Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3133382e302e3233322e302f32322d3232203d3e20323634353637.roa
File:                     3133382e302e3233322e302f32322d3232203d3e20323634353637.roa (raw, json)
Hash identifier:          8arSgY3THFt1dk4aEkTndnF7dI8EDlO7hHc07bUDkI8=
Subject key identifier:   80:0B:C4:86:A0:A7:36:A2:89:16:76:97:22:1B:F9:BC:80:D6:31:AF
Certificate issuer:       /CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
Certificate serial:       45CAB03CEE941DB65606AEE3B3FE04113B5FA9BA
Authority key identifier: 7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3133382e302e3233322e302f32322d3232203d3e20323634353637.roa
Signing time:             Tue 17 Jun 2025 19:57:21 +0000
ROA not before:           Tue 17 Jun 2025 19:52:21 +0000
ROA not after:            Tue 16 Jun 2026 19:57:21 +0000
asID:                     264567
IP address blocks:        138.0.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl
                          rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ca:b0:3c:ee:94:1d:b6:56:06:ae:e3:b3:fe:04:11:3b:5f:a9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
        Validity
            Not Before: Jun 17 19:52:21 2025 GMT
            Not After : Jun 16 19:57:21 2026 GMT
        Subject: CN=800BC486A0A736A289167697221BF9BC80D631AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:25:39:a7:bc:2f:97:fc:27:08:6d:62:5e:f8:
                    ca:91:a7:9b:10:11:d7:03:4b:42:de:0a:3f:3a:c3:
                    d7:f7:8b:d6:c0:46:d4:8b:4d:33:aa:79:56:f4:94:
                    f6:57:46:a4:b3:d6:a9:f5:85:31:31:1a:a1:0f:98:
                    82:8a:b3:de:d4:a0:ee:15:ba:cc:0e:15:b5:a6:bf:
                    57:84:50:ba:df:54:08:f0:e9:32:fc:0b:47:d8:4e:
                    40:32:41:6b:d9:75:dd:3b:c5:1e:02:16:f5:39:b4:
                    98:22:d3:6d:62:8b:00:5f:8e:c1:29:e0:30:46:64:
                    ad:e0:4f:b6:e7:b5:42:c9:75:62:06:94:3a:6e:63:
                    de:53:55:9f:07:ae:bc:04:0a:b6:a4:a6:47:69:00:
                    5d:91:cd:2a:0c:81:6d:f4:b2:a0:f3:88:f3:5e:29:
                    f8:5a:85:7c:bd:8c:14:fa:ff:c7:6a:a4:91:05:df:
                    f9:c9:97:92:7c:08:a4:3a:f2:95:b8:53:4a:bb:3a:
                    92:0f:aa:e9:22:2d:76:82:02:31:84:d8:c1:ed:9b:
                    cb:16:6a:a7:9f:ed:3a:f2:28:7b:50:8c:b9:2d:0f:
                    98:d5:85:04:c3:5e:ae:da:93:82:26:0b:c7:cb:6f:
                    fe:a5:74:96:4f:11:c1:4b:ba:c3:3e:49:49:47:de:
                    d1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0B:C4:86:A0:A7:36:A2:89:16:76:97:22:1B:F9:BC:80:D6:31:AF
            X509v3 Authority Key Identifier:
                keyid:7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3133382e302e3233322e302f32322d3232203d3e20323634353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:a9:d0:5b:1b:f4:5d:a9:14:24:8b:9b:7a:19:0a:03:01:c1:
         36:6a:c3:f1:0d:02:e8:b4:d0:8c:76:5f:ff:49:00:1b:fa:1d:
         df:72:62:16:0d:16:28:1f:69:90:b3:25:ee:6d:78:13:c7:f7:
         a7:b0:a2:f8:38:1e:79:c2:da:17:8f:d3:19:91:6b:aa:ba:27:
         58:b3:b8:ca:ba:1f:b1:4c:8c:67:0c:96:ea:18:1c:f1:30:f9:
         17:2b:20:4d:af:20:d6:9e:a7:89:80:92:86:97:9d:e5:2e:b4:
         e5:95:cc:02:69:6d:28:27:24:60:d0:f7:5e:1c:a4:61:f0:27:
         c6:ec:02:27:b0:5f:d1:92:d2:cc:63:24:0a:eb:27:07:48:a8:
         85:4c:9e:ba:71:f5:e4:86:8b:6a:2f:49:67:63:55:22:42:3a:
         c3:ed:4e:bb:17:b3:26:7c:7a:bf:16:8a:10:93:e8:84:7e:66:
         ca:8b:bd:85:e5:46:e9:56:c4:fd:6f:16:a4:d4:f0:67:82:bb:
         c9:07:15:64:bb:c6:20:c3:cc:8d:a9:1a:08:cc:bc:81:c9:c1:
         d2:59:cd:95:95:ad:d1:4d:5b:4b:3f:6a:0b:91:d5:9b:45:67:
         63:52:53:fb:51:e7:1b:71:33:34:ca:71:14:43:63:ee:ef:4d:
         66:4c:65:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:09:28 2025 by rpki-client