Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132382e302f32332d3233203d3e20323633393334.roa
File:                     3133382e3231392e3132382e302f32332d3233203d3e20323633393334.roa (raw, json)
Hash identifier:          4Lph+Rt7FInTDZavASbV23jKA8LtIeF0dDHJ/bfJvEc=
Subject key identifier:   9E:AC:3D:00:83:7C:87:0B:0C:B9:D3:83:3A:32:A7:43:62:78:8C:16
Certificate issuer:       /CN=40E949830CC8643940DE6930F8D9D7E92FFA9152
Certificate serial:       294688DC5F742C3AACE1A588A06C89560D070417
Authority key identifier: 40:E9:49:83:0C:C8:64:39:40:DE:69:30:F8:D9:D7:E9:2F:FA:91:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40E949830CC8643940DE6930F8D9D7E92FFA9152.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132382e302f32332d3233203d3e20323633393334.roa
Signing time:             Wed 04 Jun 2025 16:25:01 +0000
ROA not before:           Wed 04 Jun 2025 16:20:01 +0000
ROA not after:            Wed 03 Jun 2026 16:25:01 +0000
asID:                     263934
IP address blocks:        138.219.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/40E949830CC8643940DE6930F8D9D7E92FFA9152.crl
                          rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/40E949830CC8643940DE6930F8D9D7E92FFA9152.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40E949830CC8643940DE6930F8D9D7E92FFA9152.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 01:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:46:88:dc:5f:74:2c:3a:ac:e1:a5:88:a0:6c:89:56:0d:07:04:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40E949830CC8643940DE6930F8D9D7E92FFA9152
        Validity
            Not Before: Jun  4 16:20:01 2025 GMT
            Not After : Jun  3 16:25:01 2026 GMT
        Subject: CN=9EAC3D00837C870B0CB9D3833A32A74362788C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:87:8f:8a:ec:bc:81:86:3a:e7:a7:76:e8:
                    9d:84:38:22:c9:b8:21:6b:28:13:cb:26:df:52:b7:
                    f7:e9:1e:7a:9d:fa:f9:b6:d1:af:0b:6e:3a:1f:be:
                    df:66:90:c5:43:dc:5e:bf:ed:2d:79:b3:e7:ee:fe:
                    a4:02:a0:1f:0e:9e:56:20:12:14:ca:fc:51:12:7a:
                    79:ca:c7:c7:13:2e:a5:d7:36:00:f2:13:a6:52:3e:
                    09:85:fb:9f:d6:fc:be:7a:60:e6:ec:1b:06:0d:58:
                    70:21:b1:f9:03:ec:df:0e:cf:e6:bf:a6:27:11:0d:
                    f8:93:43:2a:ad:e0:cb:7a:4d:91:e3:31:ab:8b:6f:
                    d5:e5:87:a0:e9:15:75:de:71:8b:47:61:06:7f:f9:
                    5b:13:db:d9:66:48:64:b7:04:91:b3:ad:81:be:56:
                    e5:fa:97:30:ef:ea:56:c2:7e:40:cd:28:01:95:40:
                    c4:91:5c:18:8e:b0:5a:2d:58:37:55:5b:63:3f:68:
                    b9:8f:d5:0f:c0:a4:d1:05:6c:52:78:07:c1:45:d0:
                    f1:0f:b4:4c:14:4a:65:0b:82:46:8c:ed:b5:ad:6f:
                    1b:ff:64:d9:f1:0b:5b:8d:3e:be:59:1d:99:da:be:
                    5f:d4:9a:1f:f5:c6:d1:a6:f6:aa:65:f6:ec:fe:2a:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AC:3D:00:83:7C:87:0B:0C:B9:D3:83:3A:32:A7:43:62:78:8C:16
            X509v3 Authority Key Identifier:
                keyid:40:E9:49:83:0C:C8:64:39:40:DE:69:30:F8:D9:D7:E9:2F:FA:91:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/40E949830CC8643940DE6930F8D9D7E92FFA9152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40E949830CC8643940DE6930F8D9D7E92FFA9152.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132382e302f32332d3233203d3e20323633393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:7d:cd:7c:ca:aa:8a:50:a4:78:71:43:09:ba:c8:cd:18:bd:
         fc:67:04:9d:5a:9c:39:31:79:20:91:db:9b:ab:43:aa:ed:c0:
         4a:ab:a7:e3:aa:a6:41:a0:7c:bb:be:bc:08:17:df:60:b8:d2:
         b2:e9:76:cc:8d:2d:1d:5f:0a:81:d5:46:5f:29:1a:00:39:43:
         ef:f6:49:05:14:cd:4c:65:cc:5c:1f:c3:6c:da:1e:55:cd:8f:
         87:c6:97:0e:21:70:35:10:7a:79:12:59:22:c7:dc:da:6d:0f:
         0c:0c:7d:13:63:31:a3:33:ff:a5:5d:18:d7:34:86:07:86:c9:
         8c:9a:73:aa:54:6a:d1:4d:90:3f:78:c9:63:12:ff:6a:07:7e:
         24:91:72:40:92:25:c8:16:dd:a8:55:12:49:c8:b0:1c:6a:d1:
         88:6b:be:47:05:83:ed:97:45:05:de:4a:ca:88:eb:40:81:69:
         1c:47:12:d4:82:6f:01:3a:5d:20:31:49:64:af:d6:51:2e:fb:
         91:06:dd:74:dc:8f:f6:24:50:b9:57:60:9f:ae:a9:36:74:1b:
         6b:66:aa:09:74:e4:8d:0e:f2:d2:0d:e2:e3:0a:12:9b:70:4c:
         e1:8f:35:fb:1a:bd:00:15:5d:d8:9e:1f:33:e5:75:17:0f:3b:
         fe:4e:f4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 10:31:03 2025 by rpki-client