Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3133382e35392e3135302e302f32342d3234203d3e203238313635.roa
File:                     3133382e35392e3135302e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          y5OQFwGmwicIq+ELi5gPaFJC0JGQpFo4bGia6yii4MU=
Subject key identifier:   46:87:A8:62:FD:DB:04:A1:35:70:6B:C2:14:D6:EB:F9:DC:7E:76:2E
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       0CE246ED90490FFEE2ACBF277118045989A70034
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3133382e35392e3135302e302f32342d3234203d3e203238313635.roa
Signing time:             Tue 29 Jul 2025 14:08:17 +0000
ROA not before:           Tue 29 Jul 2025 14:03:17 +0000
ROA not after:            Tue 28 Jul 2026 14:08:17 +0000
asID:                     28165
IP address blocks:        138.59.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 09:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e2:46:ed:90:49:0f:fe:e2:ac:bf:27:71:18:04:59:89:a7:00:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jul 29 14:03:17 2025 GMT
            Not After : Jul 28 14:08:17 2026 GMT
        Subject: CN=4687A862FDDB04A135706BC214D6EBF9DC7E762E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:84:ea:60:52:94:5a:89:1a:8e:37:5b:2c:
                    7f:4e:21:8e:4a:ed:ed:65:a1:29:07:78:84:a9:65:
                    32:92:2c:b1:3c:8f:a2:f7:bd:49:6f:c4:c7:c0:48:
                    02:d4:19:ef:d4:89:72:cd:32:8b:0b:e5:eb:f7:b8:
                    23:1f:3a:45:f6:56:f6:cd:ed:d4:53:71:e1:53:b5:
                    76:c1:26:be:6a:dc:26:9f:e1:ee:15:66:05:a2:77:
                    3c:df:f2:f7:0c:cd:76:b2:aa:b3:2f:bc:c5:b0:6c:
                    48:23:f7:5e:bc:a8:48:96:54:a0:46:b1:8c:b7:f4:
                    07:45:bd:44:d7:0d:22:77:ca:72:89:b4:f5:77:92:
                    9f:93:e7:50:f3:d2:5c:c6:63:34:0e:eb:b8:95:b1:
                    be:6f:bd:fe:c3:fa:9d:d1:a1:71:fe:17:98:4b:29:
                    97:ad:de:a6:43:08:43:cd:ab:67:d2:66:5b:ae:9d:
                    08:89:a9:17:ac:0b:2a:48:e9:cf:fd:90:95:e2:c7:
                    3e:e3:84:c5:08:28:7f:5b:3a:ad:4e:43:30:96:21:
                    76:88:cb:81:40:55:ee:7f:6c:92:23:be:b7:08:8a:
                    cd:b6:60:f8:25:d9:92:50:df:7a:94:2b:b8:57:e5:
                    9e:db:c1:67:13:b1:c5:57:03:19:e8:62:93:ee:1c:
                    c3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:87:A8:62:FD:DB:04:A1:35:70:6B:C2:14:D6:EB:F9:DC:7E:76:2E
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3133382e35392e3135302e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:bc:e3:54:5c:6d:7f:17:9b:4a:80:2e:87:85:cf:7d:71:5c:
         fe:95:4b:ae:3c:b7:26:f4:b3:05:3b:7e:7d:93:5b:b9:bc:7c:
         19:e8:9f:36:bd:52:b5:b8:71:92:87:49:5e:32:5c:54:b2:05:
         ef:38:31:09:7d:72:38:b2:fe:af:23:1c:74:cd:e5:26:ce:be:
         fd:e6:3e:b0:3a:93:42:4e:88:2b:df:86:6e:a9:1e:47:61:66:
         5a:5b:cd:46:42:bc:ed:e8:0b:9a:55:f0:b3:64:06:ae:68:2b:
         d2:46:da:4b:7a:71:0e:a8:1f:75:68:63:4c:18:b0:d2:1f:88:
         c2:26:af:ee:ce:db:09:45:e8:16:47:fb:4a:54:c2:d2:4c:cb:
         87:e1:5c:ce:64:1f:50:bf:9a:dc:8e:f8:ae:4e:4c:d0:99:f2:
         7d:90:a3:81:84:44:7a:8f:d9:53:59:e1:b4:28:e5:04:aa:47:
         fe:18:43:a1:24:40:ad:65:4f:40:14:2d:4b:2f:8c:32:95:01:
         c4:2b:ad:89:78:6c:c7:ad:31:3a:b7:44:4a:7c:e5:8c:c1:c3:
         13:97:3b:63:b8:6d:c4:66:e4:6c:ae:5a:7a:a2:48:e6:42:78:
         7d:8a:f9:d2:0f:ea:0f:1e:a9:32:4c:d1:a8:14:86:3d:19:d1:
         94:54:34:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:14:02 2025 by rpki-client