Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa
File:                     3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa (raw, json)
Hash identifier:          nVS1ig476qeVEp3ktQ874Yh7cQPZ9tR3j/G5N42qT4o=
Subject key identifier:   E6:5E:5F:AE:28:81:78:75:C9:64:80:FD:B2:36:5D:48:17:06:35:D6
Certificate issuer:       /CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8
Certificate serial:       63246D4F92361EBB06B7D1A247D5C58D90C46D88
Authority key identifier: AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa
Signing time:             Thu 16 Oct 2025 03:57:24 +0000
ROA not before:           Thu 16 Oct 2025 03:52:24 +0000
ROA not after:            Thu 15 Oct 2026 03:57:24 +0000
asID:                     264267
IP address blocks:        138.118.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl
                          rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:24:6d:4f:92:36:1e:bb:06:b7:d1:a2:47:d5:c5:8d:90:c4:6d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8
        Validity
            Not Before: Oct 16 03:52:24 2025 GMT
            Not After : Oct 15 03:57:24 2026 GMT
        Subject: CN=E65E5FAE28817875C96480FDB2365D48170635D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:d4:b6:00:5e:7a:ed:6c:79:4e:c0:4d:98:
                    bd:eb:83:f6:fd:cc:21:c1:4b:b5:a0:5c:39:49:3d:
                    ee:98:20:91:09:b0:c5:41:a5:ed:63:0d:bb:42:36:
                    68:8e:33:87:5b:7c:1f:99:31:27:66:ac:e6:2d:9b:
                    24:af:ec:e4:d8:4a:9a:dd:ad:3c:32:9e:07:70:a0:
                    93:90:aa:54:01:b8:88:f7:07:d8:78:0e:0e:b1:0c:
                    0a:0f:15:15:00:e0:b2:02:90:52:51:73:a9:7e:91:
                    f1:82:11:85:52:ad:3e:b6:10:19:ff:3a:d7:fd:7b:
                    35:cf:ee:fa:6b:5f:e9:84:bc:f3:b4:3e:77:d1:aa:
                    d2:52:c9:75:1c:db:0b:c7:25:9e:bb:e3:16:94:26:
                    ac:ef:bb:13:e3:3c:16:be:bc:bf:86:30:f8:67:ce:
                    31:08:38:4d:f2:ab:91:5d:03:4e:ee:53:4b:5a:2c:
                    74:f0:98:a3:69:05:8e:c6:42:98:49:c6:d5:0d:06:
                    e4:03:87:4c:85:31:1f:4c:06:8f:08:7f:6f:ee:ff:
                    e5:a5:be:c9:68:7c:81:dc:8a:93:c6:8e:3e:f1:1f:
                    46:14:3d:57:f0:8e:7b:f0:32:17:cf:65:75:dd:b9:
                    af:bc:6e:83:db:14:cd:a6:1f:9a:31:b8:e2:e9:a6:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5E:5F:AE:28:81:78:75:C9:64:80:FD:B2:36:5D:48:17:06:35:D6
            X509v3 Authority Key Identifier:
                keyid:AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:a7:94:2f:fc:76:e8:83:7f:16:f3:22:df:95:8e:9f:0f:4f:
         60:b7:30:a0:f4:9f:3e:a2:7d:fb:83:62:a5:24:0b:82:89:7b:
         f1:9a:73:03:67:e7:8a:4b:a4:8a:32:ea:a7:20:af:60:0b:0a:
         16:fc:22:f4:61:0d:15:3c:52:49:92:b8:ec:d3:ac:95:a4:46:
         19:df:cb:06:28:f5:40:1e:dc:d9:a8:d3:5a:5a:11:74:a0:ac:
         4c:e8:d2:ac:2e:72:82:42:84:df:3d:e2:a6:2f:cc:60:de:c1:
         c8:c7:45:19:9d:10:f9:fc:05:a8:11:ed:78:5c:0e:8a:68:cb:
         b5:75:fb:e6:1f:74:4b:ae:be:79:eb:c0:38:f6:09:a1:e9:4e:
         2a:de:91:aa:76:9b:62:7b:7b:a8:b7:23:6b:b8:c5:43:9c:eb:
         97:3b:4d:69:38:54:1b:c5:0d:7f:18:30:47:52:cc:b3:9d:fe:
         5f:59:36:f3:51:d2:d3:9b:c7:15:de:1f:f4:1c:2b:f2:d4:8f:
         a5:87:f1:a4:96:ce:8d:51:fb:3c:95:1b:79:c7:90:32:ac:c8:
         e5:32:38:2b:8a:68:39:16:c8:ff:97:5b:45:da:1b:bc:ed:f8:
         62:8a:f9:b6:1e:7b:53:eb:6f:0a:9c:82:01:66:96:de:85:35:
         e2:48:9f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:15:20 2025 by rpki-client