Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/3133382e3230342e3130342e302f32322d3234203d3e20323632353233.roa
File:                     3133382e3230342e3130342e302f32322d3234203d3e20323632353233.roa (raw, json)
Hash identifier:          zVBroeCJA2nYjdOPPJkMg5gv2wVlLTMnTjsCADq/4Ok=
Subject key identifier:   6A:60:CF:10:AC:19:9D:D5:72:DC:D2:C1:0E:83:56:8D:5E:D8:11:D8
Certificate issuer:       /CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
Certificate serial:       7145B9517054FC8E84D4C3B5D2E4E46ACC22A300
Authority key identifier: 7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/3133382e3230342e3130342e302f32322d3234203d3e20323632353233.roa
Signing time:             Mon 21 Jul 2025 07:17:41 +0000
ROA not before:           Mon 21 Jul 2025 07:12:41 +0000
ROA not after:            Mon 20 Jul 2026 07:17:41 +0000
asID:                     262523
IP address blocks:        138.204.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl
                          rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 21:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:45:b9:51:70:54:fc:8e:84:d4:c3:b5:d2:e4:e4:6a:cc:22:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
        Validity
            Not Before: Jul 21 07:12:41 2025 GMT
            Not After : Jul 20 07:17:41 2026 GMT
        Subject: CN=6A60CF10AC199DD572DCD2C10E83568D5ED811D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c9:00:f1:27:5f:a1:5a:92:9c:07:bc:eb:79:
                    89:55:b9:15:65:31:28:c6:68:5f:c1:a2:bf:9b:cc:
                    73:0d:63:3e:a0:83:1a:e1:c1:d2:9e:54:a0:56:f6:
                    e9:cd:84:8a:62:0d:8e:5f:92:8d:1d:55:73:f4:a4:
                    34:6a:e4:6d:b2:a1:02:ba:9c:88:a0:fb:1b:4f:73:
                    82:cd:e4:ef:0f:28:0f:5b:da:e5:e9:89:52:7e:8f:
                    a3:11:98:8d:11:5f:a0:3c:e5:f9:54:ef:d4:91:f0:
                    bc:33:a5:8e:01:b8:b4:68:aa:4e:3b:5e:b6:43:70:
                    b8:27:d7:25:f7:9d:57:75:c4:20:cc:48:a1:22:0f:
                    53:08:76:85:e7:05:6c:39:9d:52:64:6d:c0:af:77:
                    0b:83:c9:b5:d8:95:06:ff:f8:19:b7:90:ae:fb:ab:
                    de:3a:6c:31:79:31:dd:4a:6b:f4:a4:a8:b4:85:0d:
                    19:bf:7f:9b:fb:f6:8a:b1:00:c6:03:6b:62:fc:5c:
                    eb:87:36:af:1a:f5:b2:bd:a8:3c:7c:8c:f8:6d:c4:
                    a4:89:a3:91:98:e3:e2:d5:97:cb:f1:45:3e:0a:a6:
                    34:7f:f6:f6:b4:d6:d1:1d:21:68:80:c5:95:22:71:
                    52:3e:ab:3a:28:7a:48:09:de:4f:ea:89:69:c2:3c:
                    b7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:60:CF:10:AC:19:9D:D5:72:DC:D2:C1:0E:83:56:8D:5E:D8:11:D8
            X509v3 Authority Key Identifier:
                keyid:7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/3133382e3230342e3130342e302f32322d3234203d3e20323632353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:45:e1:ce:8e:f6:8b:40:ea:84:c3:6d:fc:d3:a1:a4:ac:c8:
         e5:bb:35:d8:61:c1:86:c3:22:22:7c:58:e3:a7:92:1d:08:17:
         13:1a:aa:7e:b9:cc:62:fb:9c:8b:bc:56:cd:88:6b:44:7e:94:
         cc:06:7f:c0:d2:82:e4:3c:8a:6d:e6:10:79:59:68:af:26:65:
         23:75:4d:aa:d9:fa:4f:1e:18:05:9b:74:ef:2a:c2:35:5d:3b:
         13:b2:07:0c:58:df:61:60:1b:e6:be:28:5c:85:2b:04:4d:cb:
         e7:c2:9a:f5:ed:94:12:d1:6a:d6:90:74:e4:7c:1c:15:5c:56:
         79:0e:e1:4c:a3:15:4b:bf:31:5a:46:e8:b5:32:9c:c6:f3:b9:
         d4:86:57:29:4d:96:b4:84:5c:bd:c0:2e:29:22:77:8c:ad:c2:
         01:52:2b:b1:c2:fa:50:18:dc:1d:f7:2c:46:9d:64:cb:3d:35:
         8f:be:82:a1:6c:35:c7:f6:bc:86:8b:40:7b:ae:51:57:a2:65:
         00:96:5e:48:20:a2:61:79:0b:26:bd:ac:16:bc:38:74:b8:3e:
         33:8e:4d:c6:8a:12:b4:0d:a5:54:c5:94:9e:d7:53:7a:4e:93:
         8d:21:62:cd:d1:72:cd:eb:c0:55:b4:4e:4c:f3:3a:8a:28:c6:
         33:fb:b0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:55:25 2025 by rpki-client