Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38322e302f32342d3234203d3e203233373634.roa
File:                     3133312e3232312e38322e302f32342d3234203d3e203233373634.roa (raw, json)
Hash identifier:          PXF8BC3SjAgqiMxhGG5CVpvVTGuBhNpbgo3b+fdgT28=
Subject key identifier:   2F:04:38:5F:9C:84:F6:BE:BF:20:79:A3:4F:D3:B2:CF:68:1A:0E:92
Certificate issuer:       /CN=213D61EA584763705A7243F87D26327EC5CA63B0
Certificate serial:       6D8A3E052B1E39794B92C86B1DE104C76D0FCC71
Authority key identifier: 21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38322e302f32342d3234203d3e203233373634.roa
Signing time:             Fri 03 Oct 2025 18:02:18 +0000
ROA not before:           Fri 03 Oct 2025 17:57:18 +0000
ROA not after:            Fri 02 Oct 2026 18:02:18 +0000
asID:                     23764
IP address blocks:        131.221.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl
                          rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 10:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8a:3e:05:2b:1e:39:79:4b:92:c8:6b:1d:e1:04:c7:6d:0f:cc:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213D61EA584763705A7243F87D26327EC5CA63B0
        Validity
            Not Before: Oct  3 17:57:18 2025 GMT
            Not After : Oct  2 18:02:18 2026 GMT
        Subject: CN=2F04385F9C84F6BEBF2079A34FD3B2CF681A0E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:63:ff:27:cc:1c:09:f3:56:76:3d:05:cc:7d:
                    87:c7:26:0b:2e:79:83:df:27:86:e0:ef:7b:76:dd:
                    f4:75:ba:dc:4f:79:da:a5:d9:85:36:03:2d:d0:b1:
                    6b:09:78:f2:85:4e:18:f6:48:5c:53:74:7b:8b:9b:
                    94:11:ab:62:57:96:bb:9e:a4:7e:50:98:1f:42:4f:
                    d4:34:b4:60:5d:df:de:0f:e4:d0:09:7d:15:ce:1d:
                    ea:72:95:19:2f:10:a2:9b:82:b6:fa:a5:e9:2e:0c:
                    9d:a7:2f:59:22:c0:f9:54:6b:2b:f7:6c:f1:00:6d:
                    e9:d2:9a:8b:a8:ee:54:8c:ab:5d:85:0d:4e:02:80:
                    22:2b:b4:57:8a:ae:3b:2a:fb:10:f6:3a:ef:ae:81:
                    3e:5a:c1:65:f1:37:c7:55:eb:58:13:48:ec:01:4e:
                    52:89:47:4a:33:6f:18:26:74:95:8f:d9:8b:86:17:
                    48:b7:47:9f:e7:62:f9:38:ed:11:ce:f9:5c:b8:71:
                    df:d6:bb:fe:b8:65:57:37:69:f7:a9:fc:64:ac:ac:
                    70:47:ea:69:ff:28:ea:89:83:51:fd:91:92:2d:dc:
                    5c:0c:03:9f:c4:98:9a:9a:d9:75:03:b2:7f:8b:e0:
                    1d:11:27:ed:13:5d:3e:70:e1:1a:56:14:60:d6:b6:
                    bb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:04:38:5F:9C:84:F6:BE:BF:20:79:A3:4F:D3:B2:CF:68:1A:0E:92
            X509v3 Authority Key Identifier:
                keyid:21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38322e302f32342d3234203d3e203233373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:01:c6:57:64:87:38:7f:8f:79:3b:e5:6a:99:b9:99:e8:46:
         7c:3e:61:74:d3:c6:5c:d1:03:ae:58:4d:18:72:26:23:e5:0a:
         02:9d:93:c6:70:b5:86:60:0e:ec:ef:e1:50:56:44:f1:e9:2b:
         88:67:04:f0:3e:12:60:df:99:db:2a:ce:4f:5d:3c:ba:cf:82:
         78:38:dc:ce:81:bc:f7:72:c6:40:3b:a3:53:09:fa:2e:c0:94:
         2e:66:78:a3:eb:ea:8b:0d:3c:51:2d:5d:19:37:ad:09:50:56:
         ee:27:5c:26:96:c1:ae:18:f2:bf:7b:f8:97:d0:0c:04:f8:f5:
         77:bd:94:ed:ec:e3:f4:47:29:83:b5:1f:ee:ad:93:d6:dc:bf:
         98:ca:60:0f:0e:07:e0:0e:0d:c8:ae:ea:3d:63:6d:8d:34:d9:
         83:58:5c:b1:ec:65:e7:b1:c4:8f:de:82:f2:df:0a:2d:7c:72:
         94:64:f8:b3:06:5e:b0:dd:a6:d2:b3:6e:75:97:a7:cd:f4:b5:
         b8:8e:89:b8:fd:92:e2:3e:46:f8:cc:43:b5:4e:b0:a5:70:2b:
         a8:e2:df:a8:e2:bd:9f:70:da:3c:06:7f:41:d4:36:6c:9f:53:
         56:0e:5c:b1:c7:ba:2b:e8:0b:56:4c:89:22:87:f6:c7:5b:b6:
         25:ef:11:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:07:44 2025 by rpki-client