Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3133382e3230342e37322e302f32322d3234203d3e203238313436.roa
File:                     3133382e3230342e37322e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          AK3KOC/75Hs+dM7tNTAfssAUV4M2Z6ucn7c42teFENk=
Subject key identifier:   22:71:78:3F:87:2C:FC:60:11:F9:BF:52:86:AC:AA:23:BD:30:13:EA
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       4E75C52432BB844784BE008A659A9C4CE30371D3
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3133382e3230342e37322e302f32322d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:50:40 +0000
ROA not before:           Mon 12 May 2025 12:45:40 +0000
ROA not after:            Mon 11 May 2026 12:50:40 +0000
asID:                     28146
IP address blocks:        138.204.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:75:c5:24:32:bb:84:47:84:be:00:8a:65:9a:9c:4c:e3:03:71:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:45:40 2025 GMT
            Not After : May 11 12:50:40 2026 GMT
        Subject: CN=2271783F872CFC6011F9BF5286ACAA23BD3013EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:e3:7b:e7:c5:60:52:31:5d:28:24:3d:07:
                    63:c6:0e:7f:7f:eb:15:89:2b:a1:2f:07:20:a7:de:
                    45:5c:ff:5a:81:80:20:67:f9:53:d9:89:79:33:9f:
                    92:82:36:eb:b1:bd:01:b6:a3:6d:bf:36:1c:da:3b:
                    43:52:85:ea:25:b3:0a:1b:f3:a0:0e:29:00:b7:c3:
                    b4:89:20:f2:a1:99:14:f4:dd:52:c9:82:16:08:5d:
                    bf:a8:54:f0:ed:95:08:2a:59:40:f1:d7:89:61:6e:
                    52:6f:a8:1e:f9:49:98:65:ef:ba:5f:f4:d5:4a:dd:
                    c3:63:78:7f:d7:ea:28:96:75:fc:96:14:a0:8b:24:
                    a4:3e:ed:65:a1:41:bf:01:da:c5:f7:3a:f1:08:2b:
                    e8:d2:f3:31:42:bd:a4:31:1c:f4:7c:de:83:a1:d3:
                    59:70:66:1a:ab:37:1d:e9:45:f3:54:d2:39:6a:d3:
                    bf:1c:b9:e3:76:02:50:50:cf:88:22:b1:13:e2:a0:
                    f4:5a:1f:78:fa:b0:75:c6:d0:9d:8c:2b:b5:a3:63:
                    12:54:0b:2c:c1:b1:ba:4b:e4:c8:cc:d3:09:b7:6e:
                    7b:c7:db:d1:a3:1c:3a:0d:fb:07:b8:b8:15:70:81:
                    77:f7:32:12:4a:e5:0d:be:59:95:ea:57:9f:e2:d8:
                    a6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:71:78:3F:87:2C:FC:60:11:F9:BF:52:86:AC:AA:23:BD:30:13:EA
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3133382e3230342e37322e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:56:d1:c0:eb:7d:6a:7c:32:ec:78:83:96:a9:74:2e:f7:ab:
         48:08:3c:c2:4b:2a:d9:cb:f7:f7:89:9b:ea:a0:88:b3:91:ad:
         db:61:4c:8d:5a:25:68:6d:c5:95:88:88:76:12:fc:bc:d3:7f:
         5c:82:2e:fc:9f:79:6d:ba:f5:47:ef:cb:51:03:98:c4:75:c0:
         c9:a3:f1:1e:a4:7a:66:a4:84:d0:07:1f:37:5d:e3:4c:1b:b6:
         fb:eb:b9:ff:18:19:d6:a9:d0:72:7f:54:43:f6:1f:f8:0b:47:
         05:bd:cc:33:56:d8:14:16:d8:2b:64:c1:d0:36:98:ff:a5:60:
         8d:81:62:35:3f:0d:fb:0c:51:ab:cb:e1:8f:5d:4b:30:ec:44:
         78:4b:09:b4:a2:9c:54:34:89:02:dd:fd:27:8c:c3:37:83:46:
         d4:f2:e3:16:0b:a8:13:70:0f:07:56:c4:59:d8:c2:c9:92:6d:
         66:73:30:7d:a4:4a:f1:f4:73:bc:a0:0a:1d:28:86:c9:eb:fe:
         bc:ee:e1:71:2a:8c:bb:d0:69:ca:80:ab:05:d6:12:c3:71:9f:
         35:36:4e:02:45:49:37:1f:4d:7a:5e:29:2e:01:75:40:f8:27:
         ae:88:cf:e2:82:d7:e5:61:06:74:17:04:bf:a0:5e:cc:16:33:
         6b:d1:02:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:41:17 2025 by rpki-client