Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32342d3235203d3e20323634353530.roa
File:                     3133382e302e3133382e302f32342d3235203d3e20323634353530.roa (raw, json)
Hash identifier:          m/r+dGcL+23xh/aK+3XWIjXHxv0XnbVODHo7xEieuXQ=
Subject key identifier:   8C:5B:10:C9:45:91:41:47:E1:7B:06:A0:55:4D:6B:B3:E1:36:F3:87
Certificate issuer:       /CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
Certificate serial:       6B461D13937863774FF2F284279EB0CB8D89F6DC
Authority key identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32342d3235203d3e20323634353530.roa
Signing time:             Tue 23 Sep 2025 15:17:28 +0000
ROA not before:           Tue 23 Sep 2025 15:12:28 +0000
ROA not after:            Tue 22 Sep 2026 15:17:28 +0000
asID:                     264550
IP address blocks:        138.0.138.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:46:1d:13:93:78:63:77:4f:f2:f2:84:27:9e:b0:cb:8d:89:f6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
        Validity
            Not Before: Sep 23 15:12:28 2025 GMT
            Not After : Sep 22 15:17:28 2026 GMT
        Subject: CN=8C5B10C945914147E17B06A0554D6BB3E136F387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6f:e1:95:24:e6:fe:3b:5f:d1:b4:ac:67:73:
                    d6:b1:de:fd:a2:16:c1:9b:cc:c7:59:c9:37:63:8e:
                    36:1f:f8:6c:1a:11:e9:62:b8:81:13:ad:a8:21:7f:
                    39:99:ab:21:24:b6:a3:45:75:6f:12:60:f7:e9:c9:
                    60:1e:e1:71:1a:a0:52:4d:44:65:4a:43:64:ca:93:
                    a2:af:60:59:7a:42:e1:fd:82:22:4a:85:31:7a:17:
                    a7:bf:12:0a:f2:23:17:2c:7c:18:63:4d:aa:ae:97:
                    a2:9d:dc:08:dd:2c:1c:0d:db:7d:32:3f:55:6b:00:
                    a8:20:e6:49:e4:05:88:47:d9:e8:18:a4:1e:b5:89:
                    34:c8:a3:27:90:2c:69:80:17:24:0b:e2:2b:bc:ed:
                    82:1c:ae:6e:f1:13:a8:ec:9e:26:b8:bc:90:f8:ab:
                    da:9b:a0:32:1a:2a:b4:83:0b:68:f2:49:af:d4:ae:
                    af:b4:83:32:76:32:30:b1:41:a1:17:66:b3:38:03:
                    62:a6:cc:fd:c1:ae:87:67:99:83:28:c8:b8:63:57:
                    09:c4:05:0a:d9:1e:50:b6:89:38:40:a6:6f:3b:5b:
                    97:f7:ca:e4:d5:ab:50:35:c5:c6:1b:5b:ba:de:85:
                    87:76:f9:6d:91:f3:9a:04:4b:4e:f1:57:e4:19:15:
                    11:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5B:10:C9:45:91:41:47:E1:7B:06:A0:55:4D:6B:B3:E1:36:F3:87
            X509v3 Authority Key Identifier:
                keyid:FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32342d3235203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:f3:66:59:71:ec:ab:1e:d5:b9:83:52:f0:63:a7:94:85:dd:
         93:01:7d:66:d7:66:fc:01:f2:a4:8e:d0:8b:4e:2d:70:83:75:
         23:d5:32:be:57:b1:3e:93:c3:92:04:b9:3d:3c:93:5d:2a:7a:
         48:10:f8:a9:8e:e8:05:56:47:cf:35:71:88:1b:c9:da:ae:be:
         f2:c0:22:34:7d:10:41:e6:35:64:e8:97:bb:47:9a:9f:d6:c2:
         fb:05:ad:12:8d:7d:e0:c5:da:78:e8:61:ef:d7:a5:f5:97:05:
         fc:3e:bc:24:65:2e:01:6d:83:66:f6:0a:43:4d:dd:c2:6f:73:
         d5:80:bb:62:28:4e:cf:a4:b0:e6:d8:f4:5e:b7:1a:31:34:27:
         fb:03:82:f2:92:21:74:8a:1b:3a:d8:42:11:78:b1:a6:48:df:
         a9:3e:69:46:13:c9:71:7b:81:2e:ec:6c:b8:6a:44:6e:a0:90:
         50:07:9d:ed:04:42:0a:8d:ae:a7:ff:7c:a1:d3:80:7b:83:81:
         f0:0b:39:b5:6d:a3:c5:ba:19:d6:4a:15:dc:d8:3b:9b:66:88:
         ad:aa:98:c7:56:3f:e8:c5:8e:b5:96:64:7e:df:5f:35:a9:46:
         b7:f7:d3:c4:74:44:e4:f3:76:51:07:05:8d:df:b1:9e:e2:6f:
         f7:ec:00:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:52:12 2025 by rpki-client