Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/3133382e3131372e3137322e302f32332d3233203d3e20323634323337.roa
File:                     3133382e3131372e3137322e302f32332d3233203d3e20323634323337.roa (raw, json)
Hash identifier:          NSEAxMQrQ7JYWvRpaQdNvWFInyNuqUxvI9JSJHN0N4Q=
Subject key identifier:   0B:2A:0A:A5:8D:39:F4:95:33:2F:96:6A:16:5C:C8:B1:14:23:8E:AD
Certificate issuer:       /CN=66D5AB14A687F80E7A5A3698F13E2B2421405A11
Certificate serial:       096861AB62D4DCDEDFF73AE514464C5372321A36
Authority key identifier: 66:D5:AB:14:A6:87:F8:0E:7A:5A:36:98:F1:3E:2B:24:21:40:5A:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/3133382e3131372e3137322e302f32332d3233203d3e20323634323337.roa
Signing time:             Thu 07 Aug 2025 19:00:00 +0000
ROA not before:           Thu 07 Aug 2025 18:55:00 +0000
ROA not after:            Thu 06 Aug 2026 19:00:00 +0000
asID:                     264237
IP address blocks:        138.117.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl
                          rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 03:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:68:61:ab:62:d4:dc:de:df:f7:3a:e5:14:46:4c:53:72:32:1a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D5AB14A687F80E7A5A3698F13E2B2421405A11
        Validity
            Not Before: Aug  7 18:55:00 2025 GMT
            Not After : Aug  6 19:00:00 2026 GMT
        Subject: CN=0B2A0AA58D39F495332F966A165CC8B114238EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:ff:02:89:75:89:78:a2:d3:3d:b7:6d:cc:
                    76:ce:5b:1a:d4:15:c9:a0:39:0a:49:90:e4:3d:9d:
                    34:ad:bf:78:e1:de:3e:e8:29:7f:81:50:8c:33:d9:
                    f0:50:0b:dc:a1:83:fd:24:a4:a4:f1:a5:a9:d9:df:
                    5d:90:a2:9c:62:87:cb:96:8b:68:20:e6:46:66:5b:
                    19:48:14:0d:33:15:d9:c9:63:0b:56:8a:be:27:30:
                    ca:2c:4e:5e:92:bb:ee:9c:20:b2:d7:58:67:17:30:
                    e3:8a:b4:4f:c4:9a:d6:06:f7:23:fc:13:51:f5:4f:
                    ef:96:4c:83:b9:e8:df:c7:99:cd:59:71:47:f7:30:
                    95:c6:1f:6f:c3:f1:57:18:ba:57:72:95:76:cc:c3:
                    66:24:8c:70:ed:71:56:ca:ef:c6:90:46:08:2a:e5:
                    c3:e7:2a:e8:64:21:cb:b6:b4:5e:cd:c3:81:6a:ea:
                    4f:14:31:5e:63:04:7b:20:89:04:32:27:48:40:d6:
                    62:62:81:4b:a4:fb:47:f6:6c:dc:d2:71:0a:d0:6d:
                    88:c3:df:d3:7c:c0:d9:10:45:44:0a:b9:62:4f:23:
                    03:59:4d:94:71:3c:e9:3e:04:a2:1b:e6:6d:5c:81:
                    55:2c:dc:08:4b:04:40:4c:8e:2d:1a:3e:b8:89:df:
                    1e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2A:0A:A5:8D:39:F4:95:33:2F:96:6A:16:5C:C8:B1:14:23:8E:AD
            X509v3 Authority Key Identifier:
                keyid:66:D5:AB:14:A6:87:F8:0E:7A:5A:36:98:F1:3E:2B:24:21:40:5A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/3133382e3131372e3137322e302f32332d3233203d3e20323634323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:51:d2:54:b3:a4:db:03:1b:e4:da:12:05:73:8e:83:6c:c4:
         47:e6:f6:64:4f:1e:01:ef:df:97:3f:1c:99:4e:b0:b0:d9:9f:
         0a:7f:1c:6b:e5:c6:5b:68:dd:f9:60:ac:4b:f4:36:6a:65:5b:
         63:c7:a6:0c:e0:30:3b:87:3e:af:a1:cf:fa:26:d5:9e:a0:d5:
         0f:64:71:4f:8d:ab:2f:bd:26:69:87:e7:cd:29:63:47:6b:df:
         dc:6d:3a:f7:86:66:e4:9e:3c:eb:4a:06:2c:88:ae:0a:1c:3c:
         96:c9:13:99:ab:3a:97:94:a2:89:1c:df:8c:1f:4a:f4:fc:e1:
         e4:d0:fe:9c:80:14:98:9c:56:af:02:b9:e7:5a:d3:18:c2:52:
         2e:e4:43:cb:30:1e:1b:6b:a4:55:b2:a5:01:c6:c9:87:23:21:
         b2:96:2f:0f:30:80:d9:64:52:c3:62:da:64:1a:6c:7f:c3:b7:
         38:12:43:84:5d:f3:c3:78:09:5f:02:0e:10:7a:05:40:78:1a:
         77:ca:df:67:56:af:dd:6a:3d:be:99:17:85:e0:76:97:67:82:
         3b:b0:14:64:2b:4d:9c:73:c0:85:7d:0e:a7:08:0c:ff:67:c9:
         8c:25:ef:ba:ed:20:bf:b4:29:11:cd:49:e2:6a:aa:fd:a5:fb:
         0e:55:84:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:02:25 2025 by rpki-client