Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/3133382e3235352e35342e302f32332d3234203d3e20323730393430.roa
File:                     3133382e3235352e35342e302f32332d3234203d3e20323730393430.roa (raw, json)
Hash identifier:          LkaL+jWEvNmci3pfvjn9NQk7mxSxS/nnYjJDxnhWXxA=
Subject key identifier:   2B:44:72:16:F7:4D:93:25:DA:B3:3F:E1:33:BE:07:C1:C5:CA:A1:71
Certificate issuer:       /CN=72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0
Certificate serial:       5164A8B696143269DFC3051B1CEB8D67CD2619B2
Authority key identifier: 72:FC:DA:07:D7:D5:DB:A7:7F:CA:46:9D:40:F2:1D:81:57:F0:6A:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/3133382e3235352e35342e302f32332d3234203d3e20323730393430.roa
Signing time:             Thu 10 Jul 2025 16:40:33 +0000
ROA not before:           Thu 10 Jul 2025 16:35:33 +0000
ROA not after:            Thu 09 Jul 2026 16:40:33 +0000
asID:                     270940
IP address blocks:        138.255.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.crl
                          rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 18:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:64:a8:b6:96:14:32:69:df:c3:05:1b:1c:eb:8d:67:cd:26:19:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0
        Validity
            Not Before: Jul 10 16:35:33 2025 GMT
            Not After : Jul  9 16:40:33 2026 GMT
        Subject: CN=2B447216F74D9325DAB33FE133BE07C1C5CAA171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:fa:16:1d:fb:33:27:88:3e:07:fe:a6:bb:
                    b8:76:54:44:03:b3:d3:07:71:f5:dd:e8:36:b4:5e:
                    d8:ad:72:ae:ad:33:d4:a0:d9:eb:40:70:9b:c2:09:
                    cb:47:2c:59:b7:2b:29:e1:9e:08:d3:d6:49:06:6c:
                    87:12:29:1f:2b:da:41:90:a0:c1:7d:72:39:f7:93:
                    bb:db:f1:bc:1c:7d:23:2b:7c:de:3e:30:32:e4:78:
                    c1:d3:bf:d3:07:0d:02:93:cc:6a:61:0a:51:6a:55:
                    2a:30:67:c7:54:56:e7:14:4a:48:e6:75:e6:40:30:
                    7e:b1:b4:4b:16:a9:39:d9:e3:44:e0:46:3a:8e:f4:
                    c7:9a:d5:13:07:81:9d:23:71:1f:b8:1e:4a:80:ba:
                    82:e8:fa:b4:e1:cf:88:03:b4:b7:27:33:79:c9:95:
                    d4:2e:b2:a3:20:fe:18:95:27:fe:e1:6b:e9:32:e8:
                    c9:5a:97:15:53:ec:cb:da:7d:fb:e1:8e:80:e7:f7:
                    80:7a:be:fc:e9:1f:55:50:57:c2:31:e8:51:80:53:
                    88:a9:4d:08:09:36:a9:cc:11:ca:bd:cb:4b:9d:78:
                    7d:29:ac:e6:74:cc:d3:6c:50:a8:66:74:86:36:a2:
                    c4:42:cb:48:68:05:aa:a3:f1:09:16:70:36:25:55:
                    e8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:44:72:16:F7:4D:93:25:DA:B3:3F:E1:33:BE:07:C1:C5:CA:A1:71
            X509v3 Authority Key Identifier:
                keyid:72:FC:DA:07:D7:D5:DB:A7:7F:CA:46:9D:40:F2:1D:81:57:F0:6A:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/3133382e3235352e35342e302f32332d3234203d3e20323730393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:a9:8c:f0:a9:bd:db:c2:ae:a9:25:13:bc:a2:48:41:84:67:
         0a:38:31:fb:09:13:19:43:01:3e:74:b6:66:be:6e:d6:29:65:
         98:e9:b5:b7:5e:dc:29:9a:05:a3:a7:8a:4b:96:f8:4d:4a:d9:
         81:09:02:5e:48:68:53:56:53:d7:2c:8d:14:d4:24:cd:c2:b4:
         c6:7a:78:0d:30:d0:34:ff:37:00:40:44:e8:d4:ad:7d:96:67:
         bf:e8:77:ec:7e:5f:3e:c3:c9:9b:7c:61:dc:f4:b5:98:f2:51:
         33:f6:77:18:45:44:d0:0a:57:dc:cf:42:1c:08:ed:95:e5:b9:
         32:68:f8:15:4a:36:5a:83:1a:a7:3b:56:98:af:70:67:7f:14:
         d1:fd:48:1e:e0:e7:f4:54:0e:86:ce:08:eb:61:e8:2f:aa:ac:
         81:aa:88:00:1c:74:a0:d3:2c:76:ec:05:24:09:68:78:4d:bd:
         09:26:44:39:1c:2c:05:1b:47:68:8d:3c:22:4e:55:61:01:f1:
         5a:48:14:f6:1c:a2:58:1b:e6:29:1d:06:31:5d:2b:f7:00:6e:
         5b:55:a2:72:6f:66:a4:91:aa:8c:2f:a8:f7:6c:c0:9b:a3:28:
         42:d5:1c:23:d6:84:27:de:bf:80:f2:ce:55:44:ab:6f:a9:aa:
         fd:0d:70:f5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUWSotpYUMmnfwwUbHOuNZ80mGbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJGQ0RBMDdEN0Q1REJBNzdGQ0E0NjlENDBGMjFEODE1
N0YwNkFDMDAeFw0yNTA3MTAxNjM1MzNaFw0yNjA3MDkxNjQwMzNaMDMxMTAvBgNV
BAMTKDJCNDQ3MjE2Rjc0RDkzMjVEQUIzM0ZFMTMzQkUwN0MxQzVDQUExNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySPoWHfszJ4g+B/6mu7h2VEQD
s9MHcfXd6Da0Xtitcq6tM9Sg2etAcJvCCctHLFm3KynhngjT1kkGbIcSKR8r2kGQ
oMF9cjn3k7vb8bwcfSMrfN4+MDLkeMHTv9MHDQKTzGphClFqVSowZ8dUVucUSkjm
deZAMH6xtEsWqTnZ40TgRjqO9Mea1RMHgZ0jcR+4HkqAuoLo+rThz4gDtLcnM3nJ
ldQusqMg/hiVJ/7ha+ky6MlalxVT7MvaffvhjoDn94B6vvzpH1VQV8Ix6FGAU4ip
TQgJNqnMEcq9y0udeH0prOZ0zNNsUKhmdIY2osRCy0hoBaqj8QkWcDYlVegpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUK0RyFvdNkyXasz/hM74HwcXKoXEwHwYDVR0j
BBgwFoAUcvzaB9fV26d/ykadQPIdgVfwasAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHU3Z0JyeGVTRVBXZTQxajFBMmtSQUdpWG1qQ0Y0Zzljd3ltQVFVUmR6
c2ovMC83MkZDREEwN0Q3RDVEQkE3N0ZDQTQ2OUQ0MEYyMUQ4MTU3RjA2QUMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyRkNEQTA3RDdENURCQTc3
RkNBNDY5RDQwRjIxRDgxNTdGMDZBQzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh1N2dCcnhlU0VQV2U0MWoxQTJrUkFHaVhtakNGNGc5Y3d5bUFRVVJkenNqLzAv
MzEzMzM4MmUzMjM1MzUyZTM1MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3
MzAzOTM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGK/zYwDQYJKoZIhvcNAQELBQADggEBACupjPCp
vdvCrqklE7yiSEGEZwo4MfsJExlDAT50tma+btYpZZjptbde3CmaBaOnikuW+E1K
2YEJAl5IaFNWU9csjRTUJM3CtMZ6eA0w0DT/NwBAROjUrX2WZ7/od+x+Xz7DyZt8
Ydz0tZjyUTP2dxhFRNAKV9zPQhwI7ZXluTJo+BVKNlqDGqc7VpivcGd/FNH9SB7g
5/RUDobOCOth6C+qrIGqiAAcdKDTLHbsBSQJaHhNvQkmRDkcLAUbR2iNPCJOVWEB
8VpIFPYcolgb5ikdBjFdK/cAbltVonJvZqSRqowvqPdswJujKELVHCPWhCfev4Dy
zlVEq2+pqv0NcPU=
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:50:31 2025 by rpki-client