Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/3133382e302e39362e302f32322d3234203d3e20323634353433.roa
File:                     3133382e302e39362e302f32322d3234203d3e20323634353433.roa (raw, json)
Hash identifier:          FC9pms5OqktW4RChuq8DBwz95wR9TvtgJIbJ/LKN1NE=
Subject key identifier:   58:92:DC:FB:6F:C7:5B:2D:64:58:28:8B:32:56:BC:CC:71:A1:4A:58
Certificate issuer:       /CN=0937B5D7436A37FA6239657EB9161F1F8F7565AE
Certificate serial:       66A8C998888CBA6458600C03B3C4E71037699DA7
Authority key identifier: 09:37:B5:D7:43:6A:37:FA:62:39:65:7E:B9:16:1F:1F:8F:75:65:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0937B5D7436A37FA6239657EB9161F1F8F7565AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/3133382e302e39362e302f32322d3234203d3e20323634353433.roa
Signing time:             Thu 31 Jul 2025 14:51:51 +0000
ROA not before:           Thu 31 Jul 2025 14:46:51 +0000
ROA not after:            Thu 30 Jul 2026 14:51:51 +0000
asID:                     264543
IP address blocks:        138.0.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.crl
                          rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0937B5D7436A37FA6239657EB9161F1F8F7565AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 13:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a8:c9:98:88:8c:ba:64:58:60:0c:03:b3:c4:e7:10:37:69:9d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0937B5D7436A37FA6239657EB9161F1F8F7565AE
        Validity
            Not Before: Jul 31 14:46:51 2025 GMT
            Not After : Jul 30 14:51:51 2026 GMT
        Subject: CN=5892DCFB6FC75B2D6458288B3256BCCC71A14A58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:fe:b2:3e:1c:bf:c0:05:91:f0:12:dd:e1:
                    f4:09:64:eb:70:7d:0b:3b:f3:1f:a7:77:d0:91:cd:
                    b2:49:8c:47:f9:f8:e7:dd:e8:4c:eb:91:c9:eb:48:
                    c6:05:e3:75:c7:20:b3:7b:d2:c2:f3:e2:8d:d3:27:
                    8f:29:41:7f:19:8b:86:21:74:e8:e7:a3:be:b9:7f:
                    3a:30:c1:29:91:7d:ac:46:42:61:4a:4a:13:04:98:
                    ca:2d:b4:37:ea:28:49:d2:e0:7d:4a:7a:44:e9:6e:
                    ee:81:25:68:e5:4d:11:e6:f1:08:d6:ac:ba:0f:ca:
                    2e:89:e9:1b:21:c8:b1:f2:26:0e:4e:d0:9f:a4:ec:
                    0c:af:80:66:f5:0f:21:a5:43:0f:78:c0:a3:f4:15:
                    09:52:30:fa:55:ac:70:a7:67:9d:1b:3e:47:97:5d:
                    57:23:20:e1:16:11:c8:d5:02:f0:25:9d:41:37:30:
                    81:74:f1:05:c5:96:dc:f4:a4:db:a4:d1:0e:9c:e7:
                    03:54:83:6a:53:59:ed:9d:37:ab:37:3f:c9:e9:36:
                    d2:59:7a:a6:a4:69:88:b9:89:b6:a2:3e:cf:f4:f5:
                    e0:28:74:d4:dc:11:44:00:27:6d:4f:2a:43:0d:a5:
                    36:16:82:74:67:52:e7:0a:de:fc:43:31:f0:ef:aa:
                    f5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:92:DC:FB:6F:C7:5B:2D:64:58:28:8B:32:56:BC:CC:71:A1:4A:58
            X509v3 Authority Key Identifier:
                keyid:09:37:B5:D7:43:6A:37:FA:62:39:65:7E:B9:16:1F:1F:8F:75:65:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0937B5D7436A37FA6239657EB9161F1F8F7565AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/3133382e302e39362e302f32322d3234203d3e20323634353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:5f:aa:8e:43:24:c0:88:05:d5:61:56:da:c0:66:2a:1e:ae:
         47:e7:17:49:a1:0a:eb:e7:48:5d:55:2c:f5:40:6a:eb:50:bc:
         d1:22:3e:73:88:80:0f:12:e5:c7:44:25:a7:d7:34:0d:d3:40:
         7e:07:0e:b7:48:f9:ac:3b:e7:33:a5:ba:41:53:ea:d4:27:9f:
         99:2a:1f:52:d8:a1:5d:36:61:01:a3:d2:18:c6:88:b2:3a:6a:
         28:34:f6:ce:93:5b:c9:48:a5:68:f6:db:49:05:ed:9b:50:bd:
         f2:fd:c5:32:f1:8d:1f:e0:b9:05:50:42:6d:f2:fa:44:83:a9:
         f0:22:e8:b7:28:1f:68:74:09:a8:6b:be:75:ca:20:45:52:9d:
         39:70:f0:8c:af:35:b2:36:0c:c1:6a:f0:bf:70:b2:45:e1:4f:
         d4:60:33:26:2b:62:f0:60:5f:54:2e:6b:81:d7:29:73:fd:7e:
         62:db:be:3b:0f:17:a0:21:9e:7a:b8:4d:d1:2c:ca:16:6b:3a:
         01:da:e0:87:e5:82:55:2d:6f:39:82:7c:db:b8:07:76:7f:8e:
         4e:da:d3:82:34:7a:f4:83:98:e4:31:95:fd:de:cd:74:d2:6e:
         03:51:87:5e:8c:4b:8c:f8:ce:b0:b1:5c:51:8b:3c:85:95:e3:
         1f:a2:bf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:50:33 2025 by rpki-client