Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3138382e302f32322d3332203d3e20323632343934.roa
File:                     3133382e3138352e3138382e302f32322d3332203d3e20323632343934.roa (raw, json)
Hash identifier:          5c3QFWzn9/MVeAh7YXEDBx+HZFGEtk1pZbWZXMuwxdc=
Subject key identifier:   96:18:6E:BE:E1:B2:25:F2:FA:5F:A0:A7:7F:80:54:8F:F7:44:AE:89
Certificate issuer:       /CN=A1993066E677A42B98C3789A27BFCEA7A489E2FB
Certificate serial:       3577172701E941515F7973901B5E68DAAC522387
Authority key identifier: A1:99:30:66:E6:77:A4:2B:98:C3:78:9A:27:BF:CE:A7:A4:89:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3138382e302f32322d3332203d3e20323632343934.roa
Signing time:             Mon 04 Aug 2025 20:22:01 +0000
ROA not before:           Mon 04 Aug 2025 20:17:01 +0000
ROA not after:            Mon 03 Aug 2026 20:22:01 +0000
asID:                     262494
IP address blocks:        138.185.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 20:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:77:17:27:01:e9:41:51:5f:79:73:90:1b:5e:68:da:ac:52:23:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1993066E677A42B98C3789A27BFCEA7A489E2FB
        Validity
            Not Before: Aug  4 20:17:01 2025 GMT
            Not After : Aug  3 20:22:01 2026 GMT
        Subject: CN=96186EBEE1B225F2FA5FA0A77F80548FF744AE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:11:b2:ae:a4:32:fb:a6:35:d3:16:5d:f0:
                    08:ed:13:72:40:2b:d4:d4:ba:f9:c9:14:1d:f6:dc:
                    8a:03:c3:ab:d4:3e:2a:3a:3f:ac:53:0a:b1:d1:75:
                    09:05:d4:31:7b:25:8a:bf:25:05:51:bd:77:94:89:
                    c4:f3:bd:81:a3:5e:6b:b0:24:34:7a:7b:b5:4d:b2:
                    8a:13:c1:eb:ef:70:c9:da:9f:3b:4a:4a:e5:00:61:
                    31:4d:75:eb:18:45:4d:cb:06:3e:7d:8c:78:02:1e:
                    dc:df:dc:f3:3d:d1:86:df:2b:99:19:45:c2:eb:3a:
                    b3:f8:eb:4a:62:f9:6c:a4:d3:65:42:84:85:8a:59:
                    13:68:b5:93:fa:b1:55:44:b3:15:f7:d4:f9:55:42:
                    c7:c5:c6:30:a8:7f:35:90:5f:1a:00:e7:0b:fc:69:
                    0a:3c:a7:24:90:1c:2e:bb:60:21:e7:45:e4:b2:28:
                    d8:d1:e8:d0:b5:d4:f2:c8:c7:55:1c:02:9f:37:3e:
                    cc:5d:c4:32:dc:93:ab:be:8a:d8:0e:5d:60:be:06:
                    9b:24:e9:a8:c6:c6:91:65:6f:49:9e:8e:2e:eb:74:
                    13:c5:b7:0b:5e:82:ad:71:c3:6c:bb:0b:52:c2:f9:
                    0a:d1:8b:dc:f1:03:9e:6b:81:95:ed:99:42:f2:6d:
                    23:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:18:6E:BE:E1:B2:25:F2:FA:5F:A0:A7:7F:80:54:8F:F7:44:AE:89
            X509v3 Authority Key Identifier:
                keyid:A1:99:30:66:E6:77:A4:2B:98:C3:78:9A:27:BF:CE:A7:A4:89:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3138382e302f32322d3332203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:db:74:05:ca:5d:b5:f5:86:9d:e2:66:69:24:a4:e2:2b:5b:
         90:ef:ee:96:87:81:cb:55:7d:2e:fd:8f:83:5d:0f:98:c7:73:
         06:f4:de:4b:4f:de:87:75:a0:ed:38:84:93:17:89:b2:78:51:
         12:44:72:bd:d2:c7:28:fd:40:b0:6b:3d:eb:70:0e:93:c8:7d:
         5b:b8:56:a3:5c:6c:b0:5a:09:ab:32:54:3f:2d:02:d9:4a:49:
         7b:e5:e3:86:2e:d9:bd:dc:26:6d:b1:72:07:0f:e7:25:2c:b6:
         84:b8:1f:43:27:96:87:96:ea:f6:57:4d:18:d0:01:4b:49:d7:
         c1:ce:75:d4:52:1a:48:2f:83:a9:e9:8b:7e:57:a6:b5:ae:35:
         e0:62:6a:61:fe:e4:93:24:63:c7:d9:05:3e:c1:c2:5c:96:8b:
         2a:ea:b3:ba:e3:38:2e:03:6d:30:3f:92:a9:f5:a1:e8:16:94:
         b2:3c:da:a5:6d:bd:85:12:7e:df:f6:37:28:7c:85:3e:b6:ed:
         ec:a7:9a:84:95:a6:ca:94:6c:7d:85:aa:54:66:6d:70:53:02:
         92:92:be:04:b1:98:f3:96:5c:14:da:ba:e7:43:86:85:60:a4:
         3a:c6:b0:af:1b:a8:2f:e8:ce:a4:2c:52:2e:3f:d6:67:46:0b:
         f3:e3:8b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:04:18 2025 by rpki-client