Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3133382e3138362e3131362e302f32322d3234203d3e203238313436.roa
File:                     3133382e3138362e3131362e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          E8lra+v/B2TOsaDBPWpYLx6YPcRrXnRDU2Qd0Qj0wcI=
Subject key identifier:   06:81:99:B2:9A:D6:09:6E:E5:5C:98:0E:46:B3:AA:B3:16:FA:6A:A0
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       6B9CE3AE0E9B132B36A5EC2C3CF6F1E4B8AFD1D5
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3133382e3138362e3131362e302f32322d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:54:43 +0000
ROA not before:           Mon 12 May 2025 12:49:43 +0000
ROA not after:            Mon 11 May 2026 12:54:43 +0000
asID:                     28146
IP address blocks:        138.186.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 07:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9c:e3:ae:0e:9b:13:2b:36:a5:ec:2c:3c:f6:f1:e4:b8:af:d1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:49:43 2025 GMT
            Not After : May 11 12:54:43 2026 GMT
        Subject: CN=068199B29AD6096EE55C980E46B3AAB316FA6AA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cf:17:5c:7a:b1:15:3e:09:c0:1f:d6:a9:82:
                    bc:b3:54:b7:10:19:bb:29:ba:d4:3f:c0:1f:d8:c5:
                    f0:28:80:fb:84:4c:5b:8b:a4:18:47:a0:59:28:95:
                    71:65:0d:bf:3e:e1:fc:0c:ed:b7:a6:f7:f6:8b:89:
                    3f:6c:36:e8:fb:9a:c6:6d:1e:79:00:41:50:52:68:
                    7a:83:f9:5e:67:ee:ba:cd:a5:41:15:5e:b7:ad:39:
                    9b:2b:80:a6:99:eb:66:70:4c:b3:51:58:5b:a1:d2:
                    8b:1a:d5:64:3f:1e:3b:a9:da:d0:bc:5b:97:a5:eb:
                    49:84:0b:98:55:03:00:d5:da:5f:2f:d0:99:58:d1:
                    3c:3d:ce:47:53:d1:c0:7a:e5:eb:f0:2f:7c:3d:2c:
                    be:2a:0f:b7:db:36:2c:5f:6f:6e:b5:bf:2b:58:c0:
                    9f:c0:fc:7b:32:22:0a:1c:e5:94:62:ed:61:30:8b:
                    0a:3e:62:ce:57:8f:94:a9:5e:b9:97:ac:9d:26:af:
                    5f:e8:44:c6:9c:c1:aa:65:7f:17:91:2a:c8:e7:ce:
                    91:22:81:6c:b0:74:2e:ad:1e:6a:b9:5e:3b:67:e3:
                    fd:d7:ae:f7:49:7a:ad:c6:8a:8a:98:76:ea:62:72:
                    cf:36:41:70:3c:9b:eb:c2:21:1f:ec:97:15:df:44:
                    dd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:81:99:B2:9A:D6:09:6E:E5:5C:98:0E:46:B3:AA:B3:16:FA:6A:A0
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3133382e3138362e3131362e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:00:95:65:e0:1d:c1:b7:fa:4b:63:80:fc:5a:f7:30:15:8a:
         59:35:a8:32:f3:f4:ff:c4:55:96:e0:23:21:bd:ca:fb:c0:69:
         b2:09:03:6c:26:e1:6e:76:91:26:65:fe:1e:9a:49:e7:82:92:
         24:1c:be:36:02:35:f3:5a:8e:48:79:c1:84:5b:8e:5d:5a:d5:
         3e:b5:66:dd:d3:c6:1c:37:62:b9:ed:75:17:69:b4:45:5d:05:
         8d:e6:dd:bb:2a:dd:a0:ca:2c:64:43:20:86:15:22:3a:11:35:
         c2:17:fd:42:1d:48:b3:e0:e6:44:c9:1b:6e:db:a4:ed:bd:58:
         a9:7a:be:2b:46:4f:b0:de:2f:68:8c:c9:3c:0e:85:55:b3:f2:
         7f:d4:53:02:f8:69:c5:dd:95:0f:63:31:9d:19:ec:74:a6:a3:
         f7:0a:37:11:1c:f5:85:84:7b:f0:d3:89:7e:5e:63:43:c5:13:
         a0:6b:44:b9:fd:64:3a:dc:7e:81:fe:fe:50:c3:53:05:20:e3:
         25:03:ae:79:6f:43:8a:51:46:2a:e0:5f:ba:21:35:8b:1b:be:
         44:db:3b:2e:8d:79:d8:7b:45:df:f7:2b:71:6a:a1:8f:4b:57:
         5b:72:eb:a4:b1:13:8f:6e:d7:af:4d:d6:dd:1e:23:fb:0c:0e:
         54:6a:f8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:06:50 2025 by rpki-client