Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/3133382e3132322e3137322e302f32322d3234203d3e203237373135.roa
File:                     3133382e3132322e3137322e302f32322d3234203d3e203237373135.roa (raw, json)
Hash identifier:          OngBY3IwaLC9PV7QoyNEOlXT52DpOm6whcFeQvS7OwU=
Subject key identifier:   56:7C:4E:E2:E6:17:04:62:47:D0:BC:6D:1A:DF:D6:AA:0C:63:DA:62
Certificate issuer:       /CN=F1413BC3D597601D5CCAE4A0048983DEDACEE5D1
Certificate serial:       2A8C635C4A47BC735A4D2160B58B6AD1B387DF71
Authority key identifier: F1:41:3B:C3:D5:97:60:1D:5C:CA:E4:A0:04:89:83:DE:DA:CE:E5:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/3133382e3132322e3137322e302f32322d3234203d3e203237373135.roa
Signing time:             Mon 13 Oct 2025 18:08:52 +0000
ROA not before:           Mon 13 Oct 2025 18:03:52 +0000
ROA not after:            Mon 12 Oct 2026 18:08:52 +0000
asID:                     27715
IP address blocks:        138.122.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.crl
                          rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8c:63:5c:4a:47:bc:73:5a:4d:21:60:b5:8b:6a:d1:b3:87:df:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1413BC3D597601D5CCAE4A0048983DEDACEE5D1
        Validity
            Not Before: Oct 13 18:03:52 2025 GMT
            Not After : Oct 12 18:08:52 2026 GMT
        Subject: CN=567C4EE2E617046247D0BC6D1ADFD6AA0C63DA62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1b:6a:14:61:96:75:0b:c3:89:f2:02:3a:2e:
                    a0:07:2c:2d:77:3a:a1:5a:60:f5:bd:92:9a:91:1b:
                    b6:53:04:09:69:b0:46:4b:5b:10:1b:74:6b:fa:de:
                    28:18:1e:09:62:2a:c3:89:9f:ca:bf:a6:e6:92:89:
                    57:1e:0e:e8:3a:aa:c8:95:13:d5:9b:b6:34:3d:b1:
                    82:42:9a:9a:a0:7b:9f:bc:c6:74:9a:f2:a2:56:28:
                    13:8e:a9:86:13:1e:fd:43:ae:fa:70:c8:d9:6f:1d:
                    9f:54:f2:af:23:3b:3f:9f:a9:08:9c:68:d0:36:95:
                    c7:cd:5f:3f:92:68:92:26:70:f0:0c:70:63:db:bf:
                    99:9c:96:a6:6b:14:2e:3a:3d:18:0c:b3:16:c0:bb:
                    03:62:87:52:2a:85:86:94:12:05:fe:91:fe:e7:09:
                    aa:e1:af:39:c4:43:d7:68:71:5d:5e:65:f0:ee:33:
                    cd:e0:c5:a4:5a:d9:87:ad:ca:bf:55:1a:8b:2d:3b:
                    78:4d:17:72:82:c6:e0:60:dc:a8:50:7b:76:f3:dd:
                    69:f6:b4:ca:fd:c7:ee:19:e1:05:99:a2:c1:69:f4:
                    a1:14:29:44:cc:29:98:68:4f:a4:a0:83:9d:77:fe:
                    89:f6:82:f5:16:69:1b:62:14:8d:38:47:a6:d2:28:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7C:4E:E2:E6:17:04:62:47:D0:BC:6D:1A:DF:D6:AA:0C:63:DA:62
            X509v3 Authority Key Identifier:
                keyid:F1:41:3B:C3:D5:97:60:1D:5C:CA:E4:A0:04:89:83:DE:DA:CE:E5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/3133382e3132322e3137322e302f32322d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:1e:41:f2:fb:81:b1:1e:da:2e:b3:dd:66:9d:96:7d:f5:b0:
         90:75:40:2d:1f:ca:b7:d7:45:27:8d:9c:6b:a3:7a:f3:09:63:
         5e:66:47:49:38:68:bf:25:5f:40:d3:eb:13:b6:76:f4:35:e7:
         86:87:e7:21:9f:7b:ea:99:67:f0:5a:d2:53:b0:87:96:df:a6:
         95:be:94:6c:39:de:57:3f:fd:a3:4e:c8:e7:f1:83:b2:cb:a1:
         89:76:af:bf:29:96:d9:56:46:24:9d:6d:03:a4:dc:73:e9:aa:
         c1:89:ef:08:7c:14:20:8e:c5:9a:d4:94:85:f2:15:a3:7a:85:
         4a:e5:81:f0:a0:21:da:4d:2e:35:68:5d:af:47:86:cd:af:50:
         5b:f5:62:e8:c8:94:b8:d0:56:6b:1b:d4:1a:8f:ef:38:42:8a:
         ba:7b:5e:e4:d2:58:ab:f1:8e:ba:0a:8d:ee:88:74:7b:3e:bc:
         3a:bc:44:f5:42:e1:ff:7e:23:fc:b6:f3:27:f5:e7:df:a0:66:
         32:b6:27:53:d0:bb:c7:a9:8e:e7:11:9e:c1:13:5f:1d:8b:42:
         43:5f:a0:3b:1f:c2:c3:87:83:f4:b3:70:d9:87:08:83:bf:31:
         dd:eb:60:63:96:24:2b:3d:9e:6d:db:19:2c:57:e6:0b:27:89:
         7c:74:93:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:45:35 2025 by rpki-client