Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/3133382e39372e36342e302f32322d3234203d3e203631353931.roa
File:                     3133382e39372e36342e302f32322d3234203d3e203631353931.roa (raw, json)
Hash identifier:          lB14/ycw68o3olQ7U2YRIUWI1FojJ+PF3hF5Mbke/Q8=
Subject key identifier:   F8:F2:B6:32:4D:21:F0:FA:C1:3B:B1:9D:1D:FB:91:BF:48:65:C1:AC
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       57BAB9B16696A692F8B65A9D345A53296BEDDD56
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/3133382e39372e36342e302f32322d3234203d3e203631353931.roa
Signing time:             Mon 14 Jul 2025 21:00:00 +0000
ROA not before:           Mon 14 Jul 2025 20:55:00 +0000
ROA not after:            Mon 13 Jul 2026 21:00:00 +0000
asID:                     61591
IP address blocks:        138.97.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 21:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ba:b9:b1:66:96:a6:92:f8:b6:5a:9d:34:5a:53:29:6b:ed:dd:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Jul 14 20:55:00 2025 GMT
            Not After : Jul 13 21:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d3:d2:fe:28:0b:56:2f:15:5c:22:9a:77:dd:
                    22:5d:44:3e:c7:c7:81:ea:5b:6c:ed:eb:2c:b0:6a:
                    eb:e2:3d:3f:83:fd:a2:39:e3:1f:5b:8f:ad:90:45:
                    d8:5f:56:31:bf:02:0a:38:02:5d:c5:17:bb:44:a9:
                    73:4d:c6:9a:d8:e6:9b:a2:dc:a0:96:a6:bb:f4:79:
                    16:90:c5:f3:2f:65:28:a8:68:22:3b:c6:89:94:93:
                    8a:13:27:08:b5:d7:af:9e:43:53:62:ce:3c:c3:f0:
                    a6:b5:90:41:c2:08:40:01:4d:07:f9:27:c5:07:47:
                    2d:99:2f:07:64:9a:ea:8e:93:36:6f:39:d7:0f:f1:
                    81:46:28:18:e6:b1:80:6c:55:df:00:36:b9:fc:e1:
                    8d:95:9d:18:eb:df:54:7e:d1:e3:2f:77:df:91:78:
                    4e:23:13:b7:7e:d1:8b:08:75:38:21:b1:a4:66:eb:
                    c2:27:76:57:f3:00:4a:13:a2:e1:03:91:8f:a2:fd:
                    4b:94:8c:f2:49:21:14:f1:81:5f:42:20:2e:4f:46:
                    43:49:41:fa:6e:82:58:84:0d:c0:48:5b:6d:62:5b:
                    c0:7a:fa:8b:23:22:db:d5:c5:c7:1f:6d:a0:16:b6:
                    4f:53:e3:68:75:45:92:3d:db:46:81:5c:7d:9a:ab:
                    40:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F2:B6:32:4D:21:F0:FA:C1:3B:B1:9D:1D:FB:91:BF:48:65:C1:AC
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/3133382e39372e36342e302f32322d3234203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:78:5c:cc:68:5f:a2:be:22:85:5d:e4:29:ce:33:26:fd:17:
         65:db:87:9f:5b:09:fc:5b:a4:f8:b6:31:94:fc:b5:24:1b:5c:
         86:3d:de:e2:94:b5:c5:71:7d:44:06:01:a4:22:a2:91:e2:ba:
         dc:fc:7e:ea:29:b3:a7:28:14:52:95:26:36:12:ac:34:dd:38:
         82:06:a5:0e:0d:ba:81:6b:1f:61:2e:61:09:ac:82:05:23:dd:
         e4:06:f4:61:7e:79:80:b9:76:34:31:c0:0f:03:5c:15:f0:bf:
         1a:fc:d5:72:11:56:f6:3d:41:d8:d3:ac:58:df:80:99:27:3d:
         b8:da:3f:6c:6b:e8:93:57:4f:16:62:bb:4e:cc:20:f5:09:23:
         d0:66:92:54:09:fc:04:8c:a2:1f:7b:56:e0:a2:40:f3:3b:bb:
         35:16:e4:e3:24:4d:d6:cd:76:73:1c:1f:38:d6:20:a4:d7:0a:
         9d:54:b6:e0:4f:ef:2a:82:9e:25:5c:8c:e0:0c:13:7f:a3:e9:
         0a:36:d1:7d:c3:84:03:b7:ab:e4:27:bf:72:5c:96:66:cb:f7:
         5e:48:43:39:af:9f:87:52:98:5c:52:70:32:99:d3:1c:dc:5f:
         01:ea:c3:3c:a5:d1:7a:29:22:84:da:fc:a7:e6:53:dc:ff:78:
         8c:d7:48:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:35:52 2025 by rpki-client