Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/3133382e3131372e38382e302f32322d3234203d3e20323634323336.roa
File:                     3133382e3131372e38382e302f32322d3234203d3e20323634323336.roa (raw, json)
Hash identifier:          FY7AnqAx4uALtv3sW2I80UpMHissxv0FiwkefwWNfi8=
Subject key identifier:   64:AE:04:CA:A8:0D:A5:85:48:18:13:EA:24:9D:D9:A7:01:7A:F2:4C
Certificate issuer:       /CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A
Certificate serial:       74FC5813C47CCC025766A5950FB1F2CDE30BDCCE
Authority key identifier: A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/3133382e3131372e38382e302f32322d3234203d3e20323634323336.roa
Signing time:             Wed 04 Jun 2025 14:22:57 +0000
ROA not before:           Wed 04 Jun 2025 14:17:57 +0000
ROA not after:            Wed 03 Jun 2026 14:22:57 +0000
asID:                     264236
IP address blocks:        138.117.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl
                          rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 03:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fc:58:13:c4:7c:cc:02:57:66:a5:95:0f:b1:f2:cd:e3:0b:dc:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A
        Validity
            Not Before: Jun  4 14:17:57 2025 GMT
            Not After : Jun  3 14:22:57 2026 GMT
        Subject: CN=64AE04CAA80DA585481813EA249DD9A7017AF24C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c7:60:d4:75:be:56:1b:a3:ef:50:51:d5:04:
                    10:91:a7:84:27:55:0d:91:2c:ef:da:01:94:57:44:
                    35:ba:78:e3:83:a1:b2:5f:90:bd:07:80:c2:7a:19:
                    e1:56:d8:1f:c0:42:42:84:4b:0d:4b:b1:7c:2f:d9:
                    64:70:a5:b3:e2:24:76:4b:d1:d6:fb:6b:b1:f1:02:
                    25:28:e5:53:0a:98:37:f6:a1:33:29:a6:18:b8:c7:
                    74:54:6e:04:1a:5e:72:e4:77:a4:b5:c2:d0:22:c8:
                    40:0e:6a:3d:3b:70:fb:95:f0:48:e3:34:25:17:cd:
                    76:59:4c:8c:27:05:86:f7:b1:32:0d:6b:f4:3d:f1:
                    ac:b5:b9:15:3d:30:f6:0e:ee:a6:25:aa:11:dd:8e:
                    7c:a7:15:d7:39:94:9a:f8:ff:84:8b:4f:84:99:d3:
                    d3:33:1e:79:2d:79:40:eb:54:0b:ab:db:2f:ae:e4:
                    bc:ad:52:2d:59:2e:7d:d8:7e:f0:c8:02:03:3a:2b:
                    68:47:86:1d:3c:d5:d7:9e:75:4f:60:65:80:59:3d:
                    83:25:14:37:3c:fb:d6:65:5b:0b:45:aa:cf:f0:6e:
                    28:a1:a6:39:b7:c7:51:1b:2b:59:d3:54:c3:e8:b8:
                    8d:26:07:de:3e:2a:dd:09:50:63:d0:9b:45:12:9d:
                    2e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AE:04:CA:A8:0D:A5:85:48:18:13:EA:24:9D:D9:A7:01:7A:F2:4C
            X509v3 Authority Key Identifier:
                keyid:A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/3133382e3131372e38382e302f32322d3234203d3e20323634323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:d6:0e:a8:12:87:4f:d7:8c:f3:a0:17:48:cf:f1:36:9c:07:
         99:c2:01:40:73:45:2f:65:85:5d:cc:a4:35:36:14:ef:74:89:
         f0:ba:f9:72:2d:5d:17:7a:25:d6:48:98:3d:6b:fe:7c:ea:c0:
         82:58:14:ba:b8:84:f2:a2:23:8c:b8:c7:66:83:cc:4e:48:73:
         1d:2f:df:74:aa:aa:7e:3f:11:a5:78:09:5d:61:6b:ee:80:f2:
         b9:0c:ca:3e:32:31:a1:fd:6b:76:69:38:7d:b4:53:f4:0f:90:
         49:52:a3:aa:4d:7f:53:35:82:0c:14:a3:f5:0a:59:e7:86:bf:
         90:18:ad:17:c1:df:94:7a:8a:b8:5f:2d:3a:0e:00:92:0d:4d:
         5f:82:b7:f9:47:4c:8d:aa:b3:61:b0:36:5b:1c:29:4d:56:5d:
         3a:22:b3:04:cf:41:ef:7d:a1:6a:81:f3:94:d3:be:48:52:66:
         9a:56:fd:43:09:d2:e4:86:94:35:66:ce:5f:62:e4:3c:c5:44:
         84:91:c8:08:ea:31:fe:56:64:16:68:8d:28:0b:f5:3e:9a:0e:
         2f:47:e2:f0:5c:1d:66:ae:14:e1:a8:10:19:1d:d2:88:2d:6b:
         46:b6:ec:e9:5a:36:d3:bd:46:51:6f:4f:94:60:ef:60:e4:05:
         62:d1:2e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:59:06 2025 by rpki-client