Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32332d3233203d3e20323633393230.roa
File:                     3133382e3138352e3234302e302f32332d3233203d3e20323633393230.roa (raw, json)
Hash identifier:          FA7pllzomTZtMxKRTRmnNiEG2GJ878cgSEVc9pJQBzs=
Subject key identifier:   FF:20:21:73:01:D9:0B:88:25:5A:6C:C7:2C:C1:DB:AB:38:65:EE:F0
Certificate issuer:       /CN=C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B
Certificate serial:       250A1EBD1C5EE146A2AD43BB836BB5E356C50098
Authority key identifier: C8:68:A6:8B:2B:0C:AA:98:D2:EE:3E:E6:87:3F:60:BE:9E:33:BD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32332d3233203d3e20323633393230.roa
Signing time:             Fri 15 Aug 2025 14:51:28 +0000
ROA not before:           Fri 15 Aug 2025 14:46:28 +0000
ROA not after:            Fri 14 Aug 2026 14:51:28 +0000
asID:                     263920
IP address blocks:        138.185.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 02:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0a:1e:bd:1c:5e:e1:46:a2:ad:43:bb:83:6b:b5:e3:56:c5:00:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B
        Validity
            Not Before: Aug 15 14:46:28 2025 GMT
            Not After : Aug 14 14:51:28 2026 GMT
        Subject: CN=FF20217301D90B88255A6CC72CC1DBAB3865EEF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:2f:bf:fb:e1:05:96:7f:7c:ce:31:25:d8:
                    7a:2b:1f:52:95:da:46:c1:dd:40:c2:5a:fc:f5:06:
                    8f:cb:17:f6:0d:98:f6:74:2d:31:7c:4e:45:91:a1:
                    7b:3b:0b:b8:69:b6:8f:42:b2:fb:2c:ab:79:b7:7e:
                    68:e5:6c:c1:dc:c2:d2:9b:02:23:7b:b4:8a:ad:2b:
                    34:8a:ef:df:db:a9:10:a8:2d:5c:7d:c3:75:02:ff:
                    cf:63:26:ac:55:51:e8:ce:15:8e:df:07:86:6f:47:
                    b3:6d:2b:b3:eb:2f:14:4a:41:ba:fa:da:62:a4:58:
                    9b:f7:dd:62:bf:17:80:0b:e6:25:0d:2a:3a:cd:1f:
                    fa:d0:28:c3:b1:84:16:4e:5f:e8:47:67:8f:3b:96:
                    23:7a:61:22:2e:08:dd:b2:0a:0e:b6:ff:59:ea:a0:
                    54:96:da:6f:15:3d:53:87:49:5f:32:94:bd:be:9e:
                    14:c9:96:55:ea:7c:b1:59:52:d0:b9:70:1b:05:c1:
                    11:75:c6:fa:f1:64:e0:87:1f:bb:76:09:98:b3:32:
                    1f:1b:22:24:e7:6b:b6:63:1b:d5:09:1c:2e:80:de:
                    7f:01:13:4e:1c:88:52:95:2b:2d:05:7a:a7:ff:a2:
                    d7:29:ee:57:5d:3c:39:52:93:6d:f6:41:8f:72:aa:
                    48:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:20:21:73:01:D9:0B:88:25:5A:6C:C7:2C:C1:DB:AB:38:65:EE:F0
            X509v3 Authority Key Identifier:
                keyid:C8:68:A6:8B:2B:0C:AA:98:D2:EE:3E:E6:87:3F:60:BE:9E:33:BD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32332d3233203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:60:f3:40:04:4a:9e:ae:97:8c:ad:78:a4:80:d8:5c:ee:05:
         6d:62:29:e0:15:00:1d:46:08:1a:1f:f8:21:9f:3f:08:72:d0:
         ea:e3:55:e0:a5:7a:c4:da:1d:b8:e3:dd:ad:89:d8:c0:24:a4:
         20:37:79:37:d2:04:2e:0f:3c:fa:80:b5:c3:eb:eb:be:15:0d:
         cc:20:77:8d:7f:64:3b:46:3e:fb:3b:a5:37:ef:78:35:7c:ac:
         68:6c:c3:f3:89:8e:c9:74:65:89:fd:3d:a0:24:e9:5f:d4:a4:
         7a:d9:54:89:c6:6d:41:3a:35:15:ff:8c:dd:a5:c7:d2:33:1d:
         71:f7:15:50:cc:50:21:9a:9e:5b:92:0d:f8:28:22:b1:6f:c3:
         61:94:c3:0c:87:7d:55:d1:06:07:56:62:ed:b5:aa:ae:0b:bd:
         03:ab:b2:e1:a2:ad:78:d0:5f:93:45:7a:1f:3a:8a:b7:61:3a:
         22:56:d9:d2:42:7b:c5:db:b1:7a:26:65:58:78:fc:98:70:9c:
         ea:0d:30:ed:52:73:a3:77:eb:04:3c:1f:2b:2b:71:85:d1:c4:
         65:18:c4:6e:76:17:47:eb:fc:67:28:2f:8a:de:b1:22:91:0b:
         93:c3:6f:17:d3:28:df:f3:32:32:b6:72:7a:d3:02:15:8e:dc:
         13:1b:d2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:57:54 2025 by rpki-client