Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/3133382e35392e3135322e302f32322d3331203d3e20323638313531.roa
File:                     3133382e35392e3135322e302f32322d3331203d3e20323638313531.roa (raw, json)
Hash identifier:          80e0RAPcCrJkLSHdVLdl9RM46S3sM5vfr269Z13caj8=
Subject key identifier:   9F:07:AF:90:C1:5E:A9:68:DE:D6:2A:03:7C:94:87:2A:99:6A:B0:90
Certificate issuer:       /CN=E11E6683597C8BDD4CA32F5407D91168F5C3A87C
Certificate serial:       3990E805EA7B7C2936C49133D2B55E39BE32804A
Authority key identifier: E1:1E:66:83:59:7C:8B:DD:4C:A3:2F:54:07:D9:11:68:F5:C3:A8:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/3133382e35392e3135322e302f32322d3331203d3e20323638313531.roa
Signing time:             Tue 12 Aug 2025 20:25:06 +0000
ROA not before:           Tue 12 Aug 2025 20:20:06 +0000
ROA not after:            Tue 11 Aug 2026 20:25:06 +0000
asID:                     268151
IP address blocks:        138.59.152.0/22 maxlen: 31
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.crl
                          rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 06:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:90:e8:05:ea:7b:7c:29:36:c4:91:33:d2:b5:5e:39:be:32:80:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E11E6683597C8BDD4CA32F5407D91168F5C3A87C
        Validity
            Not Before: Aug 12 20:20:06 2025 GMT
            Not After : Aug 11 20:25:06 2026 GMT
        Subject: CN=9F07AF90C15EA968DED62A037C94872A996AB090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:d1:6d:64:e3:6d:16:81:9c:ac:5e:48:e9:
                    16:38:24:cf:72:51:f7:b2:09:79:b3:12:4c:ed:3e:
                    9c:35:d7:d9:96:02:36:b2:3c:f9:e5:de:6c:03:de:
                    e7:c6:75:1b:1f:8c:14:40:07:80:1c:a0:c3:c9:5b:
                    f6:75:7b:1b:40:fb:15:2f:92:82:49:3e:a2:6e:c7:
                    dc:6d:e0:8a:5b:88:b5:fd:12:3d:bb:01:e1:b9:7c:
                    1d:33:15:e8:44:fd:92:3e:26:0a:55:1a:7c:44:b7:
                    dd:7c:43:20:c5:cc:93:5d:73:46:52:e6:a7:b4:87:
                    3b:54:c0:37:83:ec:c7:25:b5:36:12:ce:4e:e8:bc:
                    10:d8:69:ce:c0:fb:03:e2:cf:67:8f:c5:eb:a8:2c:
                    be:5f:2c:da:6f:44:c1:14:2e:6d:d9:46:fd:3b:53:
                    b6:67:de:b4:25:19:88:0b:99:c6:f7:f8:88:5e:98:
                    fb:bb:0d:85:2c:38:23:ba:4f:19:87:55:f4:a0:3e:
                    3c:c4:a6:e9:b5:67:86:d9:fc:ed:13:23:df:8a:c5:
                    d1:f9:db:5c:18:2e:75:88:60:5d:a2:44:44:33:09:
                    e9:a6:e0:08:6f:eb:a6:4c:84:31:24:81:0b:09:ac:
                    95:11:e4:4f:f2:6b:62:ad:14:1b:52:22:10:0d:c7:
                    cd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:07:AF:90:C1:5E:A9:68:DE:D6:2A:03:7C:94:87:2A:99:6A:B0:90
            X509v3 Authority Key Identifier:
                keyid:E1:1E:66:83:59:7C:8B:DD:4C:A3:2F:54:07:D9:11:68:F5:C3:A8:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/3133382e35392e3135322e302f32322d3331203d3e20323638313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:ec:24:8d:02:f7:53:72:cf:6e:c0:20:42:fe:b9:dd:c2:94:
         c1:2a:60:08:b2:a4:3e:9d:d3:34:10:3b:ff:f5:a1:39:34:bc:
         86:09:8b:b9:f6:84:76:8b:fd:07:92:f6:d4:32:00:f5:15:90:
         9c:4b:6c:30:ef:94:e1:d0:52:c8:ac:48:50:e0:da:e9:f6:83:
         4b:5d:fb:fe:ae:e1:3b:cb:e0:75:c6:6c:5d:6b:b4:09:5e:72:
         35:51:c1:8f:93:ba:22:c1:03:4d:68:5b:d3:7b:47:26:1d:43:
         90:54:2e:b8:27:07:1d:c5:af:ef:e0:5d:07:8a:5e:bf:37:14:
         7b:d8:7a:14:2c:b3:39:70:b0:19:d8:3c:1f:b8:39:90:3a:7c:
         9b:73:8e:90:8c:7c:4c:aa:a8:13:b4:8c:f2:fe:48:72:71:47:
         40:e3:e0:53:ee:0e:4a:17:4b:cd:c0:fd:87:33:c8:d1:59:83:
         1a:06:e7:f0:21:be:42:e4:99:14:d9:79:6c:5c:7a:62:24:c3:
         87:62:54:95:9c:76:f3:b3:b6:2b:e3:09:b6:94:f2:a3:0c:a5:
         83:dd:64:66:bb:bb:0c:32:7a:4e:27:ce:1c:f2:08:0b:7d:f5:
         e6:e9:b6:fd:a5:e0:2c:30:d7:8a:c9:94:80:7f:b7:7c:6e:14:
         10:af:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:26:16 2025 by rpki-client