Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36332e302f32342d3234203d3e20323634313330.roa
File:                     3133382e39372e36332e302f32342d3234203d3e20323634313330.roa (raw, json)
Hash identifier:          +D9uAsD6GfSyNmcGRlJaEbXyR+LzFVLrGGmJVgOeh9g=
Subject key identifier:   DF:ED:CF:59:C8:15:95:2B:68:A8:82:EC:2B:4B:84:98:70:8A:F6:0F
Certificate issuer:       /CN=E47C0193099D783BC9228A8B85CB28868735A4E2
Certificate serial:       1A5974EAC5835A6FA791F9B38E7539E00254A41A
Authority key identifier: E4:7C:01:93:09:9D:78:3B:C9:22:8A:8B:85:CB:28:86:87:35:A4:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47C0193099D783BC9228A8B85CB28868735A4E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36332e302f32342d3234203d3e20323634313330.roa
Signing time:             Tue 20 May 2025 13:54:11 +0000
ROA not before:           Tue 20 May 2025 13:49:11 +0000
ROA not after:            Tue 19 May 2026 13:54:11 +0000
asID:                     264130
IP address blocks:        138.97.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/E47C0193099D783BC9228A8B85CB28868735A4E2.crl
                          rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/E47C0193099D783BC9228A8B85CB28868735A4E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47C0193099D783BC9228A8B85CB28868735A4E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 07:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:59:74:ea:c5:83:5a:6f:a7:91:f9:b3:8e:75:39:e0:02:54:a4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E47C0193099D783BC9228A8B85CB28868735A4E2
        Validity
            Not Before: May 20 13:49:11 2025 GMT
            Not After : May 19 13:54:11 2026 GMT
        Subject: CN=DFEDCF59C815952B68A882EC2B4B8498708AF60F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:3a:fb:ed:af:25:e5:c2:70:94:04:96:f6:
                    54:0d:f2:b0:79:c2:2e:78:90:c4:f3:aa:7b:db:90:
                    1a:52:56:1c:c5:09:12:f1:ea:76:eb:24:e9:eb:8f:
                    b4:9c:4e:34:12:9b:63:92:37:59:ea:33:bd:44:e0:
                    52:07:60:87:94:2c:54:2a:15:cf:42:d7:82:b4:b7:
                    4d:ae:7b:bb:11:46:77:3b:81:06:42:92:79:1c:fb:
                    15:b7:e4:b8:07:d1:5e:ee:c9:b5:50:b4:f2:4a:93:
                    68:52:5c:a2:d5:69:f7:53:ef:e2:0b:7c:2f:d5:7c:
                    6c:16:c4:c9:1b:5c:a6:6f:b7:e5:b5:7a:86:f6:d1:
                    a6:fd:4b:0b:c4:82:d8:a9:35:e2:02:ef:93:64:12:
                    89:ae:e6:6a:4c:50:16:f2:0e:ba:ef:d8:3f:d3:79:
                    c2:7b:bc:fb:20:e9:e7:5c:7c:f2:07:78:45:3a:89:
                    f3:d7:15:f9:89:92:f7:8f:a3:7e:e0:df:8c:1a:a0:
                    7c:0f:cd:e6:3e:7f:30:fc:b0:e0:9d:aa:46:a0:79:
                    36:66:84:5b:9d:38:de:8e:67:a4:61:59:89:25:cb:
                    1b:ce:8b:2d:81:cc:2b:11:2d:c7:33:d8:98:90:cd:
                    01:c5:d6:32:a7:0d:4e:5e:f4:7d:0a:40:a4:d1:67:
                    0c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:ED:CF:59:C8:15:95:2B:68:A8:82:EC:2B:4B:84:98:70:8A:F6:0F
            X509v3 Authority Key Identifier:
                keyid:E4:7C:01:93:09:9D:78:3B:C9:22:8A:8B:85:CB:28:86:87:35:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/E47C0193099D783BC9228A8B85CB28868735A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47C0193099D783BC9228A8B85CB28868735A4E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36332e302f32342d3234203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:ae:1f:b1:60:24:df:56:86:de:5d:56:eb:a0:8f:17:40:d8:
         d5:aa:47:be:75:c8:f5:51:06:8b:28:3e:9d:5c:98:7b:99:5c:
         64:2c:0b:fb:0a:84:cd:5f:ae:38:db:e5:26:98:7d:db:65:03:
         45:4e:af:b0:cd:73:95:6d:c0:e1:5a:26:ce:b3:8b:75:9e:52:
         a0:7b:87:d2:0e:12:db:ae:7d:7c:5b:d9:f1:fa:c8:61:51:96:
         e6:5f:40:9a:b6:85:7f:10:f2:e2:a7:24:3c:35:35:75:d2:d1:
         d8:f2:78:94:e1:0c:46:b2:72:e3:a5:5c:d3:15:ec:41:ea:18:
         64:cb:d5:d7:fc:4d:5e:b1:21:19:ff:c6:14:70:d8:ef:7d:ef:
         4b:fb:82:35:31:50:bb:26:6a:98:5f:38:32:00:17:f6:ad:d3:
         25:0b:ff:b8:be:12:96:65:00:99:b9:92:a1:e1:d2:32:d9:bf:
         d3:9b:77:bd:b3:c1:89:3e:a2:0d:f7:6c:7f:7a:65:a5:83:fa:
         1c:27:40:4e:2d:d2:6d:09:27:a8:7c:15:e5:4b:41:a1:c7:50:
         d3:fe:17:08:86:53:45:31:5b:7c:94:a3:49:75:b8:6d:e1:a4:
         2a:cb:fe:dd:54:28:27:be:bf:d7:ab:ec:2b:2c:6a:7a:e3:9e:
         78:c7:ad:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:27:24 2025 by rpki-client