Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133332e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3133332e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          y1e23DKv02Ctc/ub6B3LHdY+KkYK85j33f+y0gsEOl0=
Subject key identifier:   DD:E6:E2:2F:A8:BA:81:9B:04:50:AA:89:A9:37:49:BB:14:79:21:02
Certificate issuer:       /CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
Certificate serial:       45782B9E037D5C0BB4665B6D27EECED4385A246B
Authority key identifier: AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133332e302f32342d3234203d3e203238323338.roa
Signing time:             Fri 15 Aug 2025 22:00:59 +0000
ROA not before:           Fri 15 Aug 2025 21:55:59 +0000
ROA not after:            Fri 14 Aug 2026 22:00:59 +0000
asID:                     28238
IP address blocks:        187.0.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 14:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:78:2b:9e:03:7d:5c:0b:b4:66:5b:6d:27:ee:ce:d4:38:5a:24:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
        Validity
            Not Before: Aug 15 21:55:59 2025 GMT
            Not After : Aug 14 22:00:59 2026 GMT
        Subject: CN=DDE6E22FA8BA819B0450AA89A93749BB14792102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a7:2e:ae:9e:43:42:25:aa:72:d9:ab:84:1d:
                    df:18:7b:46:38:c1:86:b2:db:f6:81:b5:91:60:1b:
                    b8:38:19:db:4e:b1:73:d2:d7:02:bb:90:98:9b:62:
                    cc:3a:45:9b:0c:42:6d:9f:68:14:14:6e:2e:2b:20:
                    9b:df:35:67:3b:c8:a1:09:0a:cf:72:6b:3f:58:26:
                    b5:46:d6:0a:ec:ab:6c:26:8a:2f:3b:af:cf:11:38:
                    28:66:c2:e0:fb:5c:78:8e:b5:be:f2:99:2a:87:fb:
                    a0:9b:2b:fa:b8:f7:b2:d1:30:ec:51:b7:56:c2:b8:
                    86:bf:8e:29:c3:54:a1:8c:f5:e7:1e:fb:b6:3a:25:
                    ee:da:43:6e:ba:ae:c2:0b:31:40:51:c7:d6:d1:c6:
                    8f:6f:5d:97:18:8e:1f:26:c4:2a:3c:8b:1e:af:94:
                    22:ef:8c:db:14:2e:53:31:a9:48:16:38:27:f7:85:
                    21:ee:9d:e6:35:08:46:35:90:74:3c:25:37:3b:5f:
                    b8:d7:68:51:42:66:67:05:90:ac:0a:80:cf:00:d4:
                    40:67:58:1c:05:c3:f1:ad:68:fb:99:73:2e:df:49:
                    f3:38:13:05:13:e9:77:14:67:4b:52:b3:e5:22:da:
                    10:39:39:fc:8a:c5:ce:c6:bf:78:11:98:f2:44:06:
                    e5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E6:E2:2F:A8:BA:81:9B:04:50:AA:89:A9:37:49:BB:14:79:21:02
            X509v3 Authority Key Identifier:
                keyid:AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133332e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:d6:75:0e:b7:dc:0c:e7:42:64:17:35:61:72:fd:de:b6:21:
         9d:16:3d:7b:2c:5b:99:36:37:cd:ea:40:5b:fd:2d:8d:df:6c:
         d8:87:30:30:4d:4e:3b:eb:8c:38:e7:1c:0a:20:c8:e3:19:f4:
         94:fe:c2:c4:a8:19:c1:25:ac:dc:c9:bd:4a:fb:08:54:2a:13:
         58:cd:37:10:09:da:3a:7b:3a:d1:49:0b:27:f2:28:f9:97:01:
         2a:23:ab:5e:46:70:b4:9a:98:f6:a3:a3:6e:aa:19:f6:6e:0f:
         62:2b:0a:d2:c9:85:9f:5a:43:06:87:12:f0:21:91:7c:25:77:
         43:85:33:a5:8e:31:ba:d9:e7:72:01:96:5c:55:af:53:6f:f6:
         e0:8b:35:75:c7:a1:48:01:a1:a0:a5:78:77:97:70:ed:88:55:
         48:9b:91:76:98:9b:89:fb:01:48:22:df:50:e1:1e:03:07:87:
         55:c7:01:43:f1:fa:b6:27:94:b3:df:fc:2d:4c:e1:4c:e7:e8:
         91:37:be:23:ba:a3:5d:19:4f:14:24:6e:41:f4:91:7c:1d:b3:
         fb:8b:a0:7a:a6:45:3a:89:3c:e5:f7:f3:cb:c8:c9:a4:e9:a5:
         4a:19:c1:3f:50:61:fe:87:19:a4:5d:97:95:29:97:49:6e:21:
         35:ad:b2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:37:52 2025 by rpki-client