Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32342d3234203d3e20323634353530.roa
File:                     3133382e302e3133362e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          P0kRvm9a/79sQnQAwDIj93Yq+4GqE6L7SSbOVu4xOVo=
Subject key identifier:   54:BC:0C:A0:0C:3D:7F:4A:FD:A9:DB:6E:F1:50:1B:51:62:26:A1:0A
Certificate issuer:       /CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
Certificate serial:       2DC47E820B051C41BE6DBC5FCB5245BBF8666472
Authority key identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32342d3234203d3e20323634353530.roa
Signing time:             Tue 23 Sep 2025 00:05:41 +0000
ROA not before:           Tue 23 Sep 2025 00:00:41 +0000
ROA not after:            Tue 22 Sep 2026 00:05:41 +0000
asID:                     264550
IP address blocks:        138.0.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c4:7e:82:0b:05:1c:41:be:6d:bc:5f:cb:52:45:bb:f8:66:64:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
        Validity
            Not Before: Sep 23 00:00:41 2025 GMT
            Not After : Sep 22 00:05:41 2026 GMT
        Subject: CN=54BC0CA00C3D7F4AFDA9DB6EF1501B516226A10A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:49:b4:cf:ae:60:f6:45:2e:4d:44:d8:30:
                    01:0e:cf:ef:22:de:91:5b:dd:79:7c:e3:5d:2f:3e:
                    61:bb:81:5c:70:cf:8b:0f:41:92:73:ac:5d:e6:42:
                    41:51:76:5b:75:53:eb:be:97:1e:f8:d8:45:a8:63:
                    88:1e:28:32:b0:16:f3:a7:f0:64:94:0b:9c:b2:ee:
                    48:62:3d:56:b4:63:cf:e6:3c:cc:b7:ff:91:2f:17:
                    88:e8:94:ff:49:f9:63:ae:48:3c:67:98:1c:cc:e0:
                    d7:ea:25:be:db:b0:d8:3f:54:5d:42:93:91:18:34:
                    85:8a:97:26:24:9c:c2:58:49:d2:30:35:dc:b9:46:
                    5f:71:e3:b4:6c:52:e3:07:e4:48:7c:65:de:22:28:
                    cd:16:69:aa:10:4d:a8:92:85:d3:bc:f3:2e:e5:5b:
                    14:81:c8:1d:8b:ae:55:1e:b9:da:de:c0:52:ab:b8:
                    88:46:46:0a:a2:96:d2:8a:05:87:06:ba:83:98:f3:
                    32:94:61:8f:cc:ea:70:be:07:eb:42:90:0e:c8:6e:
                    db:ca:51:14:a5:e2:1c:e3:cf:26:e7:13:46:af:1e:
                    29:64:ee:e6:05:cc:83:e9:d0:35:1c:42:50:79:e6:
                    bd:48:0a:88:7f:2e:76:4f:a9:94:87:da:00:f2:32:
                    a1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BC:0C:A0:0C:3D:7F:4A:FD:A9:DB:6E:F1:50:1B:51:62:26:A1:0A
            X509v3 Authority Key Identifier:
                keyid:FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:68:c2:0f:8b:0b:98:ae:0f:1d:e8:1e:67:7d:2f:96:84:2e:
         35:27:45:66:4a:28:bf:64:e6:91:4f:ad:f0:9c:1d:e9:9c:5e:
         71:f4:e4:71:71:e2:8b:27:59:40:de:15:3c:16:7b:39:d9:83:
         51:9c:2f:7f:44:f0:fb:68:67:66:8a:92:04:6c:2d:e3:fd:6b:
         8b:4b:38:64:3b:ee:a0:3d:f3:84:a9:ca:07:7f:4c:19:1b:46:
         bf:1d:51:e6:8c:1f:c1:be:1b:23:67:dd:bd:4a:f2:61:eb:69:
         f1:97:06:1b:e2:04:f7:cf:04:62:cc:0b:ed:d2:71:d3:ed:c5:
         7f:bb:42:a2:0c:05:bd:b1:3a:7c:fa:62:9c:95:ef:77:aa:c3:
         39:86:81:be:70:9a:5d:72:22:20:cc:56:4d:27:2f:19:5e:19:
         01:e7:93:86:21:b4:80:e3:d5:a5:a4:71:5e:69:b5:33:10:63:
         75:5b:7c:e4:94:46:e0:66:06:5e:55:35:2f:b6:43:60:ae:7d:
         da:df:4d:2b:32:92:57:97:c4:6a:d2:b6:7b:4a:f3:ae:6c:b9:
         83:2d:c8:b2:8e:9f:4c:e0:42:87:a3:f0:c1:ec:77:0a:92:1b:
         ab:a8:6c:6f:70:bc:96:11:0c:1c:41:4c:c9:e8:00:f1:f0:ee:
         70:c5:d0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:47:12 2025 by rpki-client