Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3133382e3138352e3233342e302f32332d3233203d3e203532383932.roa
File:                     3133382e3138352e3233342e302f32332d3233203d3e203532383932.roa (raw, json)
Hash identifier:          ALE5aP3ssmh/qYxcSqgnftt3+8LXZKVaGjQXT6kI18g=
Subject key identifier:   FD:8B:07:C6:DF:5E:A7:3C:03:38:D5:56:75:B5:A7:B8:1D:08:71:91
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       141324805B087711D3BCB0E75E32133115639C62
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3133382e3138352e3233342e302f32332d3233203d3e203532383932.roa
Signing time:             Tue 20 May 2025 03:52:43 +0000
ROA not before:           Tue 20 May 2025 03:47:43 +0000
ROA not after:            Tue 19 May 2026 03:52:43 +0000
asID:                     52892
IP address blocks:        138.185.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
                          rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 22:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:13:24:80:5b:08:77:11:d3:bc:b0:e7:5e:32:13:31:15:63:9c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: May 20 03:47:43 2025 GMT
            Not After : May 19 03:52:43 2026 GMT
        Subject: CN=FD8B07C6DF5EA73C0338D55675B5A7B81D087191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:0f:b4:31:07:56:2f:cc:81:77:c8:4c:06:
                    32:30:c0:4d:5c:55:90:41:d5:85:af:9f:91:66:82:
                    df:e0:fb:45:06:7a:71:c3:d9:21:66:5e:ca:53:33:
                    b7:5d:8c:00:61:54:39:26:d0:92:a5:88:b2:82:ce:
                    aa:90:4a:0f:9b:5e:77:64:56:b4:66:48:76:a4:46:
                    8e:8a:87:6a:06:03:44:a9:f8:07:c6:e2:db:7d:d5:
                    ec:84:01:ba:49:9e:c1:bd:c6:ac:81:4c:ce:1a:31:
                    df:10:8f:b6:f2:44:3c:d6:24:f7:b9:3b:e2:8c:51:
                    64:1a:86:71:2d:8e:bd:e9:4c:9c:14:3d:9f:31:57:
                    7a:de:ea:17:c6:ea:98:50:78:b0:07:f5:d5:ce:17:
                    b3:de:4c:6d:5c:65:39:22:27:10:b9:10:bc:51:09:
                    b9:9a:13:63:ed:cd:3b:19:23:8b:d5:2a:48:35:75:
                    49:3e:69:e1:43:0b:8b:00:8d:85:2e:07:60:42:e3:
                    cb:bc:62:38:9e:18:56:e3:09:97:28:6b:ba:92:ea:
                    29:8f:34:e7:65:ad:a5:8e:ef:80:91:18:95:a4:75:
                    24:f3:bb:ea:41:0e:16:5e:08:4e:09:8a:2c:67:bf:
                    f1:1e:f8:1a:9f:f9:3f:b7:fd:ca:5b:6b:5a:dc:1a:
                    26:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8B:07:C6:DF:5E:A7:3C:03:38:D5:56:75:B5:A7:B8:1D:08:71:91
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3133382e3138352e3233342e302f32332d3233203d3e203532383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:3e:d4:ac:80:8a:db:2a:66:17:66:42:39:66:66:30:33:56:
         80:55:f8:97:ef:00:3e:1f:67:99:c9:9a:fa:66:65:72:17:f9:
         4d:6d:f0:02:88:c6:b7:f3:8d:31:89:8f:2a:47:10:21:8e:08:
         cb:a8:52:d7:84:e5:61:ce:01:33:c6:cb:c8:59:06:12:e2:3a:
         a9:df:ab:ac:ab:21:d5:e0:e0:11:d2:af:66:73:dc:9c:e3:95:
         52:6a:b8:ab:37:b6:bf:57:f1:e3:7b:1b:45:4d:d9:80:96:cb:
         b1:54:4a:57:0c:28:63:b9:7f:4d:65:c6:fa:1f:75:d0:09:6c:
         d4:e9:4d:48:41:c3:47:75:b8:1e:97:68:1e:d7:8e:02:34:cd:
         14:28:b4:ce:62:98:0d:e5:85:6b:ca:07:52:c9:1a:be:56:54:
         c7:b0:f8:14:bd:02:c2:9e:2b:31:56:5e:1e:6b:cc:3f:e3:4c:
         b7:6d:a5:ff:1a:ee:06:66:d1:fa:0a:f4:83:6b:81:4d:be:39:
         f0:fe:a3:fb:30:c3:ad:46:65:89:f5:83:3c:11:00:66:78:d4:
         45:03:a4:04:49:d2:a8:44:a7:3e:fa:f9:d1:74:9f:33:5a:d1:
         f8:89:76:6c:65:93:33:1a:16:07:0d:77:a4:9b:97:35:df:3b:
         f4:ff:c0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:53:52 2025 by rpki-client