Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3133382e3132322e3136382e302f32322d3332203d3e20323632393532.roa
File:                     3133382e3132322e3136382e302f32322d3332203d3e20323632393532.roa (raw, json)
Hash identifier:          YKZHAUFLruoX1b1sPZOVvnVfGH76ZFUzK17iivehO8M=
Subject key identifier:   85:08:4E:5A:B2:08:4B:32:D9:16:31:32:BC:7F:8B:40:21:43:83:E0
Certificate issuer:       /CN=4F91864780E3C640327E24B527D2248C0C5CAD25
Certificate serial:       2B47E77EB58D4C0F4D8EC6B40320E3825C5732CA
Authority key identifier: 4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3133382e3132322e3136382e302f32322d3332203d3e20323632393532.roa
Signing time:             Tue 12 Aug 2025 12:40:17 +0000
ROA not before:           Tue 12 Aug 2025 12:35:17 +0000
ROA not after:            Tue 11 Aug 2026 12:40:17 +0000
asID:                     262952
IP address blocks:        138.122.168.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl
                          rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 02:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:47:e7:7e:b5:8d:4c:0f:4d:8e:c6:b4:03:20:e3:82:5c:57:32:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F91864780E3C640327E24B527D2248C0C5CAD25
        Validity
            Not Before: Aug 12 12:35:17 2025 GMT
            Not After : Aug 11 12:40:17 2026 GMT
        Subject: CN=85084E5AB2084B32D9163132BC7F8B40214383E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:f3:73:c3:80:ca:98:ab:43:db:e5:08:b6:
                    85:ab:a9:c3:22:fa:57:b2:9f:8e:cc:46:af:a8:91:
                    f5:65:fb:ef:12:4d:28:dc:39:b0:59:4d:b6:52:34:
                    90:f6:a8:86:4c:c8:de:38:0f:dd:56:b9:f5:94:5c:
                    22:33:26:d7:1d:ae:4e:8c:2e:af:2f:50:8a:92:ee:
                    f9:3f:72:84:13:80:d6:95:d0:37:fd:37:ab:11:1e:
                    3d:1a:3e:cf:22:b1:b6:3c:2a:d8:06:3c:86:f3:6c:
                    c9:7f:b8:15:e7:43:65:28:58:34:5d:77:c4:66:c3:
                    cd:66:f6:bb:8c:12:8c:be:27:f7:05:56:b8:5f:6c:
                    fd:69:2c:02:0c:48:6d:9e:67:fe:63:6c:b1:3b:00:
                    fa:35:ae:60:50:eb:04:00:b6:d1:e7:5a:95:64:f0:
                    af:23:c0:af:81:06:bb:bd:87:ff:28:f3:bc:11:2a:
                    c3:05:2a:44:26:fa:9b:5a:92:9a:f8:c5:00:64:e1:
                    75:a7:97:33:4d:ce:85:f8:8d:72:42:53:04:da:e8:
                    15:0a:e4:c5:d1:a6:5d:34:d0:26:a0:82:fb:8a:3b:
                    3e:5f:96:12:fd:3c:b9:d7:51:9b:cd:b6:03:64:27:
                    ad:7b:ae:26:1c:de:42:fd:ff:fc:68:08:2f:65:02:
                    96:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:08:4E:5A:B2:08:4B:32:D9:16:31:32:BC:7F:8B:40:21:43:83:E0
            X509v3 Authority Key Identifier:
                keyid:4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3133382e3132322e3136382e302f32322d3332203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:ad:ee:fb:3d:96:79:4a:69:67:0b:b9:08:3c:bf:e4:fb:3f:
         0b:78:ff:79:d8:0e:28:8d:15:b1:9a:7d:3a:9f:43:ec:48:93:
         45:dd:2b:1e:ba:24:32:74:93:b6:57:0c:59:38:d4:f8:37:6d:
         5d:22:94:2f:45:99:61:34:0f:7d:a4:1e:84:bd:2e:65:72:98:
         bc:ee:fb:cc:68:63:65:b5:72:1d:58:0f:2b:bc:c4:c4:ba:ed:
         e7:af:b3:99:dc:1d:a4:1e:1d:ed:5c:d9:f9:d1:ca:c4:ea:de:
         b2:fd:45:38:a0:0a:ad:5d:a9:0b:41:92:41:b5:29:6b:af:d5:
         4d:da:21:11:05:e4:71:17:3c:f4:3c:ee:11:a7:98:2a:0d:88:
         65:30:5a:67:29:4b:ed:c2:0b:c4:32:31:de:70:bb:fb:c9:f3:
         70:c4:00:c1:40:ad:ca:1a:2b:71:ee:79:60:13:52:be:be:bb:
         36:3d:41:fe:3d:4f:05:74:b1:13:f4:89:0e:07:70:e4:aa:1a:
         c4:93:ec:94:98:90:38:cf:6a:78:9c:9e:b7:a0:fb:8d:4c:f5:
         6f:33:8d:d7:58:08:04:44:97:13:c0:65:26:88:5b:64:a1:19:
         f3:dd:2c:99:08:cf:69:6c:a9:af:ab:b1:60:5f:bb:da:0f:20:
         78:27:d4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:35:03 2025 by rpki-client