Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38302e302f32322d3232203d3e203233373634.roa
File:                     3133312e3232312e38302e302f32322d3232203d3e203233373634.roa (raw, json)
Hash identifier:          o2gicGR8+tawneS+B7z10vc5Q82r21vF9GHc5+6+Fpw=
Subject key identifier:   0F:D4:5E:F1:FD:83:48:14:A9:EE:C7:B6:43:C8:8F:F4:36:89:FA:01
Certificate issuer:       /CN=213D61EA584763705A7243F87D26327EC5CA63B0
Certificate serial:       2D8436ABCFA511CA43AA277FC0D1162C615283E9
Authority key identifier: 21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38302e302f32322d3232203d3e203233373634.roa
Signing time:             Wed 22 Oct 2025 19:02:23 +0000
ROA not before:           Wed 22 Oct 2025 18:57:23 +0000
ROA not after:            Wed 21 Oct 2026 19:02:23 +0000
asID:                     23764
IP address blocks:        131.221.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl
                          rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 15:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:84:36:ab:cf:a5:11:ca:43:aa:27:7f:c0:d1:16:2c:61:52:83:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213D61EA584763705A7243F87D26327EC5CA63B0
        Validity
            Not Before: Oct 22 18:57:23 2025 GMT
            Not After : Oct 21 19:02:23 2026 GMT
        Subject: CN=0FD45EF1FD834814A9EEC7B643C88FF43689FA01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:0e:04:28:05:85:e8:5f:ae:6b:be:f6:4e:
                    b6:a5:ea:1c:60:b8:d1:44:4a:0b:0d:ff:a2:15:d9:
                    93:5b:be:bb:b3:fb:94:c9:69:cc:99:a2:b3:5f:db:
                    90:6b:d5:29:f3:21:3d:ff:8b:e4:2a:54:70:1e:ef:
                    82:18:e3:cc:ac:75:ad:d9:25:93:96:60:62:b2:f5:
                    b4:d8:39:6d:9e:a8:01:ac:74:1b:a7:96:64:13:87:
                    60:2d:6e:bb:48:62:8b:c3:b4:75:2e:17:75:24:58:
                    29:f8:68:6e:16:83:76:1c:57:c0:93:93:9f:22:1a:
                    0f:8d:d8:9b:b4:46:63:58:e5:28:15:9f:e5:12:9f:
                    c9:71:d9:3f:6a:65:4a:75:1b:45:5f:72:61:d0:80:
                    6d:c4:10:d8:27:42:84:06:8c:39:87:e1:eb:6f:81:
                    98:72:85:c6:2b:49:90:c7:cf:71:8d:57:e5:83:7c:
                    c0:76:fe:8d:77:bc:0e:e3:65:ae:f5:76:ac:6f:19:
                    60:e7:59:20:78:dd:5c:d7:93:3e:d3:e3:af:dc:cf:
                    19:d4:bc:77:8d:57:3d:13:da:99:53:4d:58:5f:9f:
                    d9:03:4b:d0:83:46:2a:ac:79:f0:51:6e:2c:69:e8:
                    03:58:c7:5e:d5:02:3b:a2:00:1b:88:a7:c5:da:b6:
                    df:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D4:5E:F1:FD:83:48:14:A9:EE:C7:B6:43:C8:8F:F4:36:89:FA:01
            X509v3 Authority Key Identifier:
                keyid:21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38302e302f32322d3232203d3e203233373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:21:44:96:63:ae:ea:72:b5:d1:65:50:1e:8c:5f:42:7a:0b:
         bd:62:0f:e0:5a:e3:0f:5b:1b:21:85:7a:bf:f0:ad:84:31:a2:
         b5:e4:3d:76:c1:83:9b:55:4e:e5:93:5b:57:bc:db:b6:76:94:
         2e:c2:ad:e9:05:5e:0a:a4:ce:db:4d:99:ab:16:d0:97:24:dc:
         97:9d:b8:03:6a:6b:9d:a9:3c:a2:f7:5b:76:73:10:36:8d:06:
         79:bd:45:2e:06:6d:f7:88:3d:ea:8a:26:34:d1:d1:6f:37:e1:
         0f:9e:37:c7:02:86:95:5b:ff:6d:73:76:dc:f2:46:dd:54:96:
         07:de:e6:2e:3d:5e:76:5c:ff:55:4a:64:31:b6:0f:d6:1b:f6:
         68:63:d3:fd:ca:fc:61:34:84:c3:79:90:0d:73:44:7a:80:01:
         f3:3c:f1:8c:c6:a0:97:9a:48:cc:fc:9b:c8:9e:cd:f9:c0:fa:
         13:e4:aa:5b:7c:68:37:b4:a8:26:90:69:eb:6c:3f:c7:3d:84:
         d2:28:ac:bd:f3:2c:ca:2e:9a:5c:15:df:57:d2:3d:9c:17:55:
         83:14:34:af:52:2b:c3:ed:b6:82:09:90:af:d6:f3:86:04:04:
         1f:17:11:53:0c:7d:8a:32:82:9e:13:a4:e3:b1:44:fd:16:01:
         8d:f9:e8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:17:20 2025 by rpki-client