Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/3133382e3132312e35362e302f32322d3332203d3e20323634323835.roa
File:                     3133382e3132312e35362e302f32322d3332203d3e20323634323835.roa (raw, json)
Hash identifier:          XSFN/MGntmUoswJ6I/EK8iVPBdwAq25qsUOLR/xiMYs=
Subject key identifier:   2B:AD:4C:2E:C6:49:D7:BA:D4:C9:1C:6F:F6:DA:A8:75:C2:5F:54:6A
Certificate issuer:       /CN=92F0BE699057DC1454AA2C1B3DF1380FB43DC2B8
Certificate serial:       08A0E6EE0AE36949D400DD23E89A2F48435F118B
Authority key identifier: 92:F0:BE:69:90:57:DC:14:54:AA:2C:1B:3D:F1:38:0F:B4:3D:C2:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92F0BE699057DC1454AA2C1B3DF1380FB43DC2B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/3133382e3132312e35362e302f32322d3332203d3e20323634323835.roa
Signing time:             Mon 14 Jul 2025 18:22:10 +0000
ROA not before:           Mon 14 Jul 2025 18:17:10 +0000
ROA not after:            Mon 13 Jul 2026 18:22:10 +0000
asID:                     264285
IP address blocks:        138.121.56.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/92F0BE699057DC1454AA2C1B3DF1380FB43DC2B8.crl
                          rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/92F0BE699057DC1454AA2C1B3DF1380FB43DC2B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92F0BE699057DC1454AA2C1B3DF1380FB43DC2B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 12:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a0:e6:ee:0a:e3:69:49:d4:00:dd:23:e8:9a:2f:48:43:5f:11:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92F0BE699057DC1454AA2C1B3DF1380FB43DC2B8
        Validity
            Not Before: Jul 14 18:17:10 2025 GMT
            Not After : Jul 13 18:22:10 2026 GMT
        Subject: CN=2BAD4C2EC649D7BAD4C91C6FF6DAA875C25F546A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9d:ba:b7:9a:36:ca:13:57:6c:89:60:2a:38:
                    47:b1:1d:76:0c:57:72:f8:9f:ef:aa:fc:3c:80:7c:
                    5b:cb:23:a1:f7:0a:75:38:5c:39:4e:d1:e4:e1:33:
                    6e:71:1b:49:6f:b2:10:4b:be:51:5a:a6:e7:fe:19:
                    7a:a1:95:cc:62:6b:50:37:33:2f:45:61:56:1e:1f:
                    5f:f8:09:1d:ac:7c:16:e4:88:05:88:32:6e:d5:51:
                    fc:a5:3c:87:57:4c:dd:c2:a1:e7:a0:3b:48:55:3f:
                    9a:35:6b:5a:62:41:a6:2a:e3:08:e5:d2:82:f4:ea:
                    df:b0:b1:91:01:56:62:a1:ef:2c:30:1b:61:f3:ba:
                    83:32:54:a2:27:73:f3:f2:c1:01:18:87:38:8f:fe:
                    69:70:13:9f:8d:80:1c:50:e6:73:34:b3:d7:f9:73:
                    8d:f2:0f:a8:b9:ad:d5:e6:f5:4b:f0:4b:b7:11:5a:
                    fe:d1:60:f6:7a:8e:e1:d8:74:18:71:f2:0b:b9:c0:
                    01:d2:1c:e8:bd:60:f9:59:2f:01:2f:06:64:2c:7e:
                    d4:66:14:c9:1d:1a:2d:14:28:e4:0e:15:b1:fc:3a:
                    62:68:ee:72:8a:65:17:90:55:0a:15:fc:12:7e:bc:
                    83:25:16:f4:b8:9b:ea:9b:c1:3e:17:de:b5:91:b1:
                    f8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AD:4C:2E:C6:49:D7:BA:D4:C9:1C:6F:F6:DA:A8:75:C2:5F:54:6A
            X509v3 Authority Key Identifier:
                keyid:92:F0:BE:69:90:57:DC:14:54:AA:2C:1B:3D:F1:38:0F:B4:3D:C2:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/92F0BE699057DC1454AA2C1B3DF1380FB43DC2B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92F0BE699057DC1454AA2C1B3DF1380FB43DC2B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/3133382e3132312e35362e302f32322d3332203d3e20323634323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:e4:a0:63:b0:10:50:0c:62:0b:08:2f:61:8d:98:fa:41:c1:
         a4:15:8d:38:70:4e:17:7b:70:50:d3:89:13:19:00:5d:51:b1:
         5d:59:36:4c:6d:de:c6:16:4c:0d:c0:0d:4f:b3:36:dd:f3:d4:
         95:b9:08:42:9b:fc:29:c9:3a:72:e7:08:50:08:cf:94:44:73:
         6f:a3:67:2e:ba:78:ec:9b:82:fe:47:63:d8:5c:75:fa:80:cc:
         a6:8e:e1:23:f7:cb:9d:08:15:4b:ba:e8:05:5a:c8:a5:97:eb:
         b5:1f:1c:e7:03:c5:4c:81:c6:e9:c1:69:f4:d6:aa:c9:b3:ef:
         d2:79:b3:e8:8f:32:e5:d6:15:fc:cb:17:f9:17:eb:f9:a8:2e:
         37:46:02:70:4a:fc:c3:b9:05:4d:8e:b6:39:53:c8:ec:70:62:
         2a:54:90:72:dd:9a:10:1f:13:92:74:6b:6b:3c:2a:50:f3:c6:
         36:e2:6a:79:d1:c3:d1:3b:74:e9:e5:b8:b2:82:d9:9d:12:d0:
         af:2c:4b:3e:d2:fb:87:58:33:b0:34:0e:cf:dd:90:c7:cb:a9:
         6a:1d:e2:d9:d0:1a:22:bd:ed:59:1c:4d:a8:89:75:1e:52:9d:
         29:1f:f6:41:b6:09:ca:da:1c:c4:f1:e0:ca:0a:1e:ce:f7:03:
         7a:41:13:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:59:59 2025 by rpki-client