Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3132382e302f32342d3234203d3e20323633383837.roa
File:                     3133382e3230342e3132382e302f32342d3234203d3e20323633383837.roa (raw, json)
Hash identifier:          CYR7WgKDYmNlRqLf26BrPb+qlHHAgWaK6zys94KzWc0=
Subject key identifier:   64:A9:79:AD:D2:04:1D:4A:30:4F:F7:87:29:06:A1:86:3A:17:EA:3B
Certificate issuer:       /CN=612546079777C83995107BFA129E54CE43A50026
Certificate serial:       0F910CBE3F4260786530D8B02F44C4D8D27A1DEC
Authority key identifier: 61:25:46:07:97:77:C8:39:95:10:7B:FA:12:9E:54:CE:43:A5:00:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3132382e302f32342d3234203d3e20323633383837.roa
Signing time:             Wed 04 Jun 2025 13:21:56 +0000
ROA not before:           Wed 04 Jun 2025 13:16:56 +0000
ROA not after:            Wed 03 Jun 2026 13:21:56 +0000
asID:                     263887
IP address blocks:        138.204.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.crl
                          rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 19:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:91:0c:be:3f:42:60:78:65:30:d8:b0:2f:44:c4:d8:d2:7a:1d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612546079777C83995107BFA129E54CE43A50026
        Validity
            Not Before: Jun  4 13:16:56 2025 GMT
            Not After : Jun  3 13:21:56 2026 GMT
        Subject: CN=64A979ADD2041D4A304FF7872906A1863A17EA3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f7:db:da:1f:bd:97:88:c0:4c:0c:5c:66:29:
                    25:5a:a2:0d:34:40:8c:30:9c:5b:e2:99:ad:8d:2c:
                    41:11:de:d1:3e:a9:7b:4c:92:f4:dd:b7:c7:09:ed:
                    e9:28:32:c4:85:59:ac:6b:fc:06:53:e3:f2:3b:4c:
                    0d:bc:09:31:fc:d1:25:d7:ef:c7:84:81:62:ce:96:
                    08:01:ab:48:af:ca:2b:e2:c2:80:5c:92:ab:02:4c:
                    79:0f:57:68:a2:d1:7a:95:15:fb:2e:c8:53:35:2b:
                    c4:2f:25:c4:a9:21:c1:f0:c4:52:b6:8f:c5:b7:fe:
                    80:bf:35:07:80:7e:a3:63:8d:c8:b7:6f:40:5f:30:
                    74:0c:93:cc:22:5f:b2:8e:8b:bb:7f:70:f3:7a:c5:
                    bc:b0:d5:6d:32:7e:fb:d3:59:99:d9:9f:ce:5c:29:
                    a5:c5:66:4b:bc:28:1f:de:92:5a:07:ed:0b:71:78:
                    c4:06:46:64:0f:4d:4b:5c:5b:72:4f:e0:5d:ff:88:
                    7e:6c:ab:4f:34:bb:e2:dd:b0:1a:fa:f4:25:80:46:
                    8d:1c:7e:f5:0d:45:f6:be:2f:e2:ad:03:70:a0:a7:
                    2c:e8:1f:60:e8:dd:27:12:a1:a0:e8:f4:3d:f2:e6:
                    68:c7:b4:a1:9a:9b:41:d3:1e:f6:61:ce:1a:17:2b:
                    5b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A9:79:AD:D2:04:1D:4A:30:4F:F7:87:29:06:A1:86:3A:17:EA:3B
            X509v3 Authority Key Identifier:
                keyid:61:25:46:07:97:77:C8:39:95:10:7B:FA:12:9E:54:CE:43:A5:00:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3132382e302f32342d3234203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:3e:f1:c8:b2:69:44:79:1a:44:21:9c:87:a3:1b:af:c2:fb:
         c9:88:7a:d4:03:59:54:02:d4:65:60:6a:7e:75:95:43:40:a7:
         94:cd:72:e4:94:40:d2:cd:c2:77:b6:cf:52:cb:7a:84:93:45:
         31:74:79:26:82:6f:c9:77:11:df:a8:df:da:29:f9:9a:67:2a:
         31:1d:78:d9:85:af:f8:0c:9e:17:15:f1:9b:22:19:31:17:f6:
         b8:2a:ae:90:f8:2a:62:56:10:86:66:b7:63:e4:4e:29:c5:32:
         78:bd:2d:48:22:d2:c4:15:b5:0b:dc:c0:be:8b:a1:04:b5:35:
         9e:51:8f:bc:82:96:d0:89:7f:f2:55:64:14:ec:08:f2:ae:cc:
         7e:49:15:ab:f6:9c:67:c3:53:ff:a5:1e:85:bb:d2:17:43:9c:
         87:a8:7a:0c:10:67:85:a0:dd:8a:98:d0:46:93:2a:e6:f8:fb:
         fb:5a:93:76:f1:5a:57:1f:95:2b:ce:f2:50:31:28:dc:3d:18:
         e4:4b:ac:b4:4f:fe:b1:f9:a9:7d:d4:fb:39:59:47:13:94:41:
         32:23:0f:d8:59:73:54:25:66:de:e6:9a:63:30:1e:d4:0d:15:
         d7:38:50:80:12:6b:a2:41:e3:22:85:79:2b:d7:4b:68:b2:5c:
         d2:6c:a5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:26:54 2025 by rpki-client