Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa
File:                     3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa (raw, json)
Hash identifier:          oPlAFKdBOzvHicH7jSWtdL3T35vlcWGOJfLQ2OzOQRo=
Subject key identifier:   58:92:58:3A:48:3C:9A:7F:3F:F9:C3:75:11:F2:35:7D:F8:2F:D0:D2
Certificate issuer:       /CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60
Certificate serial:       097E15F5E4A8E6669C6F7B336DB89A4F51786CE3
Authority key identifier: BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa
Signing time:             Wed 08 Oct 2025 15:54:56 +0000
ROA not before:           Wed 08 Oct 2025 15:49:56 +0000
ROA not after:            Wed 07 Oct 2026 15:54:56 +0000
asID:                     263911
IP address blocks:        138.204.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl
                          rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7e:15:f5:e4:a8:e6:66:9c:6f:7b:33:6d:b8:9a:4f:51:78:6c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60
        Validity
            Not Before: Oct  8 15:49:56 2025 GMT
            Not After : Oct  7 15:54:56 2026 GMT
        Subject: CN=5892583A483C9A7F3FF9C37511F2357DF82FD0D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:99:d8:64:ca:a7:4b:4d:64:b6:07:36:db:d5:
                    a8:35:89:f2:f0:f5:56:14:0f:bb:e9:57:10:62:24:
                    af:28:44:cb:b5:6d:bb:d6:4e:83:8e:ed:d5:76:03:
                    b3:c3:c5:f9:b4:aa:a4:cf:fc:6b:44:15:8d:97:04:
                    3e:0a:47:51:b8:b0:b4:22:9a:5c:d9:9f:15:f8:43:
                    bc:16:51:bf:a8:2f:05:60:e8:fb:b2:51:6c:38:2b:
                    3b:a9:80:a3:81:cb:c6:11:e0:37:af:3c:f1:86:2a:
                    63:30:23:42:fd:d8:a7:fb:1d:1e:f8:23:b7:36:44:
                    2f:bf:96:15:5d:23:03:06:20:6d:5a:33:89:f0:b7:
                    48:9a:ca:b6:8c:2c:a4:ce:b0:55:6d:f0:09:fc:c0:
                    f2:71:0a:f0:b1:58:8a:f0:f7:d7:61:5a:1d:9a:73:
                    69:9d:ae:5b:5b:a3:30:34:5b:a0:3a:58:5f:dd:6f:
                    da:98:56:9e:de:91:23:fc:de:bf:be:90:18:54:96:
                    62:ef:68:bb:6d:05:d7:ed:8b:2f:64:58:8a:0b:0d:
                    2b:b4:2c:6e:1f:95:87:e7:8b:d5:ec:0b:e3:ac:c7:
                    e5:7c:4c:e5:fa:c2:42:ff:0d:1b:1b:3b:da:66:91:
                    94:c7:a8:aa:f5:c4:90:9d:73:6a:b9:d9:d7:df:cd:
                    37:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:92:58:3A:48:3C:9A:7F:3F:F9:C3:75:11:F2:35:7D:F8:2F:D0:D2
            X509v3 Authority Key Identifier:
                keyid:BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:4f:fd:8b:ce:a5:51:48:03:2b:e2:af:ab:2e:f4:cb:73:e9:
         8e:33:44:dc:a9:99:c5:a5:f8:8c:d3:8f:d5:bb:ae:72:5d:f6:
         74:d3:fd:bc:c9:9b:cb:f9:f0:b0:c2:6a:16:9b:cf:2d:71:f9:
         7d:14:89:dd:bb:1f:76:cf:c8:7e:85:d1:35:40:fe:b1:ac:f1:
         5a:0d:55:a7:5a:00:13:9a:2c:cd:42:ca:25:a8:19:da:02:b8:
         52:1c:34:1b:1f:ec:31:5c:67:4b:bc:5a:09:d5:fa:40:4a:d7:
         d1:e5:b3:55:c9:ce:5d:74:20:de:ce:38:f1:b7:9b:09:93:f6:
         3e:51:98:b9:a5:ad:1e:90:c0:67:e6:04:ff:09:01:1d:c4:02:
         b1:55:74:2f:31:f8:90:3d:0c:79:8f:e0:71:16:58:2c:30:9d:
         07:8d:d0:70:df:28:1e:b1:5b:9a:b0:69:3e:3d:8e:63:02:30:
         99:d5:83:99:8c:a2:f6:cb:a9:ae:59:3e:0c:f0:0f:c8:da:e5:
         8a:8c:69:c7:0b:92:36:aa:ef:17:c3:7d:0d:25:81:5f:7b:56:
         4d:f7:4c:84:83:14:fd:63:a2:91:d2:39:8c:b4:66:d9:f3:82:
         6e:af:19:98:08:7e:44:8f:bd:34:c8:e9:cc:aa:00:a6:f5:a3:
         f5:d9:cb:dd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCX4V9eSo5macb3szbbiaT1F4bOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM3RkUwRDkwMTI1NUQ3MTIxMzI3RUZGQ0EwMUYwQjRE
MUUwQUM2MDAeFw0yNTEwMDgxNTQ5NTZaFw0yNjEwMDcxNTU0NTZaMDMxMTAvBgNV
BAMTKDU4OTI1ODNBNDgzQzlBN0YzRkY5QzM3NTExRjIzNTdERjgyRkQwRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmdhkyqdLTWS2Bzbb1ag1ifLw
9VYUD7vpVxBiJK8oRMu1bbvWToOO7dV2A7PDxfm0qqTP/GtEFY2XBD4KR1G4sLQi
mlzZnxX4Q7wWUb+oLwVg6PuyUWw4KzupgKOBy8YR4DevPPGGKmMwI0L92Kf7HR74
I7c2RC+/lhVdIwMGIG1aM4nwt0iayraMLKTOsFVt8An8wPJxCvCxWIrw99dhWh2a
c2mdrltbozA0W6A6WF/db9qYVp7ekSP83r++kBhUlmLvaLttBdftiy9kWIoLDSu0
LG4flYfni9XsC+Osx+V8TOX6wkL/DRsbO9pmkZTHqKr1xJCdc2q52dffzTcrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUWJJYOkg8mn8/+cN1EfI1ffgv0NIwHwYDVR0j
BBgwFoAUvH/g2QElXXEhMn7/ygHwtNHgrGAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNT
clgvMC9CQzdGRTBEOTAxMjU1RDcxMjEzMjdFRkZDQTAxRjBCNEQxRTBBQzYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDN0ZFMEQ5MDEyNTVENzEy
MTMyN0VGRkNBMDFGMEI0RDFFMEFDNjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNvWFJBcXd3SEZmMml3WWpuWnRDQmpha1p0MTZTMnZQeGI5NHdjQnJzU3JYLzAv
MzEzMzM4MmUzMjMwMzQyZTMxMzczNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM5MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYrMrjANBgkqhkiG9w0BAQsFAAOCAQEAj0/9
i86lUUgDK+Kvqy70y3PpjjNE3KmZxaX4jNOP1buucl32dNP9vMmby/nwsMJqFpvP
LXH5fRSJ3bsfds/IfoXRNUD+sazxWg1Vp1oAE5oszULKJagZ2gK4Uhw0Gx/sMVxn
S7xaCdX6QErX0eWzVcnOXXQg3s448bebCZP2PlGYuaWtHpDAZ+YE/wkBHcQCsVV0
LzH4kD0MeY/gcRZYLDCdB43QcN8oHrFbmrBpPj2OYwIwmdWDmYyi9suprlk+DPAP
yNrlioxpxwuSNqrvF8N9DSWBX3tWTfdMhIMU/WOikdI5jLRm2fOCbq8ZmAh+RI+9
NMjpzKoApvWj9dnL3Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:56 2025 by rpki-client