Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3133382e302e3233342e302f32332d3233203d3e20323634353637.roa
File:                     3133382e302e3233342e302f32332d3233203d3e20323634353637.roa (raw, json)
Hash identifier:          K/jdeY0NKzyOXxyUQzrUZ0bB3z2uvO9U5ZDyCpDzxgw=
Subject key identifier:   63:EE:1D:C6:A0:C3:99:45:6B:0A:96:62:94:20:2F:0D:DC:81:2A:B2
Certificate issuer:       /CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
Certificate serial:       276C5B171DAA71FFD05AA04C00F1592579F3131A
Authority key identifier: 7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3133382e302e3233342e302f32332d3233203d3e20323634353637.roa
Signing time:             Tue 17 Jun 2025 19:57:22 +0000
ROA not before:           Tue 17 Jun 2025 19:52:22 +0000
ROA not after:            Tue 16 Jun 2026 19:57:22 +0000
asID:                     264567
IP address blocks:        138.0.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl
                          rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:6c:5b:17:1d:aa:71:ff:d0:5a:a0:4c:00:f1:59:25:79:f3:13:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
        Validity
            Not Before: Jun 17 19:52:22 2025 GMT
            Not After : Jun 16 19:57:22 2026 GMT
        Subject: CN=63EE1DC6A0C399456B0A966294202F0DDC812AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:32:a0:05:59:d2:47:49:e3:b7:5c:11:36:ae:
                    1c:c8:3c:63:3e:d9:2f:95:d6:f6:96:39:a3:d6:3f:
                    25:e3:4b:c1:be:f1:20:87:e0:5f:13:a1:74:f1:ab:
                    79:b7:bb:26:88:e8:dc:52:6b:f0:43:f3:a7:31:c0:
                    f9:3a:42:b3:7c:f6:e0:b4:42:b6:e0:ad:d8:1b:bc:
                    65:59:1b:ba:23:1e:24:44:de:9e:49:8f:5c:a5:bc:
                    eb:58:e0:62:7d:38:03:4c:4c:de:36:68:14:68:cf:
                    36:7b:09:91:1f:d5:77:66:ba:a1:ab:e9:dd:45:48:
                    ac:b7:43:a7:97:b8:e5:2a:2d:d8:c4:43:b1:7b:6f:
                    08:66:71:21:85:aa:f9:5a:d6:b6:bc:75:41:bd:f0:
                    25:29:5c:7f:a6:0a:d1:d9:54:49:f9:55:3a:94:72:
                    22:9f:18:86:89:d1:08:b9:da:94:ed:a7:f2:23:e4:
                    b9:ae:b3:fc:e7:17:1b:42:3e:e4:91:76:b3:0e:6a:
                    5f:3d:d4:3b:e2:c1:71:be:29:72:27:72:4f:6c:fe:
                    31:87:12:1d:2a:62:73:5a:96:f6:67:ac:cc:65:59:
                    a3:a9:5a:19:55:0b:c5:70:2b:8b:43:81:57:4a:11:
                    56:28:e3:9d:67:d3:df:95:46:a9:45:50:14:73:a6:
                    fe:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EE:1D:C6:A0:C3:99:45:6B:0A:96:62:94:20:2F:0D:DC:81:2A:B2
            X509v3 Authority Key Identifier:
                keyid:7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3133382e302e3233342e302f32332d3233203d3e20323634353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:66:5a:45:88:88:0d:72:08:27:cc:31:2e:34:69:d2:1d:10:
         0c:cf:60:85:48:17:99:9e:72:10:5c:ed:6e:92:8d:d5:2f:71:
         1e:e9:93:3d:36:55:e3:ce:14:13:55:99:c5:31:a4:ba:88:e4:
         3b:93:a9:f5:35:62:4b:f2:79:cb:26:4e:cb:92:4f:bb:d0:81:
         fa:ac:e0:0b:b3:51:c5:8c:e9:1b:2d:a8:2d:a7:bc:f3:0d:be:
         49:12:ee:7b:93:fd:ba:a3:70:f5:4a:62:ad:4d:d2:b9:c1:79:
         1c:8a:91:c8:07:8f:a8:f4:49:fe:22:0d:b2:2c:45:95:27:4a:
         82:36:b8:8a:81:d8:45:a3:9a:c6:46:1d:f6:f2:83:58:60:7a:
         60:14:6b:36:64:cb:77:79:59:16:84:03:de:d3:11:63:c7:58:
         30:eb:51:d8:39:0c:61:1d:90:20:7d:f2:cd:84:1c:99:cd:00:
         96:40:d3:76:e2:5e:c8:66:f5:30:34:c7:0b:a5:f0:51:c8:0f:
         1e:50:3f:a6:c8:86:28:71:54:fa:d2:1b:d4:89:bb:e2:81:dd:
         e1:b0:6c:8a:52:d0:ac:d6:01:37:eb:da:f1:5e:e9:82:25:c4:
         b1:58:14:c8:52:8a:4e:ef:09:a4:6b:b7:01:75:54:c0:bf:37:
         a4:4e:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:16:42 2025 by rpki-client