Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34362e302f32332d3233203d3e20323634353935.roa
File:                     3133382e35392e34362e302f32332d3233203d3e20323634353935.roa (raw, json)
Hash identifier:          0D23QaH4bl3bIIjhcKjrHcny+oWux7kZZeIllsmgwMU=
Subject key identifier:   05:EF:C5:D7:36:55:74:1C:E8:41:DA:01:AF:4D:23:84:B8:E3:44:D4
Certificate issuer:       /CN=B0B9B934434D02C9258B1024C067D277143B182B
Certificate serial:       0BF7498C3D3DD17B274A6987D0BB2105AB085C79
Authority key identifier: B0:B9:B9:34:43:4D:02:C9:25:8B:10:24:C0:67:D2:77:14:3B:18:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B9B934434D02C9258B1024C067D277143B182B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34362e302f32332d3233203d3e20323634353935.roa
Signing time:             Wed 21 May 2025 18:42:21 +0000
ROA not before:           Wed 21 May 2025 18:37:21 +0000
ROA not after:            Wed 20 May 2026 18:42:21 +0000
asID:                     264595
IP address blocks:        138.59.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/B0B9B934434D02C9258B1024C067D277143B182B.crl
                          rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/B0B9B934434D02C9258B1024C067D277143B182B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B9B934434D02C9258B1024C067D277143B182B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 01:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f7:49:8c:3d:3d:d1:7b:27:4a:69:87:d0:bb:21:05:ab:08:5c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B9B934434D02C9258B1024C067D277143B182B
        Validity
            Not Before: May 21 18:37:21 2025 GMT
            Not After : May 20 18:42:21 2026 GMT
        Subject: CN=05EFC5D73655741CE841DA01AF4D2384B8E344D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9a:24:ec:cb:23:c4:4c:e4:7c:8a:92:a1:70:
                    d4:12:a6:78:ad:6a:7e:25:ec:c4:49:83:2d:1a:82:
                    91:b2:82:39:e0:75:80:eb:7d:1b:ad:0a:88:ee:24:
                    9d:42:7a:0c:8d:8e:a9:e7:63:64:ca:cc:3f:71:0d:
                    af:e4:e3:49:be:e9:96:5e:4f:55:39:19:1c:13:d9:
                    d9:b7:b1:b5:49:6d:df:08:c2:d0:f9:08:9e:90:9d:
                    35:fa:63:70:79:94:e9:b6:83:b6:ff:15:ba:e2:27:
                    a7:c6:a8:73:9d:72:9d:c4:14:5b:99:ad:c3:30:c6:
                    50:9b:3a:c4:07:a8:0a:32:5a:a2:0f:f4:bf:ee:46:
                    6a:f8:71:91:61:e3:ca:fd:02:82:b6:87:43:22:e6:
                    0e:66:a0:af:a1:5f:64:59:bb:e0:d3:9c:2a:2d:59:
                    9d:2d:8e:5a:dd:f0:a4:bb:bf:e6:59:72:db:c1:2d:
                    cc:0a:a6:74:9f:e6:55:4f:bb:b4:20:3f:e5:07:1f:
                    f1:bb:5a:2f:c2:18:69:c8:28:8a:df:09:18:14:8f:
                    9e:e3:74:9c:1e:09:f2:fc:cc:e7:36:ad:0e:a7:f4:
                    0f:0e:b8:a1:00:dd:ed:ef:c4:93:9b:d1:ca:44:a5:
                    b6:98:70:65:c5:b3:b3:63:c5:eb:16:a2:3c:7d:7a:
                    4d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EF:C5:D7:36:55:74:1C:E8:41:DA:01:AF:4D:23:84:B8:E3:44:D4
            X509v3 Authority Key Identifier:
                keyid:B0:B9:B9:34:43:4D:02:C9:25:8B:10:24:C0:67:D2:77:14:3B:18:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/B0B9B934434D02C9258B1024C067D277143B182B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B9B934434D02C9258B1024C067D277143B182B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34362e302f32332d3233203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:64:37:71:1d:09:e8:56:35:a7:fc:ea:30:fc:eb:3b:67:c5:
         18:02:d8:81:1f:ab:a8:e1:1f:6e:44:ed:cd:b4:3f:2a:b3:b7:
         4d:f3:83:84:f3:82:6d:9e:a1:72:e1:a0:99:56:1d:41:d0:d3:
         33:02:2f:77:77:14:d7:60:fd:77:b1:2e:4b:c5:cc:7a:14:2a:
         59:fd:b3:f3:80:b1:91:b8:a5:14:ac:99:65:4a:1a:83:47:6f:
         99:fd:de:ec:fb:5d:4c:78:bc:e2:6c:65:55:62:eb:55:f5:e7:
         4f:91:75:61:c7:6d:9d:54:09:fe:8a:72:4c:f1:40:b4:de:77:
         ab:c9:ba:6d:8b:e7:e0:e7:db:a7:8c:af:9f:a6:d5:ab:14:dd:
         a1:d2:8a:b7:63:68:a0:17:69:78:ce:c6:fe:d9:57:a8:56:b6:
         82:45:00:e9:a8:6c:86:42:c9:7a:76:00:46:08:81:2a:94:96:
         5e:ba:3a:c6:de:a2:bd:2f:a0:8c:2d:3a:27:70:94:4b:ae:c5:
         8d:fe:4b:63:d3:2c:06:8a:4c:4f:23:a5:d6:8b:0c:cf:ee:51:
         cf:0c:8f:20:ed:cb:86:35:3d:01:3f:56:10:0a:1b:2f:95:61:
         7f:11:c5:c1:85:b3:d1:65:80:60:ce:58:d1:bf:5c:8e:0a:67:
         cf:13:85:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:49:12 2025 by rpki-client