Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234332e302f32342d3234203d3e20323633393230.roa
File:                     3133382e3138352e3234332e302f32342d3234203d3e20323633393230.roa (raw, json)
Hash identifier:          iVJno2DRUNvYOw0fi3CRClqrNAAnWQhLIERSk2jcYG0=
Subject key identifier:   43:BE:9B:63:B4:13:36:D1:4D:1F:07:F3:84:66:CE:F1:65:2B:C8:AE
Certificate issuer:       /CN=C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B
Certificate serial:       16BE147A26F039E4C0EF8BE64A3C91B7B05E9BE1
Authority key identifier: C8:68:A6:8B:2B:0C:AA:98:D2:EE:3E:E6:87:3F:60:BE:9E:33:BD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234332e302f32342d3234203d3e20323633393230.roa
Signing time:             Fri 15 Aug 2025 14:51:27 +0000
ROA not before:           Fri 15 Aug 2025 14:46:27 +0000
ROA not after:            Fri 14 Aug 2026 14:51:27 +0000
asID:                     263920
IP address blocks:        138.185.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 19:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:be:14:7a:26:f0:39:e4:c0:ef:8b:e6:4a:3c:91:b7:b0:5e:9b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B
        Validity
            Not Before: Aug 15 14:46:27 2025 GMT
            Not After : Aug 14 14:51:27 2026 GMT
        Subject: CN=43BE9B63B41336D14D1F07F38466CEF1652BC8AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3d:65:fc:75:18:df:2e:82:e9:9e:af:c6:23:
                    27:c9:7d:2c:a9:46:2d:2f:88:c1:c0:37:44:f0:38:
                    30:be:5d:ce:15:d8:da:ae:9b:d7:2a:9a:f1:2b:7f:
                    0d:6b:40:7e:11:32:6d:27:ee:4b:32:63:24:10:c2:
                    59:58:6d:f1:0e:a4:c7:94:28:d1:df:b4:b4:fe:66:
                    52:0f:f9:6f:22:00:42:d5:bb:58:5a:fc:f0:e1:99:
                    cc:7c:5d:14:28:4e:89:63:8c:fc:85:62:a5:33:56:
                    6a:42:f1:09:9d:46:bc:aa:88:80:55:91:cd:1e:f3:
                    f5:07:ed:d1:cb:33:c7:4d:74:14:41:ed:7b:d2:34:
                    ca:41:ea:38:e0:52:7f:04:7c:d8:2c:4b:f7:9d:54:
                    9a:6e:ea:85:ef:93:48:70:1d:80:d4:0e:96:e7:96:
                    48:34:4b:77:e1:79:bc:5e:ed:5b:e1:c9:a9:f6:e2:
                    38:c7:ac:9c:24:15:2f:f3:0d:a0:42:74:39:9a:1e:
                    4b:b0:ed:88:c1:cd:43:7f:55:0b:51:d9:27:09:f7:
                    be:2d:36:a3:82:f2:ec:c6:05:f1:44:5a:02:4a:bc:
                    88:6d:d5:2f:d0:3b:e5:0f:8b:f4:c2:72:ec:c2:57:
                    bb:3a:4f:22:cd:35:c8:2d:89:e8:a6:69:90:c3:ab:
                    7c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BE:9B:63:B4:13:36:D1:4D:1F:07:F3:84:66:CE:F1:65:2B:C8:AE
            X509v3 Authority Key Identifier:
                keyid:C8:68:A6:8B:2B:0C:AA:98:D2:EE:3E:E6:87:3F:60:BE:9E:33:BD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234332e302f32342d3234203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:00:ba:dd:cd:24:c1:f5:2e:ba:61:11:4f:3d:b4:d9:1e:7d:
         98:14:04:bf:23:44:03:5f:b5:19:ac:f5:59:67:14:b4:d7:e1:
         b5:74:7a:b1:ff:f6:d5:08:f6:94:b9:43:1b:ee:71:a0:ed:c4:
         24:43:23:2e:51:d5:bb:ac:20:c1:28:07:69:50:e1:35:dd:a4:
         c9:f5:cf:9a:71:31:25:ee:ca:6c:8f:3b:6a:4d:c1:06:d8:ed:
         fb:c3:48:3e:b4:b1:6e:e8:88:50:30:3d:3c:86:b0:92:d3:c9:
         e9:c0:89:c5:f8:f9:48:98:5f:0b:61:c8:84:2e:bb:83:7d:ff:
         97:a3:cd:f6:a2:fa:3f:58:1a:64:1e:6a:49:5b:d2:34:4c:a3:
         28:48:30:09:68:2b:81:7f:db:20:f7:90:0b:77:37:af:48:07:
         97:90:d1:92:ed:ee:8f:c2:c9:ac:43:fc:7b:26:7d:fa:85:9a:
         bd:d2:df:a2:22:f5:29:e6:70:dc:1b:9f:c0:bc:6c:31:e4:3e:
         9d:6e:68:16:9b:e0:40:c1:b8:86:b7:37:96:9f:25:70:8a:39:
         f3:4f:d0:1c:6a:36:c5:8c:03:05:f3:86:07:40:77:22:6f:77:
         bf:07:a0:27:ab:04:b1:6f:d9:2d:3b:17:76:52:a1:e6:59:d1:
         aa:3a:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:15:31 2025 by rpki-client