Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3133322e3235352e3130342e302f32342d3234203d3e20323633333535.roa
File:                     3133322e3235352e3130342e302f32342d3234203d3e20323633333535.roa (raw, json)
Hash identifier:          Vo85GtiBIaoM98Q9ybabyt4YtWCq6zG/FYlrA+WwOSk=
Subject key identifier:   09:2B:AE:83:78:4E:F7:31:30:6C:A1:1F:DC:D4:01:99:BC:9A:17:F1
Certificate issuer:       /CN=2A6676986C812A17B00635484B147B51B75ADD4B
Certificate serial:       5034A59366751F89D94544341187F585BF68A65F
Authority key identifier: 2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3133322e3235352e3130342e302f32342d3234203d3e20323633333535.roa
Signing time:             Tue 23 Sep 2025 18:08:08 +0000
ROA not before:           Tue 23 Sep 2025 18:03:08 +0000
ROA not after:            Tue 22 Sep 2026 18:08:08 +0000
asID:                     263355
IP address blocks:        132.255.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl
                          rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:34:a5:93:66:75:1f:89:d9:45:44:34:11:87:f5:85:bf:68:a6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6676986C812A17B00635484B147B51B75ADD4B
        Validity
            Not Before: Sep 23 18:03:08 2025 GMT
            Not After : Sep 22 18:08:08 2026 GMT
        Subject: CN=092BAE83784EF731306CA11FDCD40199BC9A17F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:15:41:7e:13:c3:22:38:25:bd:18:4d:5d:
                    66:b9:b5:64:44:e3:f6:ff:dc:a5:0a:7a:b0:e2:4a:
                    29:2f:85:14:0f:b8:41:33:72:29:11:48:fb:e4:34:
                    9f:7b:12:14:5d:1f:24:29:74:3f:12:8b:39:05:6b:
                    2d:9e:1d:a9:73:a4:86:7f:3e:eb:03:7e:ce:16:7d:
                    65:bb:30:be:c2:d7:8f:84:ea:0a:74:27:61:06:62:
                    4e:db:fa:03:e5:dc:c4:e6:94:a3:26:e8:55:df:8f:
                    9a:ca:8e:14:a2:54:fa:79:55:2c:77:3c:46:e2:15:
                    a8:8f:ca:35:3d:ad:dd:75:9f:39:b0:57:eb:f6:37:
                    ad:bb:e0:c2:dd:84:22:1c:f4:e3:99:c5:19:49:07:
                    27:21:60:da:52:95:83:1a:83:6d:59:66:2a:ea:a2:
                    71:9e:f8:5a:ba:1c:34:96:fb:77:39:a2:b3:29:f7:
                    12:4c:25:ec:50:5a:5b:40:2a:e7:a8:d2:f2:9e:ad:
                    07:a1:0c:36:75:03:22:fb:33:c8:6c:be:d8:91:70:
                    33:0b:3f:15:c7:4a:b5:33:ad:61:37:7c:5f:e7:25:
                    60:f9:3c:c3:0e:fd:3c:6b:09:f2:24:40:60:c9:f5:
                    bc:f2:1c:a6:d1:eb:6e:b9:91:93:c0:fb:a4:5b:bf:
                    07:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2B:AE:83:78:4E:F7:31:30:6C:A1:1F:DC:D4:01:99:BC:9A:17:F1
            X509v3 Authority Key Identifier:
                keyid:2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3133322e3235352e3130342e302f32342d3234203d3e20323633333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:be:8d:b4:3a:5c:6a:ae:02:8e:66:b8:53:5d:fa:7c:af:df:
         43:db:72:8c:a3:6e:14:53:41:e9:04:a7:32:e0:59:22:75:07:
         27:6a:00:b2:44:00:0c:53:d2:4b:eb:6a:9c:a5:6f:f9:21:b7:
         7d:66:ec:9d:dc:91:ad:45:b7:ca:0e:c0:4c:a4:ad:a4:b5:11:
         c3:e3:45:70:78:aa:8b:b2:a2:4e:e6:42:d0:02:a1:23:e7:10:
         2d:d4:23:a0:cb:b7:f5:7f:f5:44:74:e0:b8:e6:07:70:0c:62:
         dc:da:b7:40:9e:7b:0e:be:3e:ec:2c:f6:49:1b:4b:47:13:7c:
         7a:9f:17:bb:87:58:27:d6:e7:9c:46:a2:d0:8f:ac:af:7c:5d:
         ca:e2:82:92:b7:3f:d0:ca:63:88:e0:c0:e4:61:f9:3d:6f:d2:
         99:6d:5c:42:ff:9f:1d:0f:06:3a:bf:0b:86:39:97:95:be:82:
         ca:b1:e7:f3:bc:2d:a4:b2:8e:07:9c:0d:c5:50:7c:db:09:ef:
         2e:0a:00:3e:22:7d:d1:93:a1:6d:6b:34:c3:a0:0c:c4:97:66:
         de:67:e5:c0:b1:41:2b:7c:cd:e6:d8:f2:8f:da:08:9a:cf:11:
         8a:f3:04:66:bc:c0:8c:7c:d9:51:24:ff:27:e1:9a:62:d3:a6:
         7f:30:88:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:05:59 2025 by rpki-client