Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131342e302f32342d3234203d3e20323634353434.roa
File:                     3133382e302e3131342e302f32342d3234203d3e20323634353434.roa (raw, json)
Hash identifier:          CeHc+lSHKep/DgdLlp+mgfsqRuSPtosb5ynkSZ/7qoM=
Subject key identifier:   50:0C:53:49:31:3E:8D:5D:D3:54:6A:89:09:11:7B:62:2A:67:AD:C4
Certificate issuer:       /CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Certificate serial:       1C05CE6F7DC61DD080DCF63A6BD4A1D1E879B6F2
Authority key identifier: 0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131342e302f32342d3234203d3e20323634353434.roa
Signing time:             Wed 16 Jul 2025 14:35:49 +0000
ROA not before:           Wed 16 Jul 2025 14:30:49 +0000
ROA not after:            Wed 15 Jul 2026 14:35:49 +0000
asID:                     264544
IP address blocks:        138.0.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl
                          rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 06:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:05:ce:6f:7d:c6:1d:d0:80:dc:f6:3a:6b:d4:a1:d1:e8:79:b6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
        Validity
            Not Before: Jul 16 14:30:49 2025 GMT
            Not After : Jul 15 14:35:49 2026 GMT
        Subject: CN=500C5349313E8D5DD3546A8909117B622A67ADC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:92:16:8a:09:00:cb:c3:3b:ff:ec:5b:07:db:
                    61:af:ba:87:da:22:b2:70:7a:6e:ba:5e:4b:23:0e:
                    43:bb:f2:a5:2c:4f:3e:88:4d:8a:a3:f4:10:83:e8:
                    75:9c:f6:b2:27:84:ee:87:43:00:1f:73:9e:67:db:
                    fa:53:3d:88:7f:c2:e7:71:b7:1a:8a:2a:62:89:3e:
                    17:2f:e7:3f:57:5d:4a:64:d4:62:78:22:e4:74:5f:
                    c2:1a:18:71:a9:97:5e:4d:25:93:d0:5e:11:38:68:
                    ed:88:2d:e8:39:e8:90:49:b1:2d:e9:fc:69:35:48:
                    a9:d1:51:09:70:c5:87:c2:d5:74:94:56:8a:f0:97:
                    d7:16:4e:0b:6c:5e:e9:a6:8a:ee:ea:49:80:ab:ef:
                    6f:2e:a7:b4:ce:ff:d5:e5:61:13:80:fc:2a:b2:2f:
                    62:e5:f9:b1:44:f7:c5:50:df:66:72:32:c3:7c:a7:
                    1a:3d:87:ac:cb:46:1d:72:6c:b9:d5:9f:d2:02:e6:
                    95:fc:27:e7:50:46:c3:fe:f5:16:2f:11:45:e0:d5:
                    5a:46:76:4f:49:88:69:14:23:e2:a5:ff:4d:19:68:
                    e6:d9:2d:cd:a0:56:91:34:e0:31:c8:4c:6b:d0:3d:
                    c0:11:e5:31:09:be:7f:9f:0a:eb:0a:50:67:48:1a:
                    95:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0C:53:49:31:3E:8D:5D:D3:54:6A:89:09:11:7B:62:2A:67:AD:C4
            X509v3 Authority Key Identifier:
                keyid:0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131342e302f32342d3234203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:57:6f:3a:b0:d6:80:47:d3:ed:48:83:f1:a5:c6:3d:28:83:
         ff:93:c9:68:50:6c:7e:d6:66:30:9d:25:35:30:05:46:79:33:
         13:e6:ac:a2:ce:74:31:ba:f7:c4:e3:13:30:76:b5:e4:75:73:
         cb:3f:3f:fb:bb:e4:5e:88:ad:50:fd:76:d8:c8:42:d9:c4:a6:
         f8:28:ea:9d:9a:d2:af:66:94:55:84:d7:9c:ab:2e:ef:5f:63:
         5b:42:b4:22:04:02:95:8d:ba:4b:c7:19:9b:a6:63:88:db:41:
         20:ab:3e:ad:95:72:61:7d:d8:92:92:b8:fb:39:db:13:67:7d:
         f4:ec:a2:6a:a6:39:27:cb:96:80:e2:75:d0:73:16:46:b3:d8:
         29:aa:45:ec:86:b0:3e:28:9f:e1:46:03:57:3d:cc:1c:91:df:
         87:ff:b0:5c:92:89:75:0a:ee:f5:34:26:ce:9a:95:9b:35:0d:
         75:43:13:f0:25:01:59:d7:71:7d:6a:d5:dd:e0:47:72:de:60:
         d3:97:69:aa:90:78:a6:c4:9d:e8:8d:1d:d7:2c:d0:58:1f:40:
         ce:29:cf:44:2a:b7:a8:e7:7a:bb:d0:2d:7e:0e:ce:cc:a7:cf:
         80:f2:ac:3f:2c:54:eb:8c:e2:00:aa:09:98:e7:ba:79:3f:cd:
         ef:27:14:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:03:08 2025 by rpki-client