Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137352e302f32342d3234203d3e20323633393131.roa
File:                     3133382e3230342e3137352e302f32342d3234203d3e20323633393131.roa (raw, json)
Hash identifier:          RTYl1Ot9rrwAfupFDcxrycxLUcl2itpl6m6iWBlKQLE=
Subject key identifier:   8E:F5:DF:D6:8E:8D:1A:A9:0D:66:BF:8C:6C:48:07:FC:76:15:F9:5D
Certificate issuer:       /CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60
Certificate serial:       1A7BE07B1FF0F6131E08908E11EB37DCB24DB9DF
Authority key identifier: BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137352e302f32342d3234203d3e20323633393131.roa
Signing time:             Wed 08 Oct 2025 15:54:56 +0000
ROA not before:           Wed 08 Oct 2025 15:49:56 +0000
ROA not after:            Wed 07 Oct 2026 15:54:56 +0000
asID:                     263911
IP address blocks:        138.204.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl
                          rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7b:e0:7b:1f:f0:f6:13:1e:08:90:8e:11:eb:37:dc:b2:4d:b9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60
        Validity
            Not Before: Oct  8 15:49:56 2025 GMT
            Not After : Oct  7 15:54:56 2026 GMT
        Subject: CN=8EF5DFD68E8D1AA90D66BF8C6C4807FC7615F95D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1d:c2:00:b7:f8:30:a9:d6:eb:6d:05:ac:8b:
                    da:d8:1d:c7:f9:65:b3:15:c5:7a:40:8f:40:6c:4f:
                    d3:2b:9c:40:18:1e:17:96:c6:99:18:0d:be:12:de:
                    d1:08:28:fb:75:3e:aa:3b:01:7a:3d:87:13:02:c8:
                    4d:9b:6c:94:9d:69:86:7a:16:20:52:ec:94:79:99:
                    c5:8e:0f:07:9d:3c:8c:f4:10:ef:b8:98:c5:5a:0b:
                    b4:f3:5b:c8:0f:16:41:02:e5:0e:9a:7d:d0:6b:f4:
                    d7:3e:86:f1:df:fc:fc:58:2d:ce:fc:de:56:09:f6:
                    2e:cd:2d:6d:25:13:0b:37:c2:f0:ee:fb:54:7a:40:
                    d4:04:28:76:6a:1f:4a:7a:ba:2a:78:dd:86:fd:9f:
                    8c:92:0c:8c:e3:98:93:c5:72:a7:3e:43:ee:b5:58:
                    bb:85:95:b6:91:df:42:36:b1:5f:53:7f:1d:c2:6b:
                    fd:02:cc:b6:ef:20:ff:4a:31:80:ca:b8:fb:ac:7a:
                    f2:48:ef:a7:32:c4:06:79:31:da:b0:90:e4:eb:5e:
                    a9:85:5f:48:26:b8:fd:c6:c4:b2:be:d6:86:b3:92:
                    53:1c:75:90:8c:32:76:58:57:2f:91:e3:96:44:82:
                    af:b4:48:56:01:1d:cb:64:4a:94:18:56:1a:2c:ee:
                    58:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F5:DF:D6:8E:8D:1A:A9:0D:66:BF:8C:6C:48:07:FC:76:15:F9:5D
            X509v3 Authority Key Identifier:
                keyid:BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137352e302f32342d3234203d3e20323633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:81:46:f6:32:2b:c6:96:63:f0:aa:f2:a7:dd:9f:21:9b:d4:
         2b:e4:64:8a:14:40:13:41:e2:e3:85:c4:99:bb:8c:89:98:cb:
         a9:99:65:bb:71:13:16:c8:b4:03:6b:c7:e2:7e:30:f6:80:eb:
         2e:84:1e:e7:28:a6:4f:ed:86:ed:d2:67:40:a4:bc:41:6c:8b:
         d2:f6:e6:9d:1f:48:c5:fe:94:ef:f5:ef:e2:a5:fe:06:42:cb:
         cf:e5:92:a7:a2:c2:94:d1:aa:87:bc:1a:ad:39:89:38:cb:22:
         6a:62:e4:98:46:0d:28:01:a3:ba:b7:12:d9:1d:a1:15:06:10:
         ff:7d:f4:8c:c7:68:4c:83:a2:86:44:77:d3:5e:36:2c:b3:44:
         63:27:62:d1:99:32:ec:ea:e1:21:dd:2f:de:87:45:7c:72:aa:
         45:4a:f4:c5:20:78:9c:3c:55:e8:f0:00:fc:f1:0d:1d:12:b1:
         fe:99:34:1a:c0:61:1c:ba:45:e9:df:27:a8:ff:3d:9d:cc:e1:
         ef:a7:96:43:16:f4:ac:90:87:dd:72:0a:0e:97:07:f2:63:4a:
         4d:99:d2:99:f1:d5:49:1c:20:b4:8a:3e:56:79:7d:7a:d2:e7:
         15:cc:60:c1:4d:99:8f:c3:ce:0a:2b:31:27:87:f8:e6:56:93:
         ff:91:59:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:21 2025 by rpki-client