:e7:0d:8e:05:
                    c6:37:e9:15:59:f8:59:79:16:9a:3c:b1:e6:8f:05:
                    53:0d:92:e7:ad:2d:a1:9a:de:3d:b5:37:db:35:0e:
                    6f:d9:04:6b:dd:8d:07:00:22:2f:d5:52:e1:3e:ab:
                    31:36:1d:13:3c:02:b4:e5:20:dc:8b:79:23:ba:c0:
                    24:0a:9d:ec:b8:3c:0b:ff:4f:a8:0c:f4:79:94:31:
                    26:2a:b5:d3:01:78:5b:39:bc:d3:2f:a8:ce:ff:6b:
                    ba:1f:5b:f8:4b:dd:09:13:f3:95:a0:c8:22:f8:bc:
                    5c:86:3a:05:32:3e:31:d8:58:8a:99:35:3a:17:9d:
                    46:dd:54:1f:b4:9b:9f:87:b7:5f:10:eb:bf:25:8e:
                    89:51:e4:76:d2:bf:4a:44:19:31:5a:73:17:b9:65:
                    b0:d2:9c:0c:17:91:f9:7f:40:a9:26:09:87:10:54:
                    8e:da:fc:79:0e:a2:51:df:42:88:d9:96:89:78:ff:
                    42:29:f4:e8:0e:e7:85:ac:f8:d8:ea:ad:89:01:ef:
                    25:53:e6:e3:89:5a:0e:61:35:51:cb:7c:c5:6b:eb:
                    b7:ce:60:f2:e1:f7:b3:a3:5d:fd:9f:4d:8b:8b:6f:
                    59:12:b4:54:e5:80:aa:50:15:4f:a7:98:29:b4:24:
                    1b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:25:44:8F:9F:B5:8D:53:88:E1:47:C1:48:B6:37:D9:62:F1:6A:17
            X509v3 Authority Key Identifier:
                keyid:F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138372e302f32342d3234203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:6c:77:01:28:31:b2:76:e3:c5:89:fb:79:76:34:1f:05:31:
         bd:33:d1:0a:ad:25:7a:c2:b4:8e:ca:9b:52:39:1e:4d:66:97:
         6f:f6:b6:dd:34:5e:38:7a:a4:59:23:06:7f:83:2a:98:85:bf:
         b9:35:1e:5b:2e:b1:d3:d3:81:74:64:7a:a2:49:83:4a:c4:7c:
         da:9a:7e:4a:5e:86:09:6b:15:5a:2f:62:6b:7c:66:d9:40:d8:
         ce:68:89:6a:3b:55:b0:d0:c7:32:5e:f4:44:98:48:0c:af:48:
         89:4d:74:94:2f:48:98:33:01:41:f8:9b:0c:51:f9:bf:24:c1:
         09:51:a0:9c:a1:3e:ec:e0:80:28:d5:b0:58:4d:5f:ca:71:88:
         75:29:82:27:4e:34:1b:8f:c4:a3:77:fe:95:91:96:62:b4:2c:
         da:50:b8:6a:69:b9:65:77:88:0d:ce:a9:28:2c:ad:a7:15:29:
         20:7d:83:86:d1:f1:9b:24:d6:f7:9a:d9:ea:d5:98:20:85:4f:
         07:09:10:6f:46:32:ab:ab:87:6c:43:8d:6a:73:be:4e:c2:38:
         94:07:1a:b8:aa:8d:c0:4b:21:1b:3b:cc:a9:70:3e:64:94:c5:
         8e:80:e6:c0:10:ac:3c:41:ec:c0:ba:c1:a2:fd:fe:a7:1c:41:
         dc:74:02:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:51:59 2025 by rpki-client