Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa
File:                     3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa (raw, json)
Hash identifier:          +ECSCCH5YRr7klkx2vh85cYXAGDn1UwvbvGNUzVuOHs=
Subject key identifier:   92:C0:65:AD:21:4D:6C:86:42:C4:28:AB:63:14:5E:46:41:3E:51:89
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       0702DE60A6F6C1EE0572EFC03BA008E84A12C011
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa
Signing time:             Tue 15 Jul 2025 11:57:30 +0000
ROA not before:           Tue 15 Jul 2025 11:52:30 +0000
ROA not after:            Tue 14 Jul 2026 11:57:30 +0000
asID:                     263321
IP address blocks:        138.117.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
                          rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 03:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:02:de:60:a6:f6:c1:ee:05:72:ef:c0:3b:a0:08:e8:4a:12:c0:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Jul 15 11:52:30 2025 GMT
            Not After : Jul 14 11:57:30 2026 GMT
        Subject: CN=92C065AD214D6C8642C428AB63145E46413E5189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1b:b6:26:46:d0:68:6f:f7:a7:05:a2:2d:a2:
                    00:cd:3b:89:7b:39:28:dd:8f:ef:d4:9a:7f:7e:09:
                    1a:16:26:af:f7:9f:3d:5f:43:c6:b5:a2:b2:92:7b:
                    9c:92:6d:c3:b8:af:99:c2:05:0b:97:04:24:7b:e1:
                    25:30:19:25:ab:30:29:82:71:43:7b:97:24:1b:12:
                    74:a1:77:14:0e:b8:9a:cf:1c:8b:1a:31:c4:3a:d0:
                    fc:10:36:fb:d6:0a:25:7c:3e:14:22:96:7f:65:b0:
                    eb:94:46:d8:bc:ad:e1:61:35:f1:1a:14:39:da:87:
                    78:8b:12:61:52:5e:a6:86:3a:51:54:07:aa:71:a6:
                    44:54:46:a8:dd:a2:3f:af:3f:e4:bc:73:40:84:e7:
                    34:eb:ef:14:60:83:94:06:ec:b8:f6:2d:82:a9:cd:
                    10:fe:df:2e:66:27:bb:62:af:08:bc:05:dc:f3:b8:
                    1d:64:74:6d:51:5c:c6:76:68:b5:3e:a4:9d:3f:b2:
                    19:89:f8:9e:d8:c7:01:72:bf:02:10:74:9d:31:84:
                    2e:f6:b2:9c:a7:38:f2:51:1f:2b:51:fc:f6:91:50:
                    7d:4d:3a:3e:bb:e6:1a:bb:03:23:99:ac:0c:57:c6:
                    6e:b3:9f:4e:72:e8:54:10:8b:40:81:88:a7:d7:a2:
                    08:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C0:65:AD:21:4D:6C:86:42:C4:28:AB:63:14:5E:46:41:3E:51:89
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:b6:6c:b3:40:f1:ff:93:3a:db:cc:3f:18:d5:e7:ab:5f:fe:
         52:73:15:aa:ba:9f:36:99:60:6d:9a:8c:ae:fa:e1:a3:15:95:
         7f:08:7d:66:2e:bc:4b:7c:07:f8:28:6d:1e:05:c0:33:42:9b:
         c1:2c:22:aa:f0:33:3f:c5:f0:32:16:b9:37:42:e4:98:f8:8d:
         bb:11:38:77:ce:d3:6e:62:c9:65:c5:57:cd:70:f6:f2:58:f7:
         3b:73:04:a0:9e:fe:87:df:77:64:e9:fe:d0:19:44:9d:aa:2e:
         d4:65:18:1b:2d:c1:94:37:8d:bf:ed:5d:9d:e8:c5:07:47:87:
         25:c6:c1:00:39:21:53:2f:c8:ce:b4:ab:92:00:19:1d:79:39:
         d1:ad:f9:48:10:3d:69:cf:c6:e0:51:30:5c:98:0b:70:0b:f8:
         9d:74:2a:0e:91:cc:19:8c:56:c6:6a:06:c6:2a:b7:d8:28:83:
         91:68:4a:f3:7b:2f:10:26:dd:db:c7:8f:de:19:a1:80:c5:92:
         93:6e:00:f9:d4:95:fb:ae:ac:36:9d:0d:88:bd:1a:c9:c3:5f:
         85:38:10:9a:f8:fa:b2:04:61:e2:fd:f4:22:ae:01:cb:b8:c1:
         89:6e:0f:f9:6b:a4:86:83:a8:90:53:c9:17:86:f2:37:83:15:
         92:85:ee:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:48:36 2025 by rpki-client