Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3133382e39392e38382e302f32322d3234203d3e20323730383134.roa
File:                     3133382e39392e38382e302f32322d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          +P+lsKjCZESCG5cdL485kQYO7g/NtAJLyCprZZ1eBd8=
Subject key identifier:   34:1B:A3:5F:17:C2:96:60:A4:D6:AC:0D:7C:83:00:D2:3D:12:0C:03
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       590A8AB7206D26F8D30262DB7C2AC619B3B893EB
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3133382e39392e38382e302f32322d3234203d3e20323730383134.roa
Signing time:             Mon 27 Oct 2025 17:06:42 +0000
ROA not before:           Mon 27 Oct 2025 17:01:42 +0000
ROA not after:            Mon 26 Oct 2026 17:06:42 +0000
asID:                     270814
IP address blocks:        138.99.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0a:8a:b7:20:6d:26:f8:d3:02:62:db:7c:2a:c6:19:b3:b8:93:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Oct 27 17:01:42 2025 GMT
            Not After : Oct 26 17:06:42 2026 GMT
        Subject: CN=341BA35F17C29660A4D6AC0D7C8300D23D120C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:80:b8:1f:c8:db:5d:69:86:42:13:d7:3b:f8:
                    98:04:42:27:55:04:3e:87:60:dc:f2:3c:64:bc:5b:
                    70:7f:7e:86:67:cb:48:b6:99:a6:8b:b2:86:95:e0:
                    0b:a3:94:bc:6e:37:8c:a9:d6:24:97:6b:ab:a3:19:
                    e6:57:bc:33:08:95:67:84:41:37:b4:30:0d:97:ee:
                    69:0c:f1:ee:1a:68:d3:44:73:b2:68:55:67:45:26:
                    d4:18:c2:8f:8b:5f:4f:e4:3e:7c:2f:6e:54:02:da:
                    06:23:e8:28:0b:54:4b:c2:b8:81:50:01:89:1c:e9:
                    1c:16:26:bf:1d:6e:12:cc:fe:66:65:54:a1:17:6b:
                    84:bb:87:4e:e6:3f:33:b9:86:de:36:9e:4f:44:26:
                    42:3c:1b:45:a1:9a:85:d4:ba:44:94:6e:f0:9b:52:
                    e4:70:a8:d7:e7:93:06:78:27:73:84:75:66:bb:5d:
                    a5:83:ae:18:15:6e:1b:cd:9e:09:61:e7:70:42:88:
                    c2:ae:3c:3d:6f:eb:cd:88:f3:27:40:bb:29:e6:50:
                    ed:21:94:09:80:cf:53:f3:ae:ba:63:12:56:d3:cd:
                    9a:67:4a:e8:64:c4:ec:ea:d8:b0:0a:b7:22:61:de:
                    ca:e8:08:77:6b:7b:b4:c9:72:ad:c1:b6:48:76:c2:
                    95:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1B:A3:5F:17:C2:96:60:A4:D6:AC:0D:7C:83:00:D2:3D:12:0C:03
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3133382e39392e38382e302f32322d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:21:59:03:ba:d0:4a:ee:a6:2a:02:16:10:bb:60:6c:f8:4c:
         bc:dd:f5:c8:c5:af:ff:d5:f9:c0:c9:17:b3:ef:56:a0:b3:38:
         8d:c1:25:e8:a8:71:e7:78:61:dd:1f:e9:90:bb:d9:0f:ec:cb:
         fd:cb:da:43:87:33:0b:e6:ed:8e:8c:cb:32:ae:26:32:42:97:
         d0:2c:2d:17:9b:bb:15:d6:58:90:66:39:0e:89:08:2d:c2:cf:
         9e:b2:d4:83:be:b9:40:fd:17:ab:7e:d3:8c:67:25:c4:4e:9d:
         17:f7:5a:6c:87:3e:48:9f:44:bc:da:13:ae:16:7b:3c:a0:dd:
         83:73:9a:4c:4f:45:3d:c7:d2:b9:ca:4f:2b:81:f7:56:93:74:
         17:a6:dd:9a:b7:27:8a:a0:68:fd:19:d8:a4:03:2b:cf:f0:f3:
         ee:35:eb:9a:04:09:16:f1:5b:bf:9d:0b:67:e7:16:fa:61:49:
         3c:41:8a:d2:0a:1d:d8:29:4e:48:a9:48:fa:42:75:b0:0a:1c:
         80:dc:bb:f5:2b:ab:4c:84:12:4e:0d:a6:a8:3d:0c:19:41:5f:
         ce:b3:a2:5d:e7:7a:44:e5:43:ae:4a:a3:dc:48:26:1c:f8:aa:
         51:25:9f:73:a1:02:0f:44:ed:53:e6:7b:6a:2d:82:1b:06:fd:
         64:77:d7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:31:26 2025 by rpki-client