Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132392e302f32342d3234203d3e20323633393334.roa
File:                     3133382e3231392e3132392e302f32342d3234203d3e20323633393334.roa (raw, json)
Hash identifier:          CETLY6u4iEz1R4iJokZzBHGM+n9sqOop3pDSRWMF6dc=
Subject key identifier:   F6:35:AE:56:33:83:19:A2:46:57:01:EE:75:D6:BB:4C:5D:46:CB:C9
Certificate issuer:       /CN=40E949830CC8643940DE6930F8D9D7E92FFA9152
Certificate serial:       59978F575CD3EB03AEF928F710B993F05657E695
Authority key identifier: 40:E9:49:83:0C:C8:64:39:40:DE:69:30:F8:D9:D7:E9:2F:FA:91:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40E949830CC8643940DE6930F8D9D7E92FFA9152.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132392e302f32342d3234203d3e20323633393334.roa
Signing time:             Wed 04 Jun 2025 15:46:51 +0000
ROA not before:           Wed 04 Jun 2025 15:41:51 +0000
ROA not after:            Wed 03 Jun 2026 15:46:51 +0000
asID:                     263934
IP address blocks:        138.219.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/40E949830CC8643940DE6930F8D9D7E92FFA9152.crl
                          rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/40E949830CC8643940DE6930F8D9D7E92FFA9152.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40E949830CC8643940DE6930F8D9D7E92FFA9152.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 21:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:97:8f:57:5c:d3:eb:03:ae:f9:28:f7:10:b9:93:f0:56:57:e6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40E949830CC8643940DE6930F8D9D7E92FFA9152
        Validity
            Not Before: Jun  4 15:41:51 2025 GMT
            Not After : Jun  3 15:46:51 2026 GMT
        Subject: CN=F635AE56338319A2465701EE75D6BB4C5D46CBC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b7:66:6e:60:ae:34:04:a4:eb:14:f9:4f:d5:
                    be:8a:21:ec:aa:2d:27:13:44:ec:8b:12:ad:53:b7:
                    75:c9:79:89:70:20:c1:30:38:8c:71:90:7a:78:75:
                    7d:fe:cb:78:01:a6:33:b1:9d:10:d7:a8:92:e1:d8:
                    1c:27:2b:9c:e0:6f:b3:14:cb:88:70:b4:5f:9f:3f:
                    70:e0:a7:64:a4:a0:2a:cf:91:82:2b:eb:20:63:ea:
                    7a:31:6b:53:a0:ad:3c:b6:08:65:94:05:b0:b8:cf:
                    65:82:ac:96:f9:cb:3d:99:72:fb:a5:2d:64:40:56:
                    fa:5b:cb:a2:e5:cc:f6:d2:af:4c:5d:d9:7c:3d:54:
                    ff:96:51:30:2a:48:40:44:30:20:ce:61:e1:04:ba:
                    ea:7c:98:da:54:f0:d0:dd:85:54:9d:c2:49:1d:81:
                    86:83:dc:4e:04:21:20:cc:eb:83:67:a2:6a:3c:aa:
                    02:7c:e4:40:eb:41:51:4e:04:98:d2:b2:2a:2a:22:
                    1e:e4:ed:07:a9:ba:c1:a0:38:e2:8e:01:67:22:75:
                    64:4a:8d:1e:30:1f:63:64:b3:ff:e5:ba:3d:cd:0b:
                    17:c2:60:c6:a9:9a:9b:78:58:29:f4:14:f9:fd:af:
                    95:39:18:ff:e3:74:69:3a:d2:b5:c5:7c:d9:3e:37:
                    ea:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:35:AE:56:33:83:19:A2:46:57:01:EE:75:D6:BB:4C:5D:46:CB:C9
            X509v3 Authority Key Identifier:
                keyid:40:E9:49:83:0C:C8:64:39:40:DE:69:30:F8:D9:D7:E9:2F:FA:91:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/40E949830CC8643940DE6930F8D9D7E92FFA9152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40E949830CC8643940DE6930F8D9D7E92FFA9152.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132392e302f32342d3234203d3e20323633393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:ba:47:c3:7a:f1:fc:96:b1:a9:85:67:17:d2:09:df:ff:18:
         d0:f6:68:a1:fb:37:b2:17:d6:7d:2d:aa:ca:46:e5:68:91:6d:
         5c:42:b7:3a:51:dd:90:fc:a3:d4:fd:77:ff:86:27:8f:01:55:
         6c:28:7e:f4:aa:d2:25:88:f9:74:90:36:86:dc:c6:7b:f9:c2:
         29:53:5a:8d:db:87:10:5c:c5:85:f3:f2:88:11:94:23:19:7d:
         73:df:9d:50:af:29:c6:f5:31:29:e5:fe:06:e6:ed:96:73:6e:
         56:8f:f0:ec:19:9d:a7:71:21:d8:fc:42:94:6f:2b:13:9c:f6:
         50:cb:ad:f5:89:66:39:49:a9:27:10:ed:36:a9:81:b1:e7:a2:
         fb:84:3a:3e:bd:79:e6:ba:52:0d:5e:cf:8e:5f:38:61:38:d2:
         b0:1a:d4:1e:b6:f8:9e:a2:de:61:bf:26:ab:ad:cf:7b:d9:2f:
         55:57:33:f6:5b:45:94:70:3c:b0:80:c0:5b:a1:06:1d:f9:78:
         b3:95:6c:ad:37:67:ce:53:18:26:cb:11:f2:ad:8c:63:36:38:
         a7:27:53:ca:ec:08:d5:35:62:8e:1a:ec:89:29:ae:dd:a9:18:
         c5:e4:1c:17:61:90:05:c1:45:8e:7d:e0:d9:de:dc:0c:ab:81:
         50:8f:f7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 02:23:29 2025 by rpki-client