Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3133382e302e3233322e302f32332d3233203d3e20323634353637.roa
File:                     3133382e302e3233322e302f32332d3233203d3e20323634353637.roa (raw, json)
Hash identifier:          dctD9cqz0eZHeIwZ3QS1I7HnGNhBl2CoUcQL8VwSudw=
Subject key identifier:   A9:51:16:64:86:34:60:A9:40:AA:35:5B:E5:4A:B9:02:C2:7F:56:A3
Certificate issuer:       /CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
Certificate serial:       455742872B3BBAF72A4344F826A2FA13EECC0F66
Authority key identifier: 7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3133382e302e3233322e302f32332d3233203d3e20323634353637.roa
Signing time:             Tue 17 Jun 2025 19:57:22 +0000
ROA not before:           Tue 17 Jun 2025 19:52:22 +0000
ROA not after:            Tue 16 Jun 2026 19:57:22 +0000
asID:                     264567
IP address blocks:        138.0.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl
                          rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:57:42:87:2b:3b:ba:f7:2a:43:44:f8:26:a2:fa:13:ee:cc:0f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
        Validity
            Not Before: Jun 17 19:52:22 2025 GMT
            Not After : Jun 16 19:57:22 2026 GMT
        Subject: CN=A9511664863460A940AA355BE54AB902C27F56A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:5b:c7:87:83:6a:bd:ac:3d:7e:f8:d5:e5:
                    7b:be:28:f8:43:64:d1:41:84:7f:ab:b5:31:5a:04:
                    6f:69:0b:2d:4d:52:34:f0:a3:91:30:df:dd:cc:66:
                    dd:4e:26:39:ac:f9:89:76:5e:12:03:56:ce:f3:c2:
                    ae:88:d8:83:f1:b6:91:f5:c7:ba:de:93:f2:d0:2e:
                    4f:77:c2:ee:c4:3b:cb:93:17:f4:f4:58:3b:b5:85:
                    81:c8:7d:7b:bf:2a:75:5e:c0:ce:34:e3:45:fc:ab:
                    cc:e2:5d:51:8d:52:84:e5:06:6a:97:07:2a:74:39:
                    36:c2:e5:ae:0c:6e:6c:05:c6:a2:17:80:11:12:fc:
                    83:3a:05:a6:b4:91:cc:0b:83:f6:36:ae:13:d5:aa:
                    8e:2f:a6:31:52:55:a1:29:48:06:08:3d:8b:9f:d5:
                    5b:cb:c2:c1:f7:be:f0:37:10:ff:77:ba:3e:f0:1c:
                    86:6e:f7:96:a6:27:ed:a1:2f:d5:e9:7f:d4:59:72:
                    cc:60:97:2f:11:56:d2:18:a9:fb:a3:56:21:ec:39:
                    31:b2:a9:2b:0d:2b:43:b8:08:ae:de:ac:4d:5b:01:
                    df:68:7f:c3:1d:51:9d:e3:5f:c1:a0:11:0b:21:8e:
                    34:93:38:0d:8c:b0:f7:87:4c:3a:9f:05:ef:37:79:
                    a3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:51:16:64:86:34:60:A9:40:AA:35:5B:E5:4A:B9:02:C2:7F:56:A3
            X509v3 Authority Key Identifier:
                keyid:7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3133382e302e3233322e302f32332d3233203d3e20323634353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:71:48:3c:59:df:12:d0:ac:14:03:a0:ca:cb:28:e2:20:0d:
         87:54:a0:49:2f:d7:94:ef:a1:e1:3d:cf:45:80:1e:f2:66:49:
         86:e3:11:2e:c0:3e:d2:31:3b:fc:dc:a5:6c:00:f6:b7:13:ae:
         21:98:ea:f0:45:7e:46:6c:3f:85:92:5b:f7:f2:50:71:ee:9c:
         47:6e:ae:50:7b:56:f3:2c:15:43:77:fa:6b:1c:60:02:1d:94:
         7b:e6:24:45:1b:44:4c:d8:21:23:61:c6:64:e2:ce:ab:20:d0:
         98:6c:45:5e:47:ef:03:94:e0:5d:f6:81:3a:3e:c0:43:f9:6a:
         46:c3:db:92:f5:e4:53:28:ac:4c:1f:da:57:9c:92:8c:68:06:
         58:ee:67:09:6f:1b:84:ff:33:aa:9f:a6:a8:33:c5:d9:58:a5:
         29:d9:99:4d:54:20:b4:be:5d:4d:2a:b3:fe:f0:e0:1f:b9:7b:
         19:fa:af:12:40:a0:2a:47:11:95:f2:f9:c0:cc:c7:ce:58:05:
         a4:9c:dc:e5:b1:67:71:d5:ed:5b:f5:33:f5:ba:b4:49:9b:4a:
         fe:35:b2:83:b8:d2:67:0e:93:16:c8:ab:3f:4a:76:57:bd:d0:
         9d:bb:a3:56:e4:e4:69:6c:97:c6:bd:da:16:6a:40:c8:4d:3e:
         3a:1b:f4:9f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURVdChys7uvcqQ0T4JqL6E+7MD2YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCOTI0OTNCNTk5QzFGNjQwQThEMzk1NkIyMDk1NjUy
QzZFMUFBMDAeFw0yNTA2MTcxOTUyMjJaFw0yNjA2MTYxOTU3MjJaMDMxMTAvBgNV
BAMTKEE5NTExNjY0ODYzNDYwQTk0MEFBMzU1QkU1NEFCOTAyQzI3RjU2QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrA1vHh4Nqvaw9fvjV5Xu+KPhD
ZNFBhH+rtTFaBG9pCy1NUjTwo5Ew393MZt1OJjms+Yl2XhIDVs7zwq6I2IPxtpH1
x7rek/LQLk93wu7EO8uTF/T0WDu1hYHIfXu/KnVewM4040X8q8ziXVGNUoTlBmqX
Byp0OTbC5a4MbmwFxqIXgBES/IM6Baa0kcwLg/Y2rhPVqo4vpjFSVaEpSAYIPYuf
1VvLwsH3vvA3EP93uj7wHIZu95amJ+2hL9Xpf9RZcsxgly8RVtIYqfujViHsOTGy
qSsNK0O4CK7erE1bAd9of8MdUZ3jX8GgEQshjjSTOA2MsPeHTDqfBe83eaOBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqVEWZIY0YKlAqjVb5Uq5AsJ/VqMwHwYDVR0j
BBgwFoAUfLkkk7WZwfZAqNOVayCVZSxuGqAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdOMmFNY3ZYVDc4UzlMQnhSMk56ZnNxVVBNekVFS3A1MnlMQnJicVh6
WmQvMC83Q0I5MjQ5M0I1OTlDMUY2NDBBOEQzOTU2QjIwOTU2NTJDNkUxQUEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQjkyNDkzQjU5OUMxRjY0
MEE4RDM5NTZCMjA5NTY1MkM2RTFBQTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHTjJhTWN2WFQ3OFM5TEJ4UjJOemZzcVVQTXpFRUtwNTJ5TEJyYnFYelpkLzAv
MzEzMzM4MmUzMDJlMzIzMzMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzUzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBigDoMA0GCSqGSIb3DQEBCwUAA4IBAQAacUg8Wd8S
0KwUA6DKyyjiIA2HVKBJL9eU76HhPc9FgB7yZkmG4xEuwD7SMTv83KVsAPa3E64h
mOrwRX5GbD+Fklv38lBx7pxHbq5Qe1bzLBVDd/prHGACHZR75iRFG0RM2CEjYcZk
4s6rINCYbEVeR+8DlOBd9oE6PsBD+WpGw9uS9eRTKKxMH9pXnJKMaAZY7mcJbxuE
/zOqn6aoM8XZWKUp2ZlNVCC0vl1NKrP+8OAfuXsZ+q8SQKAqRxGV8vnAzMfOWAWk
nNzlsWdx1e1b9TP1urRJm0r+NbKDuNJnDpMWyKs/SnZXvdCdu6NW5ORpbJfGvdoW
akDITT46G/Sf
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:11:27 2025 by rpki-client