Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3332203d3e20323634353631.roa
File:                     3133382e302e3235322e302f32322d3332203d3e20323634353631.roa (raw, json)
Hash identifier:          R+6r4b8OIzidquIgjdUAVoA9QrwhK8x5+/vrtsMJMzA=
Subject key identifier:   CB:F8:E3:82:08:44:C8:0E:07:15:58:14:59:BC:64:AA:66:8A:27:30
Certificate issuer:       /CN=83F178570844213DA4956E726863AF8BF0E6CC68
Certificate serial:       71BF468210DC81222F843A1D3BE24825787A5324
Authority key identifier: 83:F1:78:57:08:44:21:3D:A4:95:6E:72:68:63:AF:8B:F0:E6:CC:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F178570844213DA4956E726863AF8BF0E6CC68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3332203d3e20323634353631.roa
Signing time:             Tue 15 Jul 2025 12:00:39 +0000
ROA not before:           Tue 15 Jul 2025 11:55:39 +0000
ROA not after:            Tue 14 Jul 2026 12:00:39 +0000
asID:                     264561
IP address blocks:        138.0.252.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/83F178570844213DA4956E726863AF8BF0E6CC68.crl
                          rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/83F178570844213DA4956E726863AF8BF0E6CC68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F178570844213DA4956E726863AF8BF0E6CC68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:bf:46:82:10:dc:81:22:2f:84:3a:1d:3b:e2:48:25:78:7a:53:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F178570844213DA4956E726863AF8BF0E6CC68
        Validity
            Not Before: Jul 15 11:55:39 2025 GMT
            Not After : Jul 14 12:00:39 2026 GMT
        Subject: CN=CBF8E3820844C80E0715581459BC64AA668A2730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:af:80:c9:ad:6b:ce:ba:af:5c:e9:eb:f4:4e:
                    55:98:9d:22:79:86:ed:eb:01:09:70:84:15:26:68:
                    de:a5:08:77:b4:f7:33:1d:0d:cf:7e:74:b6:99:08:
                    09:2d:c6:a1:d6:b4:c0:1c:8f:ca:51:e0:65:d6:f3:
                    ff:73:56:30:40:44:a9:14:0d:fe:1b:fb:28:88:30:
                    e5:cf:da:ae:ae:63:f6:00:55:8c:fa:cb:a5:b2:14:
                    1a:1d:4f:a1:27:ed:39:be:a1:50:fc:b5:ca:07:51:
                    b1:a8:1e:75:b4:9c:68:bc:05:05:63:b1:3e:91:c8:
                    e8:96:93:45:f2:75:42:86:81:5d:ed:9e:21:02:dc:
                    e9:46:c7:04:97:70:9c:05:a4:49:70:c5:15:17:cc:
                    ab:82:7e:af:ff:4e:71:b7:87:d0:2b:da:03:15:a9:
                    de:07:81:69:e9:df:f6:5a:94:01:df:63:24:44:e1:
                    22:3e:87:49:c5:01:79:b3:41:b2:62:d4:0f:81:df:
                    1c:e0:55:c1:13:12:cd:38:fb:c0:77:f8:38:dd:6c:
                    c4:2d:65:6e:d9:89:75:9d:8e:6e:49:ef:a6:45:6d:
                    1f:cf:0d:5d:50:18:38:13:49:de:2e:1f:37:83:f3:
                    8b:73:7f:0a:c2:f3:cb:bc:6a:5a:40:2b:45:fc:5f:
                    49:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F8:E3:82:08:44:C8:0E:07:15:58:14:59:BC:64:AA:66:8A:27:30
            X509v3 Authority Key Identifier:
                keyid:83:F1:78:57:08:44:21:3D:A4:95:6E:72:68:63:AF:8B:F0:E6:CC:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/83F178570844213DA4956E726863AF8BF0E6CC68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F178570844213DA4956E726863AF8BF0E6CC68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3332203d3e20323634353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:44:86:92:66:0e:a3:b8:b2:99:1b:15:c6:ec:7b:3b:c9:a4:
         7c:83:8b:ca:be:1f:f9:46:f3:fa:17:05:6d:ec:7c:fd:8f:60:
         ef:e0:26:3e:6f:cc:ef:6f:fc:f8:a4:cf:5e:86:8e:84:a9:4b:
         79:d6:a2:1c:d8:11:c7:84:71:9b:b2:b1:11:05:e7:36:6e:71:
         ce:83:61:66:d5:67:de:8e:ad:6e:5d:d5:32:5b:74:30:c5:89:
         02:1d:ab:47:ca:a9:c2:0c:c7:b2:f0:0e:05:4a:7d:5e:0e:7b:
         74:c4:de:e6:c1:b6:e7:83:74:1e:5d:3c:12:b5:64:10:06:6e:
         ac:41:d4:9f:7e:ed:b3:8f:61:5a:58:9f:6b:c0:86:02:0b:a8:
         23:1c:3e:bb:b0:c9:66:01:c7:ba:9d:d3:94:ca:54:68:1e:c5:
         6c:27:e5:c0:1b:cc:01:b4:9c:f4:f8:c9:d6:1a:58:5b:1a:f4:
         c8:a6:9c:82:59:d3:75:d1:04:33:07:b0:19:fa:ae:92:2e:e3:
         33:d8:51:78:4b:f7:c5:32:ab:72:69:47:43:57:ab:f8:83:60:
         39:0d:93:d2:b6:e1:c7:26:d8:fb:40:63:cc:fa:c3:0b:27:5b:
         61:5a:dc:bb:a2:e9:ed:74:1c:77:60:54:1f:49:b4:ee:d4:91:
         57:a5:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:51:30 2025 by rpki-client