Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/3133322e3235352e34302e302f32322d3234203d3e203631393038.roa
File:                     3133322e3235352e34302e302f32322d3234203d3e203631393038.roa (raw, json)
Hash identifier:          ivGb7kFrN/xXnPSxmz8bTdaUJWDWXTxf6Qa16j3bHGA=
Subject key identifier:   7F:98:FD:95:09:E5:73:BB:34:47:AA:72:60:3D:45:06:80:A0:75:38
Certificate issuer:       /CN=BB0E18F43E99502212097842E9F81169A8D29D2E
Certificate serial:       062B8F25C282496A21230E5508C1B1AECA58A514
Authority key identifier: BB:0E:18:F4:3E:99:50:22:12:09:78:42:E9:F8:11:69:A8:D2:9D:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0E18F43E99502212097842E9F81169A8D29D2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/3133322e3235352e34302e302f32322d3234203d3e203631393038.roa
Signing time:             Mon 15 Sep 2025 00:33:21 +0000
ROA not before:           Mon 15 Sep 2025 00:28:21 +0000
ROA not after:            Mon 14 Sep 2026 00:33:21 +0000
asID:                     61908
IP address blocks:        132.255.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.crl
                          rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0E18F43E99502212097842E9F81169A8D29D2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2b:8f:25:c2:82:49:6a:21:23:0e:55:08:c1:b1:ae:ca:58:a5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB0E18F43E99502212097842E9F81169A8D29D2E
        Validity
            Not Before: Sep 15 00:28:21 2025 GMT
            Not After : Sep 14 00:33:21 2026 GMT
        Subject: CN=3082010A0282010100A12700048FDD5C179C88594695D13D49EC25B7EEDE968E621234F5AF108BBAFBFC54DAF2210B91119DE1A32F73D07F1C7BE1FBE74BE882AD427C0A06439FD543BFF27F8FAD1C490B9049944F219A531EB5D126CB016A93998EA36611D9F7E9E6033B9E4487E9D1EFA103BB0FDB57AD6FDE0F9FA2A01F4524B3DC8BACDFF9A5C08F70AB4FAEE40E6EE9313BEE63A27ACBA65BBE4A261DBB5B7C9C1CCB1DC9D6A01F8B02ECFBE6A2E8F0E2A8B35A56ECAD4E59C9C0A0CE76CE825ED5FCC15623B4F0AB2E7D571D465CE43D455EEB63CA5884A524B7CA622655F85B4586E7BD6B0AF52736CF56C4B3E245CCB4228AAA3CB400A7A8A78AE0E94E35BB5ACBA97724070203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:00:04:8f:dd:5c:17:9c:88:59:46:95:d1:
                    3d:49:ec:25:b7:ee:de:96:8e:62:12:34:f5:af:10:
                    8b:ba:fb:fc:54:da:f2:21:0b:91:11:9d:e1:a3:2f:
                    73:d0:7f:1c:7b:e1:fb:e7:4b:e8:82:ad:42:7c:0a:
                    06:43:9f:d5:43:bf:f2:7f:8f:ad:1c:49:0b:90:49:
                    94:4f:21:9a:53:1e:b5:d1:26:cb:01:6a:93:99:8e:
                    a3:66:11:d9:f7:e9:e6:03:3b:9e:44:87:e9:d1:ef:
                    a1:03:bb:0f:db:57:ad:6f:de:0f:9f:a2:a0:1f:45:
                    24:b3:dc:8b:ac:df:f9:a5:c0:8f:70:ab:4f:ae:e4:
                    0e:6e:e9:31:3b:ee:63:a2:7a:cb:a6:5b:be:4a:26:
                    1d:bb:5b:7c:9c:1c:cb:1d:c9:d6:a0:1f:8b:02:ec:
                    fb:e6:a2:e8:f0:e2:a8:b3:5a:56:ec:ad:4e:59:c9:
                    c0:a0:ce:76:ce:82:5e:d5:fc:c1:56:23:b4:f0:ab:
                    2e:7d:57:1d:46:5c:e4:3d:45:5e:eb:63:ca:58:84:
                    a5:24:b7:ca:62:26:55:f8:5b:45:86:e7:bd:6b:0a:
                    f5:27:36:cf:56:c4:b3:e2:45:cc:b4:22:8a:aa:3c:
                    b4:00:a7:a8:a7:8a:e0:e9:4e:35:bb:5a:cb:a9:77:
                    24:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:98:FD:95:09:E5:73:BB:34:47:AA:72:60:3D:45:06:80:A0:75:38
            X509v3 Authority Key Identifier:
                keyid:BB:0E:18:F4:3E:99:50:22:12:09:78:42:E9:F8:11:69:A8:D2:9D:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0E18F43E99502212097842E9F81169A8D29D2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/3133322e3235352e34302e302f32322d3234203d3e203631393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:e8:10:80:16:b4:18:3c:ae:75:9d:fe:65:81:58:da:a0:ce:
         09:07:52:ff:9c:ab:d5:fa:f3:0b:99:5e:6d:f2:c2:8e:84:76:
         3a:07:04:44:88:c6:1d:55:c4:c5:9a:d0:6d:cc:3a:4b:d1:4a:
         1a:9c:9f:b9:dc:96:c0:4b:63:e4:f6:7f:52:27:dd:55:84:de:
         75:1c:53:38:c0:6b:8b:a5:73:7a:dd:7d:ed:47:f8:5f:3f:8f:
         0e:86:00:a3:c4:22:ff:f2:b0:09:6a:ef:b2:cc:ca:d3:df:c8:
         47:70:75:c8:ae:27:e1:a6:68:05:b6:d8:52:eb:5a:ea:88:c9:
         b6:10:82:1e:9f:82:fc:9c:90:43:73:dc:09:9c:0c:ec:5e:58:
         e0:ca:9b:38:3e:5c:62:1c:5d:04:a2:dd:3c:28:97:49:9c:1b:
         1b:fa:23:e6:52:7f:11:cb:54:ce:9d:46:e5:8a:8b:a1:ee:32:
         3c:e4:ae:eb:47:d4:1b:01:e8:59:1b:b5:64:16:82:41:25:a5:
         13:bf:c0:73:56:f6:63:4c:15:bc:16:fe:96:aa:a4:ba:e8:cd:
         2d:20:1f:57:87:8c:d5:78:42:b1:b3:95:90:5e:0c:15:9f:47:
         04:d2:45:09:67:c8:68:13:63:e9:81:0f:29:c1:5d:f7:ed:94:
         a0:58:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:15:21 2025 by rpki-client