Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133312e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3133312e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          2ZHKdHNDZpxh1oREVbY9l4qQ1vXbVAvsRYG3z2q29Pw=
Subject key identifier:   B5:4B:58:95:95:1B:59:BA:42:33:AF:A2:8B:72:9F:86:25:69:56:14
Certificate issuer:       /CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
Certificate serial:       01DA19CD66413BA68A9A82760859C4FCB87B371B
Authority key identifier: AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133312e302f32342d3234203d3e203238323338.roa
Signing time:             Fri 15 Aug 2025 22:00:57 +0000
ROA not before:           Fri 15 Aug 2025 21:55:57 +0000
ROA not after:            Fri 14 Aug 2026 22:00:57 +0000
asID:                     28238
IP address blocks:        187.0.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 14:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:da:19:cd:66:41:3b:a6:8a:9a:82:76:08:59:c4:fc:b8:7b:37:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
        Validity
            Not Before: Aug 15 21:55:57 2025 GMT
            Not After : Aug 14 22:00:57 2026 GMT
        Subject: CN=B54B5895951B59BA4233AFA28B729F8625695614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8b:ab:c2:58:f9:e9:89:3a:5c:b7:f5:0e:a4:
                    a3:24:e2:95:4c:cf:b3:3d:ab:39:88:1b:ce:69:a1:
                    72:12:d9:da:23:8f:b8:b1:60:f6:ec:7a:7f:8a:cc:
                    02:7b:87:6c:81:8f:f1:99:de:d5:72:c8:c1:d7:64:
                    c6:6e:4c:3e:2b:c7:be:74:71:50:02:12:70:63:4f:
                    d3:65:e6:30:87:dd:9e:eb:c0:5a:6a:53:a0:97:cb:
                    a7:d0:24:91:55:47:f8:8d:51:d6:a7:44:67:b5:71:
                    1c:2a:58:ad:f6:cf:48:11:f5:6a:22:70:ee:04:c6:
                    cf:01:d6:7f:29:02:2f:d6:fc:35:4e:3a:1d:c2:7c:
                    9b:ca:ac:b7:de:ca:b1:c7:8d:b3:46:ea:e1:28:56:
                    e5:6b:d6:b9:db:bf:47:c5:e3:4a:45:40:b7:5e:69:
                    75:dc:c3:af:4b:5d:0c:77:e8:b9:51:7c:5f:39:2f:
                    8b:04:fd:bc:ca:a6:15:8b:52:18:6b:f4:eb:df:13:
                    8e:9e:c0:31:3e:4c:39:ea:96:2b:b6:24:1b:d0:45:
                    9c:8c:b9:83:30:6a:e4:ca:06:f0:36:84:50:51:21:
                    0f:87:12:87:a9:72:17:e0:5f:36:b8:65:76:a2:e8:
                    26:7b:a4:8e:c6:e7:c2:5b:41:30:d4:ab:3b:66:52:
                    26:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4B:58:95:95:1B:59:BA:42:33:AF:A2:8B:72:9F:86:25:69:56:14
            X509v3 Authority Key Identifier:
                keyid:AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133312e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:22:95:5a:13:8d:d7:5e:cf:91:4d:11:39:48:01:5c:12:8a:
         f4:ac:ae:09:22:26:c9:8e:6f:7d:85:bc:4c:77:d8:3d:94:9c:
         1a:e9:26:3b:54:8b:eb:92:37:58:bc:e9:0f:be:47:c2:7b:90:
         2e:bf:ff:ca:b4:6b:56:87:71:90:f9:e5:8e:c2:94:11:d0:47:
         42:d7:5d:4a:f0:a6:d4:d3:89:d4:b4:2c:1d:6c:7e:27:2a:bf:
         78:58:ba:16:53:ad:3d:df:d8:5a:18:d8:74:1d:27:4f:a8:48:
         42:60:27:eb:41:25:13:ba:07:39:a5:1d:09:3c:0d:1b:1c:6b:
         b8:d0:f8:2b:00:96:28:94:1c:bf:a3:0a:95:45:ee:28:ad:1b:
         23:bc:84:6c:b6:32:73:dd:32:2a:71:0a:7f:dd:dc:87:35:9e:
         01:52:66:32:0d:16:f2:f7:e3:7d:f5:16:5a:93:f5:8c:66:49:
         93:9e:fa:a0:88:77:fe:1c:8d:b7:43:c5:21:e3:5b:ac:73:a5:
         19:f2:d2:da:9e:06:01:5d:e7:4b:43:a1:a1:8d:0a:36:7c:dc:
         b9:83:1b:ae:06:0c:ec:52:07:d8:f3:b4:8e:4d:26:a5:27:31:
         93:88:16:4f:ab:ea:de:5c:c3:c3:d0:c9:38:46:c5:86:66:36:
         f3:a5:44:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:38:35 2025 by rpki-client