Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/3133382e35392e3131322e302f32322d3234203d3e203238363036.roa
File:                     3133382e35392e3131322e302f32322d3234203d3e203238363036.roa (raw, json)
Hash identifier:          n5GOHVIJpTcwvYETcJ6b7H9o3u+1annJIho7pjoDvJg=
Subject key identifier:   A4:50:8F:41:1E:F5:B3:69:54:79:26:85:EF:5F:99:37:52:A5:DC:7C
Certificate issuer:       /CN=E7BD7FB5338C0533B7C507F4CA3932E8D54C7040
Certificate serial:       5E4E1FB54038D8DD2247BC338F006279BEC3D98B
Authority key identifier: E7:BD:7F:B5:33:8C:05:33:B7:C5:07:F4:CA:39:32:E8:D5:4C:70:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/3133382e35392e3131322e302f32322d3234203d3e203238363036.roa
Signing time:             Thu 28 Aug 2025 21:41:31 +0000
ROA not before:           Thu 28 Aug 2025 21:36:31 +0000
ROA not after:            Thu 27 Aug 2026 21:41:31 +0000
asID:                     28606
IP address blocks:        138.59.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.crl
                          rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 02:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4e:1f:b5:40:38:d8:dd:22:47:bc:33:8f:00:62:79:be:c3:d9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7BD7FB5338C0533B7C507F4CA3932E8D54C7040
        Validity
            Not Before: Aug 28 21:36:31 2025 GMT
            Not After : Aug 27 21:41:31 2026 GMT
        Subject: CN=A4508F411EF5B36954792685EF5F993752A5DC7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1a:e0:c9:d3:97:8c:79:8d:9c:47:15:ef:2e:
                    9c:21:fe:c6:21:ed:ee:69:9f:04:09:b8:13:a5:69:
                    cc:af:2a:0a:c3:97:a4:88:e1:35:23:66:24:b9:38:
                    02:7c:ca:78:f2:da:97:24:97:b1:eb:05:46:c5:61:
                    58:6d:f9:fb:ba:d6:4b:06:51:5a:e2:29:9c:28:a3:
                    9f:8c:61:34:9d:5b:5b:0e:49:12:9a:aa:f1:76:35:
                    57:8b:e9:47:9f:e2:74:c8:40:80:b7:89:05:87:2d:
                    68:47:21:54:9a:27:81:87:ad:5d:90:a9:7c:87:dc:
                    20:5a:04:95:5f:fd:22:61:e7:81:f3:e7:60:20:9e:
                    47:63:e9:2c:7a:b3:fa:6b:58:4d:e6:00:4d:81:5c:
                    52:68:67:c5:22:46:ab:d8:17:bc:11:2c:1c:88:9e:
                    2f:5f:7c:65:76:4f:2f:21:29:64:1d:9a:5b:c6:d7:
                    60:45:87:4d:9f:b4:70:f9:b8:15:0c:17:ed:26:a8:
                    83:60:d4:19:4a:b7:ee:4c:0e:5f:ea:82:5f:b4:25:
                    63:17:30:f6:89:78:7b:cf:18:2e:bc:6e:aa:8b:a9:
                    ee:a0:8f:8b:55:0c:e4:f2:a7:bb:76:0c:9b:38:29:
                    b0:7d:74:02:46:ef:11:14:2c:a0:29:e7:31:a2:18:
                    57:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:50:8F:41:1E:F5:B3:69:54:79:26:85:EF:5F:99:37:52:A5:DC:7C
            X509v3 Authority Key Identifier:
                keyid:E7:BD:7F:B5:33:8C:05:33:B7:C5:07:F4:CA:39:32:E8:D5:4C:70:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/3133382e35392e3131322e302f32322d3234203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:3a:7e:a6:16:03:32:94:47:49:58:d1:f2:e3:87:4a:bc:0b:
         69:53:c8:92:10:d1:f8:32:f5:f8:46:64:76:41:b4:50:3d:b8:
         42:c7:8d:05:4c:f4:91:78:be:54:73:02:c1:94:d1:9a:53:7a:
         da:53:36:b8:16:34:f2:b2:39:26:81:5e:38:11:b6:47:1a:20:
         0a:ff:27:f1:ed:c2:b6:d1:20:e7:4d:ba:aa:4a:a8:b7:ac:46:
         3e:e4:98:1f:49:e4:85:84:e0:22:4b:44:f9:04:1d:41:5e:dc:
         24:75:b4:21:2b:92:60:37:a9:d8:fb:f7:f7:61:ed:dd:c3:23:
         0f:e0:e3:ae:a1:d8:4f:b1:b2:60:2a:a6:4b:e8:45:b8:94:24:
         48:56:c1:6e:d1:f2:70:f0:a6:8a:73:0a:89:7c:a3:d1:95:35:
         24:d2:0e:c8:f9:f4:dc:d7:c2:83:e7:0a:5c:79:9c:c9:4c:68:
         79:4f:62:78:58:47:07:60:57:33:0c:bb:e3:b0:02:66:a0:e8:
         f6:d5:bc:8c:a7:15:87:f9:49:17:53:31:8b:c2:72:1d:21:7c:
         64:40:f5:7e:01:25:c4:18:ff:7c:22:51:fe:7d:45:2f:78:2d:
         f8:c2:7d:73:2f:b8:5b:d9:3e:c7:26:dd:f7:c5:f7:8a:9c:9e:
         07:97:e9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:12:14 2025 by rpki-client