Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234312e302f32342d3234203d3e20323633393230.roa
File:                     3133382e3138352e3234312e302f32342d3234203d3e20323633393230.roa (raw, json)
Hash identifier:          5qbNEHfxrF8ewcTJp/VsQEqbAr8xfvK/OjNkYRuglx8=
Subject key identifier:   63:CF:16:BC:27:B2:DF:44:86:DF:9C:45:E7:B2:22:BE:A2:FB:A2:1F
Certificate issuer:       /CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
Certificate serial:       2D2BB63CEEF628CC2BD1E3D4E0E9E757A23E178D
Authority key identifier: D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234312e302f32342d3234203d3e20323633393230.roa
Signing time:             Tue 27 May 2025 20:34:46 +0000
ROA not before:           Tue 27 May 2025 20:29:46 +0000
ROA not after:            Tue 26 May 2026 20:34:46 +0000
asID:                     263920
IP address blocks:        138.185.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 04:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2b:b6:3c:ee:f6:28:cc:2b:d1:e3:d4:e0:e9:e7:57:a2:3e:17:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
        Validity
            Not Before: May 27 20:29:46 2025 GMT
            Not After : May 26 20:34:46 2026 GMT
        Subject: CN=63CF16BC27B2DF4486DF9C45E7B222BEA2FBA21F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f4:55:44:5a:8d:d5:a9:83:ba:a5:de:ff:df:
                    a2:39:8a:22:81:c1:21:d5:ce:96:39:c0:a4:5b:df:
                    a3:e3:8c:6c:e8:34:0d:90:f2:48:25:cf:69:af:d9:
                    42:75:8b:a6:a6:67:f3:4a:85:9d:5b:f7:98:70:43:
                    e9:1d:05:7d:61:72:7a:32:40:b7:8d:14:a9:97:3e:
                    df:e8:5e:41:99:03:48:a5:d5:1a:83:59:49:a0:98:
                    28:a1:2c:f8:29:46:7a:50:f1:21:b2:ec:49:db:a4:
                    94:2d:71:b0:24:40:d1:ae:c7:77:ae:24:f4:d2:09:
                    59:77:75:aa:49:44:ea:79:4b:2c:05:b6:d4:b5:ba:
                    d6:42:ca:95:82:b8:34:5d:40:99:63:9c:84:dc:e1:
                    dc:b5:aa:76:9a:81:f7:da:d2:1a:da:8c:c9:ed:a2:
                    06:a0:d0:a9:b1:13:e1:b1:50:ea:98:13:9e:2f:a4:
                    df:08:e0:27:e0:b8:e5:76:1c:49:49:47:2a:c1:b0:
                    58:b7:be:8a:82:07:3f:48:d6:56:ee:9f:8b:30:fc:
                    b6:3a:17:a1:f1:3b:1e:5a:48:83:09:6a:0d:9c:ab:
                    ed:1f:ff:72:6d:a7:00:aa:4c:1a:6b:22:45:62:39:
                    1b:10:95:b9:3f:02:60:58:2a:d9:87:d4:81:12:43:
                    2f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CF:16:BC:27:B2:DF:44:86:DF:9C:45:E7:B2:22:BE:A2:FB:A2:1F
            X509v3 Authority Key Identifier:
                keyid:D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234312e302f32342d3234203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:44:e9:62:b0:40:62:f0:7a:82:bc:1b:08:91:f5:08:b4:68:
         ed:71:60:1f:cc:3f:bc:2f:29:af:b4:a0:c4:3b:e6:a2:94:f9:
         02:f2:70:b3:a4:b0:87:1c:d9:d0:c9:bf:ea:12:73:a2:04:59:
         a9:41:75:9d:da:72:6e:c6:bb:cc:e3:e4:9a:b0:11:22:9a:17:
         4c:32:ce:74:bd:fb:de:52:06:03:38:07:2e:66:bd:18:94:ee:
         9b:ba:7f:82:b7:8f:93:e8:e0:1c:29:d3:2c:4d:45:b8:3b:b4:
         e7:e4:75:75:62:4e:c7:49:64:33:fb:8a:7c:d3:52:a0:85:45:
         0e:43:5e:6c:b4:57:90:d8:1f:8e:2e:96:bd:9f:07:ed:c4:33:
         07:e2:26:c3:f1:4e:a3:5e:19:5d:88:80:f6:91:b5:0a:1e:f3:
         71:21:09:31:1d:94:06:5c:f7:ac:09:8b:5f:3b:8e:9a:09:82:
         d2:5a:b5:95:88:af:f5:ed:6d:a0:01:4c:25:21:90:89:2d:fe:
         c9:74:79:20:bf:24:94:39:cf:90:ee:c9:6d:e5:e2:3b:35:ce:
         56:4b:63:ff:6c:dc:67:e4:b1:ee:45:a9:1d:88:83:6d:82:be:
         67:03:00:40:45:17:9a:9a:8a:76:b3:a4:52:71:4e:ea:7d:2d:
         cb:8f:40:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:39:19 2025 by rpki-client