Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133382e3138352e32342e302f32322d3234203d3e203238323031.roa
File:                     3133382e3138352e32342e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          nfZsLenYJZuBqroeyPKFgPUBbYHN3ZlktA7NPCpwBdQ=
Subject key identifier:   F9:23:D4:31:3E:6C:9E:C9:02:8C:D0:E1:C0:2C:7C:BE:B0:BD:8E:4E
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       76A5AC3C819AF19C71B8333330813181AFA635BE
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133382e3138352e32342e302f32322d3234203d3e203238323031.roa
Signing time:             Sat 02 Aug 2025 12:58:31 +0000
ROA not before:           Sat 02 Aug 2025 12:53:31 +0000
ROA not after:            Sat 01 Aug 2026 12:58:31 +0000
asID:                     28201
IP address blocks:        138.185.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a5:ac:3c:81:9a:f1:9c:71:b8:33:33:30:81:31:81:af:a6:35:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Aug  2 12:53:31 2025 GMT
            Not After : Aug  1 12:58:31 2026 GMT
        Subject: CN=F923D4313E6C9EC9028CD0E1C02C7CBEB0BD8E4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:f9:7f:35:9f:52:8a:02:ac:7a:3b:7f:2c:
                    de:95:61:13:59:b0:ea:41:aa:5e:dd:ff:0f:1d:74:
                    cd:45:5f:d1:ae:23:a6:43:76:7c:9a:03:b2:c3:0c:
                    c1:17:5e:63:14:c9:7c:e0:ee:e8:6f:0b:42:f0:e1:
                    7d:b9:52:3b:22:72:07:c1:1c:e2:3f:1b:62:f6:ae:
                    fa:6b:02:38:b1:08:ae:72:04:63:84:33:fe:85:a6:
                    e6:97:47:01:2d:11:08:1c:86:d9:14:91:2d:d6:73:
                    22:39:26:4c:ec:0f:a3:ec:19:15:64:01:f7:5e:5b:
                    35:4b:e6:ed:f0:63:77:ba:ee:5e:23:37:bf:e7:99:
                    78:ad:f7:e7:10:b9:08:2f:36:5c:67:12:e1:75:27:
                    9d:e9:ed:3f:c1:ed:f0:b9:c8:9e:f3:29:58:23:c5:
                    72:1f:ba:f2:1d:8c:e9:db:fc:82:03:f6:b6:8a:a4:
                    ad:81:f8:8d:cc:0c:10:94:0c:b6:e0:c7:8e:9e:58:
                    7e:f6:dc:d4:57:ba:8d:da:1a:20:58:d0:a3:cb:a4:
                    7c:e2:b3:e8:64:b4:fa:f2:f4:00:de:68:b1:28:29:
                    5b:25:bc:21:5d:51:34:0c:cb:cd:06:db:29:d7:5c:
                    c8:a2:4c:f4:a4:6f:ce:a5:4d:62:98:e0:f6:e6:4c:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:23:D4:31:3E:6C:9E:C9:02:8C:D0:E1:C0:2C:7C:BE:B0:BD:8E:4E
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133382e3138352e32342e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:94:84:c1:4a:65:24:f0:37:23:c5:96:1f:25:26:78:af:4c:
         b2:23:12:b6:3d:06:19:a9:f2:51:bf:76:de:4e:2e:29:9d:ab:
         36:f6:8e:a3:1b:19:d1:e1:77:c8:f7:2d:93:94:0e:0e:17:39:
         e9:75:2e:6d:92:a9:55:67:73:8e:c2:ac:8b:2a:cf:31:bf:d1:
         75:f7:4d:3d:eb:f2:57:ad:72:4c:4a:89:a6:fa:ae:78:2a:d3:
         0d:6c:8c:f8:c6:4d:70:63:40:22:04:ef:12:c9:25:7c:c0:ab:
         69:14:cf:5d:d0:4e:90:e8:ac:f2:60:57:3e:99:63:a6:72:57:
         17:67:02:45:8a:47:d6:0f:c0:8b:7d:0c:55:59:a7:da:19:85:
         c3:f0:8e:4e:7b:8d:d3:b2:2b:df:df:b2:63:b3:0c:9d:82:72:
         1d:77:30:b0:86:17:97:12:a6:0b:7d:cd:30:14:18:53:9c:2d:
         f1:78:02:b5:82:65:5d:b0:03:e7:5c:02:78:73:2c:fe:83:91:
         8e:89:9b:95:41:83:e7:c0:89:bf:33:8e:79:20:84:0b:34:62:
         9c:6e:0c:8e:f1:df:e5:bd:94:72:bf:8a:e2:8b:5f:62:20:e9:
         95:7a:18:d1:29:0f:fb:e5:1d:49:a8:89:70:76:ca:65:b7:52:
         f1:88:39:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:39:56 2025 by rpki-client