Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3133382e39372e32302e302f32322d3234203d3e20323634313132.roa
File:                     3133382e39372e32302e302f32322d3234203d3e20323634313132.roa (raw, json)
Hash identifier:          vaPBjNRU5cLfNq4Ajf17RP29ZF8znjhebKhB7JEHAqE=
Subject key identifier:   0B:FF:33:15:16:70:92:FD:E7:94:51:29:C9:93:70:C8:1B:45:35:03
Certificate issuer:       /CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3
Certificate serial:       0CCBFC9BA98F59842B55941D92C37BA5CBE4A84B
Authority key identifier: A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3133382e39372e32302e302f32322d3234203d3e20323634313132.roa
Signing time:             Wed 09 Jul 2025 15:52:48 +0000
ROA not before:           Wed 09 Jul 2025 15:47:48 +0000
ROA not after:            Wed 08 Jul 2026 15:52:48 +0000
asID:                     264112
IP address blocks:        138.97.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl
                          rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 00:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:cb:fc:9b:a9:8f:59:84:2b:55:94:1d:92:c3:7b:a5:cb:e4:a8:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3
        Validity
            Not Before: Jul  9 15:47:48 2025 GMT
            Not After : Jul  8 15:52:48 2026 GMT
        Subject: CN=0BFF3315167092FDE7945129C99370C81B453503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c0:fc:05:61:14:d7:8e:be:55:dd:74:80:78:
                    c0:30:b5:d5:78:a4:0f:3e:b2:e3:ea:00:53:d7:0a:
                    30:74:69:9c:97:dd:72:66:a4:5d:69:31:5e:84:9b:
                    a6:4b:a2:4a:22:4f:e6:2d:1e:37:e1:cb:68:4c:7c:
                    6e:60:a6:ce:ac:77:cf:3d:35:61:94:87:12:0e:cd:
                    0e:b5:9f:e8:b4:a5:1b:4d:2e:13:a5:76:3b:49:07:
                    79:f9:79:ea:3c:59:e3:90:83:91:28:0c:46:95:b9:
                    51:65:88:48:2f:86:f6:ce:bc:59:64:fa:5c:c4:84:
                    02:bb:d7:5e:14:ed:ca:85:89:50:6b:ec:98:57:9f:
                    c1:20:4c:e3:2e:65:a9:2f:fe:34:a9:d1:1d:c5:f7:
                    65:b1:2f:be:6c:5a:cf:30:43:17:14:c2:c8:fa:e8:
                    a8:4e:b9:34:2b:67:9b:3d:6b:06:2f:b0:f2:d2:f9:
                    29:b7:82:ed:e3:c9:91:83:2d:ff:58:4a:09:4a:21:
                    c3:74:a9:e0:cd:9d:da:70:a8:f6:73:f0:44:4a:ef:
                    95:f7:09:83:3a:2c:94:14:e9:14:77:b3:fe:2a:9b:
                    a8:3d:52:52:6a:bd:9b:66:4b:b8:e6:55:3d:70:a7:
                    e5:19:17:3d:85:7f:1a:44:6b:3c:cc:8f:dc:23:68:
                    72:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FF:33:15:16:70:92:FD:E7:94:51:29:C9:93:70:C8:1B:45:35:03
            X509v3 Authority Key Identifier:
                keyid:A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3133382e39372e32302e302f32322d3234203d3e20323634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:9c:f6:34:41:d3:18:8f:0c:e5:e5:9a:56:35:17:1a:33:d8:
         8c:b0:f9:35:a4:07:35:82:ad:19:08:da:ee:c4:d7:e1:f0:12:
         e1:1c:f9:c0:38:75:60:f6:5a:04:f0:ae:66:a5:27:da:87:c0:
         cf:bc:18:c7:26:0f:43:7e:3a:cd:43:29:09:95:dc:1f:6c:ff:
         d0:a0:01:32:0c:47:b7:53:02:4e:de:c6:fc:c0:62:c1:99:38:
         0a:95:50:d8:54:a0:d8:1f:99:df:44:fb:2d:ac:a6:46:b4:98:
         bf:18:77:a2:fd:30:7b:16:b2:8b:cd:fb:f5:8c:6d:24:77:61:
         4d:98:02:64:6a:8c:5c:92:9f:3a:32:91:3d:55:d8:dd:f7:a4:
         f9:a1:86:85:55:31:05:5b:cc:ed:c8:cc:a7:5f:e4:dc:3e:0d:
         56:6f:64:c2:fa:18:57:d6:e5:44:8e:6b:18:b2:46:6d:be:f2:
         03:ad:3b:37:d8:8d:4e:21:27:8e:bc:ef:e4:2c:43:2d:19:55:
         16:ee:06:bd:a4:2d:75:47:c7:33:80:30:42:9e:f0:da:fd:c7:
         d7:00:77:7d:3c:79:3f:7b:9f:19:7d:11:63:11:ab:22:c1:70:
         d9:0c:a6:d8:22:c4:b1:1c:54:28:6b:4c:97:a8:68:19:9b:73:
         b5:fb:ae:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 09:33:58 2025 by rpki-client