Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3133382e3138352e38382e302f32322d3332203d3e20323730383737.roa
File:                     3133382e3138352e38382e302f32322d3332203d3e20323730383737.roa (raw, json)
Hash identifier:          X8IqYsVc4UPBd60P1jFReCsRvPnvnifQVtHXvaLIU/Q=
Subject key identifier:   92:4E:0D:51:81:84:1F:F1:6B:EA:07:23:F1:FF:DD:BD:AF:E2:24:B4
Certificate issuer:       /CN=3E268A146165B7580B59E044B59D275B5F824225
Certificate serial:       258FD98C5D7E2DB8FB264F530BBA616E4491D8F2
Authority key identifier: 3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3133382e3138352e38382e302f32322d3332203d3e20323730383737.roa
Signing time:             Tue 03 Jun 2025 18:45:59 +0000
ROA not before:           Tue 03 Jun 2025 18:40:59 +0000
ROA not after:            Tue 02 Jun 2026 18:45:59 +0000
asID:                     270877
IP address blocks:        138.185.88.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl
                          rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 03:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:8f:d9:8c:5d:7e:2d:b8:fb:26:4f:53:0b:ba:61:6e:44:91:d8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E268A146165B7580B59E044B59D275B5F824225
        Validity
            Not Before: Jun  3 18:40:59 2025 GMT
            Not After : Jun  2 18:45:59 2026 GMT
        Subject: CN=924E0D5181841FF16BEA0723F1FFDDBDAFE224B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:51:82:1c:4b:ad:a9:ce:62:f3:0f:1e:06:46:
                    e0:eb:d5:07:bc:4e:32:5a:30:30:d2:11:a3:0c:67:
                    4e:9d:ff:50:43:b9:eb:29:c6:8f:39:49:14:f3:5a:
                    24:20:93:4f:de:d2:46:a0:ae:9e:13:c5:50:0d:87:
                    7d:3b:f3:bb:0e:af:6d:0b:4c:96:5a:07:a2:1c:2b:
                    7f:55:95:34:e9:43:d8:ef:6e:da:e9:8c:f9:05:40:
                    b0:57:5f:01:d7:4e:14:b6:0c:c7:09:7c:2e:1c:d7:
                    6d:5b:67:ac:79:dc:ed:f5:90:08:33:9b:55:55:bc:
                    2f:6c:8d:29:13:6d:45:89:29:cd:fa:20:85:61:9f:
                    58:97:b1:56:2c:e9:da:59:16:c8:9c:6c:db:a3:40:
                    59:10:2c:2b:ad:05:10:d3:47:5f:f6:da:80:3f:29:
                    4a:aa:c3:fe:b3:a2:57:ce:c5:1f:88:f5:d3:14:48:
                    86:af:6a:90:20:f3:d2:8b:a5:5f:b7:24:fc:50:d9:
                    9a:42:98:88:5b:1f:59:9a:e0:95:b9:9b:aa:ef:9f:
                    a0:6f:10:45:1f:48:1f:95:14:1a:9a:81:72:bd:86:
                    80:aa:99:a6:31:29:a1:0b:9b:58:34:99:9e:4c:5b:
                    e6:20:23:8c:7b:43:b5:03:0e:cb:6b:dd:9b:99:59:
                    8b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4E:0D:51:81:84:1F:F1:6B:EA:07:23:F1:FF:DD:BD:AF:E2:24:B4
            X509v3 Authority Key Identifier:
                keyid:3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3133382e3138352e38382e302f32322d3332203d3e20323730383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:d3:f7:9d:18:f0:54:86:e9:63:c6:54:51:ae:7c:e2:51:4a:
         49:54:7b:6d:c6:6a:9c:98:5c:5b:74:8c:88:30:22:70:84:9c:
         3f:3a:07:90:e2:06:0f:4e:b8:61:08:4a:39:9a:39:a0:05:85:
         cc:94:29:7b:7d:fc:e2:6e:d7:f6:72:16:ed:b5:cb:55:d9:f8:
         66:1f:9c:d5:c9:fb:2e:a7:1d:c4:53:1c:20:fd:0a:2d:31:2d:
         9e:a7:1d:7f:4f:2f:48:4a:6c:c4:22:96:10:5a:a2:92:5e:05:
         68:8a:9f:1b:aa:51:2b:33:88:b3:a6:53:75:17:76:69:d1:f0:
         76:51:a0:91:9e:44:32:fd:93:91:b0:b4:00:61:86:5d:cd:79:
         b7:fb:b1:dd:77:be:ac:f6:ab:08:60:f8:3b:d4:21:e9:32:6f:
         c9:36:78:02:9c:91:e2:6c:85:c5:51:61:7e:e0:cf:f7:89:25:
         8c:7f:dd:e2:d0:42:16:65:e3:a3:24:0c:a4:37:04:5e:f8:ff:
         38:5a:b3:2a:bd:60:c7:f5:67:7e:62:23:68:84:8d:42:74:98:
         c2:fa:43:a6:5a:f0:94:60:df:39:7b:1b:f8:7a:ab:74:81:fb:
         2c:54:12:46:d1:11:ff:ae:9f:14:87:4d:20:25:d5:68:4f:a8:
         f3:a5:ee:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:00:21 2025 by rpki-client