Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235352e302f32342d3234203d3e20323633393430.roa
File:                     3133382e3138352e3235352e302f32342d3234203d3e20323633393430.roa (raw, json)
Hash identifier:          17wDLiR2m2j1hEohnooRj5sMz3EqSJTN8PbADBdAErY=
Subject key identifier:   25:64:33:2A:53:EE:97:61:53:2A:95:73:0B:7A:5D:66:EA:16:63:4D
Certificate issuer:       /CN=578E16FCC816747804043A0671C73FD1B9B9A6A5
Certificate serial:       396582C005AB39F6199462F8AA540F4D3A68BB37
Authority key identifier: 57:8E:16:FC:C8:16:74:78:04:04:3A:06:71:C7:3F:D1:B9:B9:A6:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235352e302f32342d3234203d3e20323633393430.roa
Signing time:             Wed 01 Oct 2025 17:59:34 +0000
ROA not before:           Wed 01 Oct 2025 17:54:34 +0000
ROA not after:            Wed 30 Sep 2026 17:59:34 +0000
asID:                     263940
IP address blocks:        138.185.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.crl
                          rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:65:82:c0:05:ab:39:f6:19:94:62:f8:aa:54:0f:4d:3a:68:bb:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578E16FCC816747804043A0671C73FD1B9B9A6A5
        Validity
            Not Before: Oct  1 17:54:34 2025 GMT
            Not After : Sep 30 17:59:34 2026 GMT
        Subject: CN=2564332A53EE9761532A95730B7A5D66EA16634D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b2:85:7e:bf:ff:9f:f2:d6:c1:ee:e1:40:59:
                    6f:bd:22:66:ab:ec:74:d1:8e:cd:6f:b7:f6:c6:a8:
                    7d:9c:3e:0f:85:dc:f1:66:21:a8:5e:52:6e:8f:70:
                    3a:aa:88:01:03:db:cc:c9:dc:ec:d4:37:29:b3:37:
                    07:01:22:26:11:b8:29:e1:80:23:b3:37:4d:80:13:
                    16:4d:b6:03:f4:eb:e2:51:55:fa:c7:6e:2c:e6:10:
                    3f:0b:06:ba:bb:8e:75:fe:5c:a4:82:cf:f5:c7:79:
                    b7:bb:9e:36:6b:e6:75:9a:43:64:d1:06:e3:53:96:
                    14:c7:08:52:57:e1:7f:93:90:97:d5:aa:56:d3:d6:
                    1c:14:c3:9f:ca:27:95:5b:49:9f:26:f8:8e:cd:9a:
                    0a:31:a4:cc:58:cd:6b:36:20:2d:95:83:71:eb:e1:
                    2c:41:ee:cb:be:da:2a:2f:57:33:73:bc:87:87:7b:
                    3b:c5:9b:68:97:b6:a9:63:ee:55:53:13:f1:25:c1:
                    2e:19:02:28:84:28:c0:bb:95:3c:58:b9:85:b7:7c:
                    df:31:d3:1f:e6:27:e7:b1:f6:3d:e6:1f:c5:46:ab:
                    45:4e:01:51:90:3f:8d:26:a2:1e:3b:32:a1:4c:65:
                    0b:74:86:ca:ac:85:06:1a:ff:4f:bc:c9:cf:3b:a1:
                    94:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:64:33:2A:53:EE:97:61:53:2A:95:73:0B:7A:5D:66:EA:16:63:4D
            X509v3 Authority Key Identifier:
                keyid:57:8E:16:FC:C8:16:74:78:04:04:3A:06:71:C7:3F:D1:B9:B9:A6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235352e302f32342d3234203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:47:cd:bb:0c:b5:6c:96:44:f3:a9:52:65:e3:38:44:e4:2d:
         c7:39:16:30:0b:28:2a:50:53:93:74:55:38:3b:4a:5a:d1:df:
         e8:f2:17:ac:08:d4:b0:89:a5:e5:a5:22:1b:2a:82:6e:34:37:
         45:29:71:29:36:b0:f5:5c:55:47:80:94:32:b9:0b:cb:b0:de:
         82:1b:2c:b4:6e:c8:8b:a4:4b:f1:7c:45:fa:ea:73:a7:e5:f6:
         17:3c:d1:15:0c:22:60:00:df:ef:dc:b9:86:86:83:10:13:3d:
         a3:7d:ef:51:6e:12:61:78:f1:8b:1a:a0:f1:9e:dc:e0:f3:db:
         72:a9:e9:ec:54:2c:bf:0e:9c:7c:f8:80:81:1c:8e:4e:2c:55:
         91:63:6c:a0:36:84:59:00:d3:c8:f7:86:ad:7e:ed:0c:37:52:
         90:1f:59:9b:1a:1b:d6:da:00:62:86:5c:45:db:f9:02:ed:76:
         28:7e:bd:6d:9d:e6:d4:5d:61:09:e4:16:4d:7f:99:0d:7b:a3:
         19:63:5b:a2:df:f6:b1:79:5a:80:e0:71:a2:21:37:39:d3:0d:
         08:09:78:b0:58:8b:99:b6:1c:40:ab:19:ac:bb:00:09:ba:9f:
         4b:d9:41:4e:24:ab:5c:d2:85:ab:97:07:3e:58:33:ab:47:e9:
         77:1f:28:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:14:18 2025 by rpki-client