Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31392e302f32342d3234203d3e20323733333039.roa
File:                     3133382e3132322e31392e302f32342d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          a8g2udeRFbnZXsfYYd/XDQwScEzx1RY/cf+pB19BJ/A=
Subject key identifier:   9C:A8:A4:DA:99:35:08:D7:B7:BB:E2:CC:72:DB:68:13:32:D8:C3:F4
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       4DF12B80322A5AEA6F6F6A8892145A038C1BBD4A
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31392e302f32342d3234203d3e20323733333039.roa
Signing time:             Mon 02 Jun 2025 20:02:37 +0000
ROA not before:           Mon 02 Jun 2025 19:57:37 +0000
ROA not after:            Mon 01 Jun 2026 20:02:37 +0000
asID:                     273309
IP address blocks:        138.122.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 11:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f1:2b:80:32:2a:5a:ea:6f:6f:6a:88:92:14:5a:03:8c:1b:bd:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Jun  2 19:57:37 2025 GMT
            Not After : Jun  1 20:02:37 2026 GMT
        Subject: CN=9CA8A4DA993508D7B7BBE2CC72DB681332D8C3F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d4:ae:31:34:09:6d:0a:52:d6:9b:74:68:74:
                    09:11:78:ab:3a:78:f4:f0:d7:76:e5:0a:db:ca:fa:
                    34:ba:cf:7f:65:55:6b:50:bc:3f:cc:c6:ad:05:52:
                    e6:ab:f7:5d:09:14:c6:d4:bb:48:f4:c7:1d:ff:67:
                    dc:78:ee:db:a5:87:a7:0e:c7:30:8f:d9:70:3c:7c:
                    21:77:fa:1f:cc:2f:aa:29:24:e5:46:9b:4b:08:f3:
                    7a:b2:fc:cb:5f:6c:23:0f:c9:ee:9c:0e:07:c6:f5:
                    13:df:37:b3:29:4d:52:e3:1d:49:ae:47:74:5a:3f:
                    9c:9f:07:64:6a:13:7f:a1:e7:a1:59:f1:e2:d4:80:
                    e4:ad:db:cc:9b:bc:da:bf:4c:ab:9f:39:ab:1d:c2:
                    ed:d4:52:86:ee:a3:e8:5d:fc:6c:b1:6e:df:3c:5f:
                    bb:3d:4c:9e:4a:11:b2:b7:0d:96:f7:cb:cb:73:14:
                    e9:e0:a1:32:34:e1:c2:4d:35:17:72:93:b6:05:3c:
                    9b:59:ab:3a:0b:cc:79:49:23:b6:c9:ad:79:1d:bc:
                    dd:80:17:19:8a:21:4c:09:8b:ba:56:9e:11:3a:c5:
                    5c:34:cd:01:ad:c1:3c:fa:a5:83:5e:06:46:cb:1b:
                    ab:6e:cf:53:df:b6:6a:41:fb:71:40:a9:63:f9:65:
                    a5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A8:A4:DA:99:35:08:D7:B7:BB:E2:CC:72:DB:68:13:32:D8:C3:F4
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31392e302f32342d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:17:ef:99:26:ab:c1:d0:6f:b5:21:a2:87:7a:9d:8e:66:7a:
         94:7d:22:00:0b:cb:6a:9d:89:4a:86:9e:b3:96:67:4a:7a:e3:
         59:9f:0c:c0:e5:f8:5a:7c:93:b7:98:ee:af:d5:54:ed:8e:c0:
         0d:71:c5:72:22:fc:3d:7e:6f:a9:6b:c1:3f:86:42:bc:d5:e3:
         82:98:2a:ef:e5:5f:48:4f:10:48:78:bc:d1:fb:2b:12:74:e4:
         04:0b:d0:0e:54:43:77:7f:2e:d6:d9:54:87:3d:91:93:41:22:
         cd:7e:b8:4e:fc:ad:89:eb:9e:65:a5:61:6f:6d:62:f7:62:6e:
         dd:97:80:90:d5:9d:26:63:73:5a:fa:d0:40:20:33:be:68:09:
         7d:d3:ab:00:b2:6e:56:80:45:f7:fa:07:54:ba:a8:a9:4d:3d:
         a4:ca:63:2a:48:8a:9f:fe:4f:26:a1:5b:b8:d0:77:3c:e2:1b:
         58:4f:98:84:92:79:95:f6:94:a0:3e:8e:cf:99:f5:39:b7:4d:
         c6:05:2f:4b:cb:75:69:9f:8e:eb:90:d8:91:57:70:5e:f1:c5:
         b9:8c:82:3a:d7:3c:17:1f:f1:2f:dd:5a:51:86:85:af:5d:82:
         cd:0f:ea:d2:b8:1a:52:d0:7f:df:92:9d:69:82:44:cf:d2:cb:
         ac:32:a4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:50:19 2025 by rpki-client