Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/3133382e3131382e37362e302f32322d3234203d3e20323632333934.roa
File:                     3133382e3131382e37362e302f32322d3234203d3e20323632333934.roa (raw, json)
Hash identifier:          AmGJXJa7Y/yz2NDqvkSCH3HbKu37v8bKbvX6qe97QU8=
Subject key identifier:   DE:BC:B7:F6:17:FE:4E:3F:FF:E6:8C:80:99:34:F2:B8:C5:6D:1D:B4
Certificate issuer:       /CN=7F262696BA0E69FA1058BEF98B1386A9CCEB7D71
Certificate serial:       20C5AE8732235FA1275518102D37874288B15B58
Authority key identifier: 7F:26:26:96:BA:0E:69:FA:10:58:BE:F9:8B:13:86:A9:CC:EB:7D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/3133382e3131382e37362e302f32322d3234203d3e20323632333934.roa
Signing time:             Thu 06 Mar 2025 18:06:06 +0000
ROA not before:           Thu 06 Mar 2025 18:01:06 +0000
ROA not after:            Thu 05 Mar 2026 18:06:06 +0000
asID:                     262394
IP address blocks:        138.118.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.crl
                          rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 17:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c5:ae:87:32:23:5f:a1:27:55:18:10:2d:37:87:42:88:b1:5b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F262696BA0E69FA1058BEF98B1386A9CCEB7D71
        Validity
            Not Before: Mar  6 18:01:06 2025 GMT
            Not After : Mar  5 18:06:06 2026 GMT
        Subject: CN=DEBCB7F617FE4E3FFFE68C809934F2B8C56D1DB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:f6:fa:f6:8c:41:85:b0:26:41:cb:8f:cd:
                    88:58:3f:5f:ab:24:39:75:74:ca:a0:fc:26:6b:b0:
                    91:35:11:ae:2d:c3:73:6c:33:a7:70:71:ec:33:19:
                    98:71:72:b9:0f:5b:7d:88:16:3d:d2:a0:62:c3:d2:
                    00:35:98:11:48:15:84:ec:96:72:a5:ba:48:d7:90:
                    20:90:b7:51:bc:26:74:71:61:d8:e0:3f:bd:96:e2:
                    ee:ae:ff:4b:9e:e1:9d:71:69:42:81:a2:58:12:aa:
                    6b:cd:0c:aa:00:4d:b2:55:e4:2e:62:de:59:73:22:
                    9a:35:ef:34:90:18:c3:9f:58:b3:2e:59:38:d6:64:
                    bc:13:71:6a:44:1d:07:e1:72:fa:86:15:8a:c7:18:
                    f6:e4:b8:9d:cf:78:54:dc:3e:c4:1b:1d:5d:ab:a1:
                    d1:50:97:25:8c:6a:dd:bf:ef:21:5a:95:7c:52:9b:
                    16:b3:2b:d1:4f:71:4a:bc:d5:d1:b3:25:04:39:fc:
                    7f:87:62:bd:30:ba:54:a6:bb:e1:3c:34:ae:0a:69:
                    79:8d:eb:5e:9a:5c:4c:87:d3:46:e0:b0:bc:e0:b9:
                    49:ec:6f:c2:b0:45:d0:cf:34:78:80:9e:9c:a5:5d:
                    4c:f7:1f:04:1e:2b:17:e5:72:dd:24:6c:fb:62:9b:
                    fd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BC:B7:F6:17:FE:4E:3F:FF:E6:8C:80:99:34:F2:B8:C5:6D:1D:B4
            X509v3 Authority Key Identifier:
                keyid:7F:26:26:96:BA:0E:69:FA:10:58:BE:F9:8B:13:86:A9:CC:EB:7D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/3133382e3131382e37362e302f32322d3234203d3e20323632333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:2b:9a:f0:cf:7f:a2:e8:4c:83:ae:b3:80:20:60:51:cc:04:
         58:b2:4d:f2:7a:c2:22:ec:e1:df:da:8b:77:18:dc:d6:77:ac:
         f0:ab:88:14:d7:92:0c:fc:47:e0:67:d8:88:68:7a:a6:c8:93:
         95:f4:0d:e7:83:8a:06:a3:42:4d:4f:ca:cb:81:4e:5a:63:e5:
         31:78:fe:de:b1:fd:e8:71:c3:b7:12:1d:de:b7:56:66:f1:2a:
         41:49:b4:cc:27:f4:08:f2:fe:dc:86:75:02:5a:75:5d:e0:d1:
         49:42:f9:5e:21:70:c6:a2:2e:d0:7b:9b:10:29:0c:32:cc:c4:
         74:bf:5e:cc:f1:c2:55:38:a5:08:2f:4b:20:a1:ae:b4:18:05:
         39:cb:86:cc:c1:4a:a7:e7:91:14:55:5d:4d:c2:cc:76:f4:c0:
         2d:30:70:18:e8:b6:9e:8a:8a:79:07:71:00:cb:c2:70:b8:d8:
         6d:75:b0:44:a4:43:33:e9:07:68:d3:9a:f4:8b:e1:ce:05:bd:
         4c:a5:0d:1e:a2:f9:f0:f1:65:3a:86:06:e8:25:30:c9:57:6c:
         3f:89:ed:01:d8:1a:0d:ca:50:4f:4a:c2:ca:9e:53:e8:68:5a:
         62:d3:95:d5:08:aa:f8:9e:c2:76:dc:ca:b6:19:30:27:c2:de:
         35:30:0f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:36:03 2025 by rpki-client