Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133382e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3133382e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          jBThYnaU7AQ9Vk7QAwWjL6icSuIqztrjWrHR7y19404=
Subject key identifier:   45:9A:52:CA:73:69:A4:98:55:E3:EC:0C:B4:74:7C:04:1D:4F:ED:8B
Certificate issuer:       /CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
Certificate serial:       7F69DB04E78831E8FE76F079940B67DC1AE950
Authority key identifier: AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133382e302f32342d3234203d3e203238323338.roa
Signing time:             Fri 15 Aug 2025 22:00:58 +0000
ROA not before:           Fri 15 Aug 2025 21:55:58 +0000
ROA not after:            Fri 14 Aug 2026 22:00:58 +0000
asID:                     28238
IP address blocks:        187.0.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 14:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:69:db:04:e7:88:31:e8:fe:76:f0:79:94:0b:67:dc:1a:e9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
        Validity
            Not Before: Aug 15 21:55:58 2025 GMT
            Not After : Aug 14 22:00:58 2026 GMT
        Subject: CN=459A52CA7369A49855E3EC0CB4747C041D4FED8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:6b:af:81:af:36:c6:9f:a7:62:c0:ee:66:
                    24:cb:f4:aa:03:b7:86:fd:95:27:97:15:49:6e:d9:
                    f3:cc:da:af:a9:7a:68:59:01:3b:ff:e2:15:8c:d8:
                    3f:eb:42:68:48:3a:fd:cd:d5:56:6f:32:9a:48:af:
                    3b:0e:ac:3a:d5:07:17:a1:18:f7:73:0d:87:4c:fb:
                    8f:18:6d:b7:bf:22:c6:32:e3:16:2a:43:ab:b1:f1:
                    4c:e2:99:df:c2:52:84:8c:af:8a:b8:ca:87:83:c7:
                    c3:4e:53:b3:a7:c4:d4:3b:92:6d:51:fe:b3:7f:be:
                    e8:cd:28:47:79:b7:be:9b:20:50:c8:44:f0:c4:cb:
                    71:23:aa:22:5d:14:b0:b2:85:de:d6:9b:1d:b8:da:
                    ac:6e:f2:80:09:d3:fc:be:74:49:3d:59:c3:cb:90:
                    a3:71:5d:b9:b9:12:2d:7a:94:4c:54:c6:12:d8:cd:
                    dd:23:9b:fa:9e:09:1b:77:51:03:e6:d7:e2:9b:12:
                    69:14:ab:63:50:27:f1:3c:79:93:51:5d:2d:70:74:
                    c3:e4:89:aa:14:b1:f1:cf:31:44:a3:dc:d9:ce:09:
                    87:98:8d:71:22:68:60:0d:bd:72:c4:24:c0:8b:4f:
                    1d:db:7b:45:1d:c2:d5:e9:99:ea:f3:4a:ee:83:6e:
                    fa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9A:52:CA:73:69:A4:98:55:E3:EC:0C:B4:74:7C:04:1D:4F:ED:8B
            X509v3 Authority Key Identifier:
                keyid:AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133382e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:43:9b:3b:0c:e8:f7:d9:cb:32:a1:55:88:c9:40:77:74:af:
         5d:87:b7:d4:df:67:de:01:45:25:60:70:0a:81:4d:b9:f3:73:
         59:55:cd:f6:41:f8:24:02:0c:6b:8f:d3:84:f6:91:9c:c3:18:
         ae:4d:dc:ae:a4:cb:32:0a:0e:99:0c:0d:50:e2:f4:5a:0c:84:
         6a:79:50:ff:e0:82:07:26:ad:55:96:c2:cf:ff:2c:1c:97:0a:
         1e:66:62:2b:80:cf:59:1d:59:f5:ee:ca:05:af:bf:d7:40:f7:
         2a:9c:a1:28:cb:32:09:65:c1:7f:4f:55:2e:7c:2f:b1:88:ea:
         02:05:69:96:29:78:ea:ab:d3:13:c4:d2:6c:6d:06:39:5d:98:
         67:a7:27:e1:4c:f7:26:b3:2b:3b:14:a3:7b:5f:30:9f:2f:33:
         3e:25:06:8c:e4:09:e1:c3:bd:9f:75:57:c9:19:76:11:0a:37:
         03:39:87:a9:23:1f:b8:69:0e:77:d9:5f:2e:a3:f8:3f:10:69:
         a3:4d:a7:62:d7:2b:75:b5:ce:94:ae:92:d8:d0:83:36:4e:55:
         d1:dd:91:9a:38:24:b0:4e:b5:cb:5f:7d:9b:02:f1:94:ec:4a:
         23:09:c3:e0:10:f0:23:9a:d5:94:03:9d:52:22:c5:7d:50:e5:
         96:c4:2c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:37:22 2025 by rpki-client