Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/3133382e3132322e3137322e302f32322d3234203d3e20323632353138.roa
File:                     3133382e3132322e3137322e302f32322d3234203d3e20323632353138.roa (raw, json)
Hash identifier:          VZFLYkuugvMLSlCrXMa8mwztT4f+5pzIzrBa9BfZi2E=
Subject key identifier:   09:33:63:D7:57:C4:8C:52:54:6E:48:E2:40:9B:44:F2:6F:70:42:5D
Certificate issuer:       /CN=F1413BC3D597601D5CCAE4A0048983DEDACEE5D1
Certificate serial:       7FFED9FF8BDF72196C2A41CE0BB317F6FC996B7D
Authority key identifier: F1:41:3B:C3:D5:97:60:1D:5C:CA:E4:A0:04:89:83:DE:DA:CE:E5:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/3133382e3132322e3137322e302f32322d3234203d3e20323632353138.roa
Signing time:             Mon 13 Oct 2025 18:08:04 +0000
ROA not before:           Mon 13 Oct 2025 18:03:04 +0000
ROA not after:            Mon 12 Oct 2026 18:08:04 +0000
asID:                     262518
IP address blocks:        138.122.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.crl
                          rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:fe:d9:ff:8b:df:72:19:6c:2a:41:ce:0b:b3:17:f6:fc:99:6b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1413BC3D597601D5CCAE4A0048983DEDACEE5D1
        Validity
            Not Before: Oct 13 18:03:04 2025 GMT
            Not After : Oct 12 18:08:04 2026 GMT
        Subject: CN=093363D757C48C52546E48E2409B44F26F70425D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:8f:21:d6:b4:b7:03:55:46:84:a1:eb:4b:91:
                    c7:87:cf:84:9b:72:3b:68:11:03:fc:86:ce:fe:9b:
                    b4:a3:78:40:c2:ae:ca:93:fc:ca:fb:54:3f:cf:60:
                    f6:29:e5:62:a6:fe:6a:34:56:b9:91:3b:8f:3a:d8:
                    96:39:32:3f:c2:6f:9a:ac:6e:53:a0:21:8d:d9:f4:
                    e8:62:2c:47:f1:b1:74:74:b9:2d:f3:22:df:8d:21:
                    41:a2:8c:8c:59:63:f7:35:56:bd:c7:02:cf:c4:ab:
                    f4:a7:93:be:c9:35:93:5f:b0:56:8c:39:96:6e:71:
                    77:42:4d:d6:6e:f3:63:60:91:25:ab:e2:12:f1:2b:
                    c0:02:ce:78:e6:bf:3b:c5:1f:f5:a1:1b:2b:99:16:
                    36:85:1d:1a:f7:6c:c8:23:3f:1d:8b:44:08:e8:8c:
                    d6:33:48:8e:3e:90:8c:55:eb:68:6a:51:2e:8e:c5:
                    b8:bf:f0:b6:90:af:9a:e1:a4:23:4f:8a:39:1d:70:
                    3c:2c:05:e1:b8:7d:98:eb:c3:a4:2a:39:a9:36:45:
                    e0:ef:90:27:de:94:3f:55:7c:2f:e0:ae:bd:58:63:
                    1a:52:50:eb:83:e6:63:ff:be:42:28:85:f9:1a:9d:
                    3d:be:dd:ea:13:7b:b4:e1:1f:cd:7a:02:23:bd:28:
                    df:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:33:63:D7:57:C4:8C:52:54:6E:48:E2:40:9B:44:F2:6F:70:42:5D
            X509v3 Authority Key Identifier:
                keyid:F1:41:3B:C3:D5:97:60:1D:5C:CA:E4:A0:04:89:83:DE:DA:CE:E5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/3133382e3132322e3137322e302f32322d3234203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dd:20:03:33:4f:98:6a:82:7c:ac:07:4b:00:e7:6e:12:42:ca:
         05:ce:b7:04:e5:15:11:04:c7:e2:51:5f:35:67:8c:47:df:61:
         c3:dd:3a:f1:9a:65:45:1c:7f:8f:2a:f0:47:1a:e3:7e:79:cc:
         24:9d:2d:97:14:13:e1:c5:d7:72:18:f5:49:8b:1e:35:2d:20:
         5a:77:20:51:dd:af:be:65:ff:cd:fa:a6:b2:aa:6c:84:d5:73:
         63:6c:f9:80:44:d8:a4:8f:16:4c:14:a1:d9:66:3e:a4:04:04:
         50:9c:b9:19:69:c9:70:9e:ee:e0:14:1d:81:33:53:ae:ee:ae:
         fd:f1:cf:a4:23:d9:0c:85:2f:f0:6b:f7:f4:cc:c4:ca:2d:92:
         8e:2b:34:6c:aa:f0:47:c0:bf:2c:88:49:6c:5f:95:bc:a2:29:
         ac:ca:be:16:39:21:a6:25:92:69:e7:b0:3e:dd:ae:d6:24:79:
         0e:f0:11:d7:34:5b:66:c7:20:4d:3b:36:5f:fd:66:76:16:fc:
         0a:6c:b5:c4:33:2f:9e:7d:4a:b8:84:31:c4:f0:0f:2c:4e:b3:
         ca:97:88:11:fc:59:45:fb:97:e4:5c:17:22:e8:f7:56:0f:ba:
         93:60:61:e5:3c:4a:30:ef:53:ca:88:e9:34:b4:49:8e:fc:6a:
         28:14:9d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:00:39 2025 by rpki-client