Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVe3Ukxw2qNYKQyzEUzJMuHbpkGZf1AteGhVN4TEoSwY/0/3133382e3138362e36392e302f32342d3234203d3e20323633383633.roa
File:                     3133382e3138362e36392e302f32342d3234203d3e20323633383633.roa (raw, json)
Hash identifier:          QiDUEucxFIVRfDjdOJcAEIVx3XpzC4KsCQI98pMaxvU=
Subject key identifier:   E6:9B:6E:04:88:C3:D7:3D:EE:85:27:8D:33:DA:C4:79:4E:B7:56:A4
Certificate issuer:       /CN=5885E722AB9310DDD233142F2CA1214FFCB77A28
Certificate serial:       41D526FC1A4580428BF8801C0DCFC939505E2AFE
Authority key identifier: 58:85:E7:22:AB:93:10:DD:D2:33:14:2F:2C:A1:21:4F:FC:B7:7A:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5885E722AB9310DDD233142F2CA1214FFCB77A28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVe3Ukxw2qNYKQyzEUzJMuHbpkGZf1AteGhVN4TEoSwY/0/3133382e3138362e36392e302f32342d3234203d3e20323633383633.roa
Signing time:             Wed 11 Jun 2025 11:54:12 +0000
ROA not before:           Wed 11 Jun 2025 11:49:12 +0000
ROA not after:            Wed 10 Jun 2026 11:54:12 +0000
asID:                     263863
IP address blocks:        138.186.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVe3Ukxw2qNYKQyzEUzJMuHbpkGZf1AteGhVN4TEoSwY/0/5885E722AB9310DDD233142F2CA1214FFCB77A28.crl
                          rsync://rpki-repo.registro.br/repo/AVe3Ukxw2qNYKQyzEUzJMuHbpkGZf1AteGhVN4TEoSwY/0/5885E722AB9310DDD233142F2CA1214FFCB77A28.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5885E722AB9310DDD233142F2CA1214FFCB77A28.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 03:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d5:26:fc:1a:45:80:42:8b:f8:80:1c:0d:cf:c9:39:50:5e:2a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885E722AB9310DDD233142F2CA1214FFCB77A28
        Validity
            Not Before: Jun 11 11:49:12 2025 GMT
            Not After : Jun 10 11:54:12 2026 GMT
        Subject: CN=E69B6E0488C3D73DEE85278D33DAC4794EB756A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e6:71:81:e1:d6:b9:31:af:6a:f7:56:55:a3:
                    8f:9f:0d:17:9d:49:35:d7:33:4a:62:6d:c0:34:37:
                    48:ae:83:f8:e4:ea:1b:55:4e:06:5c:97:76:4a:1a:
                    9a:4f:66:52:04:65:a3:aa:c1:a0:65:df:50:05:f2:
                    18:e2:13:e6:da:fd:9c:a2:23:b5:7a:b7:af:30:da:
                    47:a0:c6:26:56:ff:c4:67:be:41:ac:1b:e1:7c:d1:
                    b3:ab:e5:66:cf:2d:59:7e:93:13:53:a3:00:a0:50:
                    56:9f:ec:db:5b:ce:ac:18:74:83:34:46:ab:34:d9:
                    3d:4b:c4:e0:55:7d:9d:01:37:17:6a:c2:db:8d:fc:
                    e5:95:08:c3:8c:26:ae:f6:54:c2:9d:73:55:79:7d:
                    bb:97:a7:4a:88:ca:53:13:c7:dd:bc:17:f9:03:a0:
                    64:71:33:64:be:5d:74:23:83:c1:d6:cf:c9:cb:86:
                    1b:70:db:1f:25:12:97:5a:24:a1:e4:8c:7f:8a:21:
                    91:1f:66:5b:82:9d:5e:dd:81:ab:fc:86:86:c0:c8:
                    45:a0:5a:59:59:15:80:18:ec:a2:84:08:0e:2a:98:
                    80:44:2e:af:4f:0f:3d:fc:50:ee:38:f8:8d:06:14:
                    06:f9:c7:2a:a6:6c:86:c5:74:ae:7d:fe:7e:3b:04:
                    32:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9B:6E:04:88:C3:D7:3D:EE:85:27:8D:33:DA:C4:79:4E:B7:56:A4
            X509v3 Authority Key Identifier:
                keyid:58:85:E7:22:AB:93:10:DD:D2:33:14:2F:2C:A1:21:4F:FC:B7:7A:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVe3Ukxw2qNYKQyzEUzJMuHbpkGZf1AteGhVN4TEoSwY/0/5885E722AB9310DDD233142F2CA1214FFCB77A28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5885E722AB9310DDD233142F2CA1214FFCB77A28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVe3Ukxw2qNYKQyzEUzJMuHbpkGZf1AteGhVN4TEoSwY/0/3133382e3138362e36392e302f32342d3234203d3e20323633383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:64:58:e3:44:08:f2:e5:b0:6f:4f:9f:ff:ea:d2:45:b0:13:
         44:5b:5c:37:0b:1c:c8:3b:f9:50:cb:40:d1:df:b3:03:97:c5:
         df:ff:f5:a9:0f:ab:cc:ce:c7:0c:aa:fd:a0:8a:f4:55:99:c6:
         64:85:4e:3f:91:e9:87:f8:99:d8:67:a8:e0:bc:20:50:c8:68:
         54:c7:65:42:3a:d1:8e:7c:e9:eb:2e:f4:3f:bb:37:a5:b9:79:
         7d:7d:15:0c:9d:ca:62:82:a1:34:81:0d:2d:19:0b:bd:d3:32:
         f4:90:7d:09:11:63:49:91:24:f2:56:bf:40:52:72:6c:eb:d2:
         62:7d:fc:68:3c:7f:d2:70:d0:36:e4:a7:bf:9e:74:4f:38:e3:
         17:08:c5:fa:2f:69:c0:33:33:76:b3:94:df:cc:f0:ae:4f:d8:
         5b:71:68:e7:35:a5:7f:d1:34:a6:8b:1f:de:1a:dc:f7:78:79:
         f8:7b:2f:fa:96:39:a6:a8:d5:8f:da:ee:2a:d4:66:f0:35:22:
         84:9c:c1:2e:ea:e4:dd:f6:3d:d1:15:a6:c8:39:72:f5:57:01:
         1d:56:fc:76:bc:49:70:05:73:4b:75:80:a6:dd:1f:53:14:46:
         96:c1:aa:5c:d5:ba:da:ac:6d:c5:78:a9:25:b7:58:cb:bc:7f:
         f6:bb:22:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:51:37 2025 by rpki-client