Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32332d3233203d3e20323634313330.roa
File:                     3133382e39372e36302e302f32332d3233203d3e20323634313330.roa (raw, json)
Hash identifier:          LNSX86O81dZxoDbFfCteW0O/GaEHLYs9G8uBuCN3TAY=
Subject key identifier:   F2:96:DB:83:68:C8:E1:82:C6:13:C0:42:07:02:60:90:31:4F:96:C5
Certificate issuer:       /CN=E47C0193099D783BC9228A8B85CB28868735A4E2
Certificate serial:       18938F435FDD2C8BB54E9E3DECB78E1070E7BD21
Authority key identifier: E4:7C:01:93:09:9D:78:3B:C9:22:8A:8B:85:CB:28:86:87:35:A4:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47C0193099D783BC9228A8B85CB28868735A4E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32332d3233203d3e20323634313330.roa
Signing time:             Tue 20 May 2025 13:54:11 +0000
ROA not before:           Tue 20 May 2025 13:49:11 +0000
ROA not after:            Tue 19 May 2026 13:54:11 +0000
asID:                     264130
IP address blocks:        138.97.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/E47C0193099D783BC9228A8B85CB28868735A4E2.crl
                          rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/E47C0193099D783BC9228A8B85CB28868735A4E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47C0193099D783BC9228A8B85CB28868735A4E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 17:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:93:8f:43:5f:dd:2c:8b:b5:4e:9e:3d:ec:b7:8e:10:70:e7:bd:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E47C0193099D783BC9228A8B85CB28868735A4E2
        Validity
            Not Before: May 20 13:49:11 2025 GMT
            Not After : May 19 13:54:11 2026 GMT
        Subject: CN=F296DB8368C8E182C613C04207026090314F96C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:61:a5:66:d9:53:11:41:22:21:05:62:21:33:
                    a2:a7:52:9c:cd:80:94:f9:c9:e1:63:58:e4:7b:bd:
                    c1:ad:79:7b:cf:14:43:fe:93:e6:ea:ca:48:1e:b2:
                    32:91:6b:28:cc:a8:97:bb:01:48:3d:46:a4:73:05:
                    36:3c:56:f9:12:3e:02:f2:43:9c:6d:f1:4f:85:6a:
                    5b:cd:15:b2:1f:10:79:9d:86:b2:7e:fd:15:9d:41:
                    7e:96:ca:76:7a:dd:2a:66:31:ca:d0:c6:67:95:f7:
                    4d:12:17:d9:57:93:70:9e:d4:07:51:34:ee:a4:d3:
                    41:a0:b0:ee:77:dc:37:26:61:db:e0:0f:af:73:e4:
                    64:ad:2b:5c:b3:48:a0:70:10:16:e4:c6:72:e3:fd:
                    1a:23:be:63:91:0a:41:69:52:92:d3:5e:e1:c4:45:
                    e1:37:81:32:55:16:9e:49:e0:a6:e7:c9:57:c1:77:
                    c0:8f:74:a2:fd:8a:97:b4:9b:89:ca:89:37:c8:60:
                    5a:53:b4:ff:5a:3b:a8:ab:5e:aa:81:85:62:d3:2d:
                    9b:03:a8:94:ca:f7:a9:ad:21:f5:53:29:13:eb:bf:
                    9a:40:79:01:9c:bc:4f:a6:83:1e:04:54:ec:be:95:
                    1e:d3:7e:72:8a:df:c4:f2:94:ef:3a:11:85:9b:b1:
                    31:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:96:DB:83:68:C8:E1:82:C6:13:C0:42:07:02:60:90:31:4F:96:C5
            X509v3 Authority Key Identifier:
                keyid:E4:7C:01:93:09:9D:78:3B:C9:22:8A:8B:85:CB:28:86:87:35:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/E47C0193099D783BC9228A8B85CB28868735A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47C0193099D783BC9228A8B85CB28868735A4E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32332d3233203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:7d:72:d4:16:0d:2f:b7:62:5e:54:38:c3:f0:b0:53:5a:87:
         52:e7:d2:fd:24:39:e6:09:11:f1:a9:2c:4c:28:e5:24:0a:ba:
         9a:4b:a0:c7:67:5d:45:96:d7:1e:b4:32:16:a2:c0:92:b0:5f:
         89:da:e7:4f:81:d0:bf:f4:91:62:78:55:5c:69:cb:41:62:be:
         e5:67:41:48:e1:b8:57:d1:d7:0c:d3:55:77:a1:df:a8:4d:51:
         56:c4:28:a6:2b:33:c6:30:e4:36:ee:b5:db:7f:49:7b:63:59:
         b2:ff:40:4b:34:fe:8a:ec:c4:36:36:21:b2:2f:02:75:2b:02:
         50:11:b0:ce:49:ef:bf:2d:70:c7:3a:48:cb:d0:a2:67:9d:e7:
         a2:8c:1a:07:9a:b4:89:73:74:53:21:e1:4b:ff:1e:41:ea:c3:
         6a:ff:de:0a:44:6c:68:4d:1c:6b:c4:27:6e:e4:45:0f:e3:61:
         32:94:84:7d:e5:4d:0a:bd:84:c4:e2:ab:db:99:7a:43:54:e1:
         25:c8:87:0d:f0:be:8a:7a:00:7b:8d:bd:a4:47:f9:a7:6b:2f:
         62:fb:06:ae:ef:d4:af:41:6e:6e:10:5f:fe:5b:d4:96:58:f7:
         1a:94:2b:56:e7:c5:9d:43:cf:67:8e:46:7b:2e:91:c4:a1:f8:
         b9:e5:c0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 03:02:51 2025 by rpki-client