Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234312e302f32342d3234203d3e20323633393230.roa
File:                     3133382e3138352e3234312e302f32342d3234203d3e20323633393230.roa (raw, json)
Hash identifier:          WLyJPpW/RhefJCbfVpwMun3QfCQU0tbzDHnWziwzN0g=
Subject key identifier:   F5:20:2A:40:1A:F6:6D:A0:56:CE:3A:28:38:CB:40:69:59:89:4C:C4
Certificate issuer:       /CN=C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B
Certificate serial:       336814D7382ECB290D5DC14ECB55DB6345CB8F06
Authority key identifier: C8:68:A6:8B:2B:0C:AA:98:D2:EE:3E:E6:87:3F:60:BE:9E:33:BD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234312e302f32342d3234203d3e20323633393230.roa
Signing time:             Fri 15 Aug 2025 14:51:28 +0000
ROA not before:           Fri 15 Aug 2025 14:46:28 +0000
ROA not after:            Fri 14 Aug 2026 14:51:28 +0000
asID:                     263920
IP address blocks:        138.185.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 02:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:68:14:d7:38:2e:cb:29:0d:5d:c1:4e:cb:55:db:63:45:cb:8f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B
        Validity
            Not Before: Aug 15 14:46:28 2025 GMT
            Not After : Aug 14 14:51:28 2026 GMT
        Subject: CN=F5202A401AF66DA056CE3A2838CB406959894CC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:72:f3:3e:20:67:df:4a:11:98:90:dd:32:b5:
                    89:ed:31:7e:dc:13:c0:93:34:4c:9f:54:b3:28:e2:
                    25:e1:f2:87:38:e3:6c:a3:db:c7:8f:b1:e9:c5:c0:
                    73:c1:5e:0b:d8:94:cb:1a:a7:6f:d2:3b:9a:49:8d:
                    4e:4c:7f:0c:25:5b:32:de:46:ab:ff:55:96:c9:a0:
                    a1:3b:7e:f5:3e:89:3d:f3:12:86:2c:3f:7a:61:9c:
                    0e:e6:0b:d0:e8:c9:b8:ad:4b:19:35:bb:55:7d:ac:
                    56:78:22:bd:7d:5d:31:bc:67:f9:8d:40:54:37:e0:
                    ec:c7:ac:cd:f7:1e:dc:3e:14:f2:61:a3:37:a7:35:
                    76:a4:47:53:f9:fc:83:57:d2:7b:66:3c:4f:a2:0d:
                    97:4c:4b:ec:22:98:12:de:95:9c:0d:d3:4d:f4:8f:
                    dd:0d:69:df:c4:37:40:b2:35:cc:3b:9c:95:9b:a6:
                    f7:81:3c:ab:2b:55:ed:83:7b:d2:e5:8f:d4:42:2c:
                    01:87:af:85:73:12:3c:26:7d:49:c6:34:ff:7c:f9:
                    b5:f6:36:2b:2a:4a:2a:7b:a6:1b:d7:c1:7a:41:93:
                    ef:3c:0f:b4:71:6b:e6:45:fd:47:9d:45:ee:19:5f:
                    a5:2b:eb:9a:d6:c5:b5:93:4a:05:40:14:a2:f9:b4:
                    d3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:20:2A:40:1A:F6:6D:A0:56:CE:3A:28:38:CB:40:69:59:89:4C:C4
            X509v3 Authority Key Identifier:
                keyid:C8:68:A6:8B:2B:0C:AA:98:D2:EE:3E:E6:87:3F:60:BE:9E:33:BD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234312e302f32342d3234203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:f7:0e:16:ea:be:e5:b5:43:66:3f:43:2f:70:8b:06:c4:58:
         1d:53:29:4c:76:25:ba:d0:3d:8a:c8:6c:b6:ed:34:9d:1b:c6:
         50:45:b0:55:fb:bd:37:a4:70:7e:8d:09:fc:2d:2d:f5:62:cb:
         f0:8e:e8:55:6b:a3:29:4c:5f:b8:32:ab:d9:2a:4e:93:dd:a9:
         ce:b1:7c:76:6a:41:7f:d6:17:52:2c:5f:e5:25:bb:dc:35:a1:
         4d:a8:1c:68:8d:da:45:7a:35:29:9d:96:a0:2c:cb:7b:bd:30:
         a8:fc:5c:f7:aa:ae:6a:7c:b3:46:83:a4:84:dd:85:a4:c2:1e:
         6b:74:58:d8:ad:cc:27:30:80:0b:7e:d9:bf:30:c8:37:2f:5e:
         14:35:4e:20:25:09:1e:f3:6c:db:d8:4f:9b:dc:57:f9:03:6c:
         95:28:56:9f:0e:27:9e:b9:93:55:91:e7:e9:08:66:20:6f:17:
         b6:43:10:52:0a:f8:09:11:83:0b:5c:71:c9:5c:aa:4b:1c:da:
         61:26:73:9a:2c:5a:35:f3:b3:16:e6:a4:b3:6c:19:6b:af:54:
         90:a8:da:a0:eb:c4:38:5e:46:f3:66:c7:fa:a7:63:7b:42:16:
         77:d9:93:28:09:cd:4b:35:42:c4:2b:9c:be:34:68:31:da:8a:
         9e:9b:1e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:57:53 2025 by rpki-client