Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133312e37322e3234362e302f32342d3234203d3e20323632333933.roa
File:                     3133312e37322e3234362e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          615rGj9Js2Dl80Kw62XMW8emzqgvSZMSfqWUJ4tE6hM=
Subject key identifier:   1F:D6:3D:39:3E:D6:4B:75:58:D4:9E:6B:61:06:8B:0C:3E:19:84:D9
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       59BEAE6AACCA080C47AD959A9BDEB62318EB33A5
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133312e37322e3234362e302f32342d3234203d3e20323632333933.roa
Signing time:             Thu 25 Sep 2025 01:20:57 +0000
ROA not before:           Thu 25 Sep 2025 01:15:57 +0000
ROA not after:            Thu 24 Sep 2026 01:20:57 +0000
asID:                     262393
IP address blocks:        131.72.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:be:ae:6a:ac:ca:08:0c:47:ad:95:9a:9b:de:b6:23:18:eb:33:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Sep 25 01:15:57 2025 GMT
            Not After : Sep 24 01:20:57 2026 GMT
        Subject: CN=1FD63D393ED64B7558D49E6B61068B0C3E1984D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:ea:9a:f0:ca:a4:d5:0d:6c:52:53:cd:a0:
                    20:f0:1d:ee:a2:18:19:dd:f9:dc:1e:f5:4c:a6:7f:
                    ab:7b:d1:3f:11:bc:ac:fb:f1:3f:78:94:c1:5a:0b:
                    1d:78:3c:9d:d3:1a:04:10:67:32:6e:f6:50:f9:29:
                    df:a1:ae:ab:7e:ab:50:1a:13:e3:d4:92:21:10:3e:
                    6f:aa:98:7a:d5:85:75:cb:61:da:d0:68:de:3a:dc:
                    6c:cc:d0:69:a5:cc:47:5d:e7:aa:b9:28:0f:55:d6:
                    6f:d1:50:b2:c2:3a:1b:1b:b7:cb:27:14:dc:41:99:
                    98:cb:87:a0:97:56:b2:b4:7c:8b:d4:e4:a7:b9:b6:
                    01:cd:74:75:fd:cb:9d:97:b4:d4:79:67:7e:96:2a:
                    f8:87:6e:93:50:ac:b2:60:37:55:10:4f:fd:ec:88:
                    51:20:4e:b1:d5:d6:96:b5:9f:43:eb:ff:d1:dc:be:
                    ec:bf:b7:24:92:c5:56:30:3c:99:de:e9:2b:e7:a5:
                    46:f2:22:94:82:8f:f9:a9:de:4d:e3:8d:ad:1c:3b:
                    41:43:38:6d:45:1d:64:25:f0:56:56:93:b6:ee:f8:
                    f0:5c:5b:02:71:3d:04:9d:70:0f:60:3f:94:78:8a:
                    08:4f:50:10:3d:6e:d4:94:43:ae:f0:11:51:e8:dd:
                    0b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D6:3D:39:3E:D6:4B:75:58:D4:9E:6B:61:06:8B:0C:3E:19:84:D9
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133312e37322e3234362e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:d3:88:4e:ad:28:4d:cc:e5:24:ea:d5:36:91:ec:7f:90:d9:
         8d:58:f6:50:ba:61:85:dc:ff:2f:3f:f5:7f:98:c6:56:45:b9:
         8c:e3:2c:ad:b5:1c:b3:5e:b4:1d:2b:b9:33:3b:28:45:e5:88:
         de:32:5e:60:c1:8f:c1:10:47:cc:28:50:c3:d2:25:5f:19:52:
         13:fb:39:a1:ba:cc:81:a5:67:ab:b5:a0:47:a6:e7:fa:6a:e0:
         fb:71:f5:a5:ea:2e:7c:ee:e0:32:61:7f:72:86:83:63:88:2f:
         4a:04:34:27:71:f5:de:ec:09:78:dd:4d:57:2c:eb:95:4a:96:
         a8:81:95:b9:e7:3f:81:47:93:34:8f:03:72:bf:b0:42:a7:34:
         c1:89:03:f3:ea:8c:e2:7a:94:34:8a:0c:1e:37:48:6e:c4:e6:
         a8:84:a6:ff:c5:f9:ce:ce:d0:5a:66:83:5a:30:16:80:1b:8c:
         cb:f7:c9:5c:56:d7:17:bc:b3:8a:f2:6d:a5:48:d6:c4:bf:e7:
         83:0c:f0:0c:75:38:23:1b:04:44:41:0b:41:bf:40:79:d3:46:
         87:92:a9:a2:92:63:41:79:8e:b0:9b:9e:02:b6:a8:a7:7f:53:
         d4:5d:ae:df:7f:96:17:d3:7e:76:ea:fe:b7:eb:26:b5:40:e5:
         51:8c:4d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:15:45 2025 by rpki-client