Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3133382e302e3233352e302f32342d3234203d3e20323634353637.roa
File:                     3133382e302e3233352e302f32342d3234203d3e20323634353637.roa (raw, json)
Hash identifier:          9rl3DoTQjV3Z0FvLoiZbPTryNL/lhlYMfGw8WrZonpo=
Subject key identifier:   1A:48:2F:5E:2C:9B:72:40:15:F1:18:9A:09:BD:9F:0A:F7:9F:A3:7A
Certificate issuer:       /CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
Certificate serial:       21B5C549B50E81E26744854CE691A99CB9DCDAAB
Authority key identifier: 7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3133382e302e3233352e302f32342d3234203d3e20323634353637.roa
Signing time:             Wed 18 Jun 2025 03:38:33 +0000
ROA not before:           Wed 18 Jun 2025 03:33:33 +0000
ROA not after:            Wed 17 Jun 2026 03:38:33 +0000
asID:                     264567
IP address blocks:        138.0.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl
                          rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b5:c5:49:b5:0e:81:e2:67:44:85:4c:e6:91:a9:9c:b9:dc:da:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
        Validity
            Not Before: Jun 18 03:33:33 2025 GMT
            Not After : Jun 17 03:38:33 2026 GMT
        Subject: CN=1A482F5E2C9B724015F1189A09BD9F0AF79FA37A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6d:c6:59:eb:4f:35:08:41:91:10:7a:c5:a4:
                    5d:e4:7f:17:d2:2f:09:d0:11:05:b3:b5:8f:db:6b:
                    b1:33:c5:a6:c0:b9:ab:06:7b:8b:29:87:ef:d9:4f:
                    c9:b5:0b:eb:3b:32:53:b7:11:7f:d6:7a:ee:c4:bf:
                    b6:e7:f6:1c:14:bb:ae:ea:c2:78:12:b5:30:00:6b:
                    6e:86:f5:bd:0e:6a:fd:e2:64:2a:38:dd:bd:3c:3e:
                    b3:de:09:71:31:8e:f5:53:f0:0e:ff:6f:6c:4a:fe:
                    bb:e8:65:b9:f6:35:ee:f1:9f:c9:7f:a3:39:24:cb:
                    d2:73:cf:43:7f:08:53:34:fe:75:d6:ea:06:8c:b0:
                    31:10:f9:cc:35:67:56:1b:f4:b4:e1:44:42:d9:52:
                    ec:e1:2c:03:72:9b:0a:af:9e:ce:a0:24:22:42:97:
                    96:a1:e5:53:ee:67:ea:28:8f:c6:dd:0d:4f:08:8f:
                    ca:78:ce:91:81:9c:a8:4c:31:79:ec:6f:2e:8d:67:
                    eb:6c:f8:10:5c:69:88:e6:ac:41:b9:a2:10:16:d2:
                    01:3a:ab:1b:03:87:42:54:2a:84:b2:f5:81:67:6e:
                    8d:f6:23:28:ce:5b:55:79:5f:5d:d4:98:b9:ad:47:
                    f1:11:c2:d2:d1:fc:f2:e8:15:35:40:5f:8a:80:db:
                    d5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:48:2F:5E:2C:9B:72:40:15:F1:18:9A:09:BD:9F:0A:F7:9F:A3:7A
            X509v3 Authority Key Identifier:
                keyid:7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3133382e302e3233352e302f32342d3234203d3e20323634353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:81:fa:d4:1c:aa:76:a3:61:69:d2:29:76:17:d9:73:61:9c:
         ff:d7:98:57:54:58:5c:36:ae:3d:ed:aa:01:7b:04:16:04:1f:
         61:64:e5:a1:01:bd:6d:53:d9:ae:07:a9:0e:30:0d:b1:bd:05:
         41:cd:65:53:5e:0b:83:d3:bd:30:39:a3:7a:79:c6:8a:22:9e:
         ca:cb:4b:2a:e9:1c:ac:93:74:5b:16:6b:9f:8a:40:6f:6b:62:
         8a:b6:c1:ec:4a:91:db:b0:ae:28:eb:a6:de:0a:bc:96:15:c4:
         8e:6d:ee:42:2d:9f:e9:cb:2b:5c:b1:ec:a7:99:f8:01:59:4c:
         2f:3a:32:a8:c2:6e:ff:44:d3:a8:90:23:44:a5:7f:b3:2e:ed:
         5f:38:fb:d5:12:cb:56:af:c7:4c:fa:3a:da:4d:bb:73:08:67:
         f0:51:16:a6:07:5d:33:ce:c4:cf:91:44:e1:9c:18:52:e4:7d:
         d5:e8:1c:70:3a:a7:d3:e1:a8:5d:87:58:5c:2a:44:a7:2b:22:
         3f:58:c3:0e:5e:78:c3:19:c3:1e:d9:13:e3:f4:62:61:d4:b4:
         f9:d7:92:12:c7:da:f9:3a:ff:3f:e1:28:10:f2:b2:d1:2f:7d:
         a7:2e:2e:3e:b6:ce:39:39:4a:40:1f:56:0c:5d:23:22:f8:b8:
         ef:58:60:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:24:12 2025 by rpki-client