Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133332e302f32342d3234203d3e20323634353437.roa
File:                     3133382e302e3133332e302f32342d3234203d3e20323634353437.roa (raw, json)
Hash identifier:          3QkfsMAW0YM7thc1QPP42f7BDjhYc4NpI8swwL1V3iM=
Subject key identifier:   15:1C:1C:E1:7F:CA:29:92:3F:E1:07:6C:14:91:8A:BD:2C:36:AF:49
Certificate issuer:       /CN=464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC
Certificate serial:       39A99B9295D935212DE9309649AB8431695D3DF5
Authority key identifier: 46:4F:7E:BA:13:C4:3D:1F:B8:EA:CC:BC:C0:D4:2E:9A:28:BC:5E:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133332e302f32342d3234203d3e20323634353437.roa
Signing time:             Thu 18 Sep 2025 13:03:30 +0000
ROA not before:           Thu 18 Sep 2025 12:58:30 +0000
ROA not after:            Thu 17 Sep 2026 13:03:30 +0000
asID:                     264547
IP address blocks:        138.0.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.crl
                          rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a9:9b:92:95:d9:35:21:2d:e9:30:96:49:ab:84:31:69:5d:3d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC
        Validity
            Not Before: Sep 18 12:58:30 2025 GMT
            Not After : Sep 17 13:03:30 2026 GMT
        Subject: CN=151C1CE17FCA29923FE1076C14918ABD2C36AF49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:57:d1:a4:44:92:3c:2e:ef:fa:8d:ea:91:60:
                    da:f6:79:0a:06:e4:c3:4f:ca:f4:cc:6a:7f:ee:5b:
                    e9:72:10:d2:64:8c:14:a6:9b:58:3f:25:13:23:17:
                    04:a8:6d:b3:79:1b:7d:d8:60:95:4a:85:65:b3:77:
                    97:9d:c7:f2:b6:e3:45:ee:3b:49:da:20:18:8a:27:
                    64:73:64:7b:25:5d:7f:9a:0f:fb:05:33:b8:af:e8:
                    66:1e:ec:85:c7:87:38:e2:7d:16:2e:81:5f:e6:83:
                    9d:7c:0c:ef:a6:e2:20:48:4e:88:1c:45:02:56:52:
                    6a:dd:03:da:38:ca:39:3c:8e:5d:f3:60:df:30:f7:
                    a8:3b:f9:96:75:e2:84:17:34:73:e5:5e:95:cd:6b:
                    3f:30:24:37:b3:5b:04:26:f6:8f:7e:3b:3e:c2:7e:
                    69:13:14:77:eb:43:30:48:2c:fb:03:a7:80:3b:e3:
                    f7:ea:ea:4b:d0:73:a7:11:5b:31:bf:ec:45:6d:0c:
                    a7:1b:fd:5c:48:45:dc:0c:00:cf:2d:f0:d2:d5:11:
                    3e:13:1c:eb:0e:cd:f3:2f:f8:b9:d8:10:f2:e4:a0:
                    d7:99:53:4d:00:b5:32:42:c8:85:19:27:0c:70:52:
                    c1:84:f8:bc:82:b2:01:60:48:cf:29:9c:ef:10:1e:
                    27:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1C:1C:E1:7F:CA:29:92:3F:E1:07:6C:14:91:8A:BD:2C:36:AF:49
            X509v3 Authority Key Identifier:
                keyid:46:4F:7E:BA:13:C4:3D:1F:B8:EA:CC:BC:C0:D4:2E:9A:28:BC:5E:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133332e302f32342d3234203d3e20323634353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:2a:88:73:91:43:4e:01:51:09:68:b0:31:ca:54:65:73:8d:
         38:91:f3:3b:be:35:6a:f9:59:66:06:d7:76:55:07:9b:73:a0:
         22:f2:2a:77:cc:03:cd:78:69:19:05:f2:82:c8:cd:63:be:3d:
         6d:ab:93:91:1d:50:7f:8d:9f:4c:33:5f:43:4a:ff:f2:61:43:
         d2:9d:89:83:05:d8:4c:a8:20:5a:80:4e:5b:d9:c9:7f:fb:5c:
         11:b7:7d:aa:60:d7:ec:c7:86:99:e1:46:a3:8a:f7:1b:77:b8:
         61:8e:9b:75:67:d8:34:20:9a:3a:31:98:7f:74:10:81:b5:84:
         a5:63:10:c0:7c:b4:25:ab:ff:0e:3f:bb:c4:f3:6a:9b:28:86:
         8c:54:a1:9f:1e:bc:25:c1:40:ee:8f:f1:99:fc:cb:2c:25:e6:
         2c:4f:51:a5:a6:e4:26:ab:62:1a:0a:f4:7c:d1:c7:fc:f6:86:
         f4:22:2a:f2:c5:71:ad:7c:d3:eb:6b:c2:c6:2a:de:57:78:c9:
         9c:21:b1:c5:b8:e0:80:c8:ec:8d:05:16:4b:ad:42:45:4e:35:
         05:78:92:92:a3:7e:31:f2:58:b4:fb:4f:4f:18:8f:21:9b:5e:
         d9:55:78:a2:93:e3:87:34:e6:41:b3:89:b4:8f:be:5f:2c:ca:
         07:aa:34:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:35:47 2025 by rpki-client