Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa
File:                     3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa (raw, json)
Hash identifier:          F2HvTqeq5FaHOhCgbB0cHi4fc5snAunjaRp1FpfCqEg=
Subject key identifier:   59:55:B8:F8:A8:41:DA:1C:FA:06:EA:40:7E:43:EF:83:06:20:B0:7E
Certificate issuer:       /CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
Certificate serial:       2F094D85D43E7792C707B6EFE6111F322D277A2B
Authority key identifier: 06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa
Signing time:             Thu 18 Sep 2025 20:31:01 +0000
ROA not before:           Thu 18 Sep 2025 20:26:01 +0000
ROA not after:            Thu 17 Sep 2026 20:31:01 +0000
asID:                     264517
IP address blocks:        138.117.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl
                          rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 23:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:09:4d:85:d4:3e:77:92:c7:07:b6:ef:e6:11:1f:32:2d:27:7a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
        Validity
            Not Before: Sep 18 20:26:01 2025 GMT
            Not After : Sep 17 20:31:01 2026 GMT
        Subject: CN=5955B8F8A841DA1CFA06EA407E43EF830620B07E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:cd:b8:75:84:22:4f:36:a8:07:00:91:be:
                    b9:fb:d9:60:06:22:8e:5d:25:47:ac:76:3a:7c:db:
                    94:ec:f4:36:ff:03:e3:4b:6e:ed:3e:97:9b:ec:ec:
                    a1:ef:af:28:95:95:1c:b9:20:49:ca:bd:8a:71:74:
                    dc:c7:f9:d6:32:51:83:72:49:95:22:1c:b4:23:2d:
                    0f:6b:7c:ae:8f:61:2c:26:e3:37:02:ab:5f:2d:5a:
                    7f:e8:cb:f6:b7:44:83:dc:e3:b7:9c:5f:36:66:4e:
                    22:e3:aa:c7:b1:bb:ba:ad:bd:e5:df:74:b6:15:76:
                    06:14:93:90:bf:26:63:8e:67:de:a0:89:57:62:04:
                    5f:1e:2c:85:12:54:62:08:b5:08:41:0a:db:39:94:
                    51:2a:3d:1d:92:9e:9c:5d:15:38:dd:1b:63:d9:96:
                    48:33:04:5d:c6:cc:9d:96:30:ca:32:4e:ce:3e:46:
                    da:61:25:2f:c9:e0:b7:34:a0:81:8e:ee:d7:8a:09:
                    df:6b:a0:53:61:99:71:88:32:75:eb:1a:3f:12:41:
                    bd:47:bb:40:7e:0b:f1:b6:9b:fa:71:62:5e:2e:ef:
                    81:37:8c:ef:2d:b7:60:a5:27:a3:04:af:e5:16:9a:
                    d2:1f:b5:b9:f7:77:5d:7f:ff:5d:9f:e8:e5:8e:a3:
                    1c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:55:B8:F8:A8:41:DA:1C:FA:06:EA:40:7E:43:EF:83:06:20:B0:7E
            X509v3 Authority Key Identifier:
                keyid:06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:10:f6:e4:55:53:10:24:64:35:67:ea:97:ff:43:4f:a3:a4:
         5e:56:6f:8f:f0:3e:ef:46:2b:5b:e9:42:d9:1f:dd:fc:30:f5:
         5c:1a:07:e2:7e:1c:e0:51:fa:9d:88:2d:48:86:42:29:f6:bc:
         b6:8b:09:39:2b:f4:c5:15:79:22:2c:ca:a5:84:e4:56:dc:e0:
         51:a1:c8:dd:b0:ce:31:58:56:ea:09:ef:d7:0d:69:ea:34:fb:
         a2:11:1f:97:ce:54:6c:15:73:0b:f7:67:e3:70:26:9d:ac:53:
         c2:91:6e:1f:df:32:4a:36:0a:84:73:f9:c4:8a:23:40:1a:62:
         4c:01:84:73:d9:7c:45:98:54:89:e6:ea:54:7f:cf:b0:aa:79:
         69:c3:c3:ac:2a:76:4a:9f:c8:c5:10:f2:c4:91:ea:01:c5:c9:
         ea:4a:6f:94:29:1a:7d:33:96:f7:d5:51:0d:64:ae:24:5b:48:
         03:9e:89:c2:34:a7:c2:70:8b:de:e9:96:e4:86:d4:c0:e9:ac:
         1d:25:22:27:23:50:de:9a:88:1d:57:3f:00:54:7b:78:92:a0:
         17:f2:6e:66:a7:3a:dc:d5:e5:fb:f8:2b:b2:43:21:9b:0b:85:
         ce:b4:09:b8:b2:9c:84:ba:ba:a7:2c:6d:ab:80:9c:b2:c1:e8:
         5e:5f:07:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:59:53 2025 by rpki-client