Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34342e302f32322d3332203d3e20323634333135.roa
File:                     3133382e3132322e34342e302f32322d3332203d3e20323634333135.roa (raw, json)
Hash identifier:          /7QCn7F15gVDL46tm6gVsPYtNwIkAxryJGBHyUGpsvE=
Subject key identifier:   B3:D4:08:BD:64:39:7D:A5:E2:3B:E7:FE:3A:F3:01:B3:47:C4:09:D9
Certificate issuer:       /CN=66A56D870457AAEA1EED831D71D318FB7DA99B42
Certificate serial:       3F1604E4AD89CA1B3980C67B6AE3987B46607DCA
Authority key identifier: 66:A5:6D:87:04:57:AA:EA:1E:ED:83:1D:71:D3:18:FB:7D:A9:9B:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34342e302f32322d3332203d3e20323634333135.roa
Signing time:             Fri 22 Aug 2025 02:04:56 +0000
ROA not before:           Fri 22 Aug 2025 01:59:56 +0000
ROA not after:            Fri 21 Aug 2026 02:04:56 +0000
asID:                     264315
IP address blocks:        138.122.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.crl
                          rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 16:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:16:04:e4:ad:89:ca:1b:39:80:c6:7b:6a:e3:98:7b:46:60:7d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66A56D870457AAEA1EED831D71D318FB7DA99B42
        Validity
            Not Before: Aug 22 01:59:56 2025 GMT
            Not After : Aug 21 02:04:56 2026 GMT
        Subject: CN=B3D408BD64397DA5E23BE7FE3AF301B347C409D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3f:f8:76:04:09:50:ad:da:f0:24:2d:32:75:
                    87:7f:74:a9:3c:89:18:7a:7f:df:3e:dc:1b:7e:f8:
                    b4:31:d2:23:d3:49:d1:01:92:35:ad:1f:ba:8a:96:
                    2d:da:27:03:96:57:eb:7b:e3:23:21:21:56:98:a2:
                    ae:f0:79:85:0c:8c:67:fe:77:73:38:b3:b0:99:52:
                    e2:f2:73:ec:ad:ca:7c:97:2a:49:87:c3:2b:f6:ea:
                    ce:59:23:be:76:94:37:86:6e:48:a8:6f:8e:f7:d1:
                    aa:fd:dd:16:28:c1:1e:f3:be:26:50:84:cb:fa:47:
                    e8:28:41:81:22:31:e6:df:ab:49:1f:fa:d9:20:8d:
                    3b:85:1b:8f:6e:62:65:7b:2a:99:4a:c4:82:69:d3:
                    96:0f:43:64:f8:4e:22:be:c9:6e:48:d4:b5:47:05:
                    1e:99:fe:e2:75:7b:1e:3e:96:46:be:da:00:ec:63:
                    24:13:e7:3a:6c:23:6d:47:a3:45:6c:cb:4f:6b:89:
                    78:36:2a:a2:09:ec:15:d1:a3:50:f3:ad:24:aa:c7:
                    83:e1:19:11:fe:fc:b8:ff:7c:70:89:c0:53:07:6a:
                    6c:7d:ae:77:73:ac:07:70:4d:28:5e:d3:c9:6a:9d:
                    33:98:cb:31:45:17:62:49:55:38:19:e6:83:70:92:
                    b9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D4:08:BD:64:39:7D:A5:E2:3B:E7:FE:3A:F3:01:B3:47:C4:09:D9
            X509v3 Authority Key Identifier:
                keyid:66:A5:6D:87:04:57:AA:EA:1E:ED:83:1D:71:D3:18:FB:7D:A9:9B:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34342e302f32322d3332203d3e20323634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:32:2f:ff:5d:62:de:af:fd:b6:37:25:31:92:2e:45:f8:28:
         4a:31:b4:5c:de:a9:63:2c:17:96:fa:a0:26:74:72:01:a1:da:
         57:e2:84:17:26:4b:44:2c:6f:6b:c4:8f:b3:02:73:e9:83:2c:
         3e:bf:d7:c8:86:4a:52:06:9e:d5:ac:5d:f9:16:53:7e:45:5f:
         91:ee:d5:51:fc:2d:10:8b:54:8a:db:ec:13:ca:64:53:b9:e6:
         72:ce:3d:34:98:8c:eb:60:8d:4c:0e:d1:54:ae:bb:67:8d:51:
         db:bd:42:bc:3e:04:93:5e:db:5e:a2:0d:bc:91:18:ae:10:b4:
         a1:a5:d3:0d:2f:89:01:1a:f8:df:2d:0c:70:d3:a0:67:26:50:
         1b:98:40:3e:c6:67:8a:1a:b1:81:31:da:ed:5f:34:64:e3:27:
         77:30:49:a4:a8:83:ab:01:fd:fd:d4:0d:1f:2e:c6:88:0e:6f:
         97:67:6d:41:51:6f:a3:63:4c:80:df:69:71:4c:79:dc:28:5e:
         94:bf:11:73:e0:e4:a4:bb:fb:f0:e8:92:5e:5d:3f:28:12:99:
         1f:b2:53:19:af:d5:d0:a5:48:e3:a9:dc:68:27:00:3d:95:00:
         46:48:97:66:45:d3:21:d5:d6:24:92:65:92:d4:02:d7:54:3a:
         9f:74:b0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:06:26 2025 by rpki-client