Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa
File:                     3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa (raw, json)
Hash identifier:          VilHlCPRJgquAqbFq2BHRUJDaEpts/yDpee8EDptG7M=
Subject key identifier:   6D:0B:31:B0:FB:6D:9F:F0:01:35:AD:E4:2C:A6:ED:9C:85:CB:ED:3F
Certificate issuer:       /CN=612546079777C83995107BFA129E54CE43A50026
Certificate serial:       7AA75FFA9F13A7F881E8ABC81775C9D1E68ED689
Authority key identifier: 61:25:46:07:97:77:C8:39:95:10:7B:FA:12:9E:54:CE:43:A5:00:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa
Signing time:             Wed 04 Jun 2025 13:21:56 +0000
ROA not before:           Wed 04 Jun 2025 13:16:56 +0000
ROA not after:            Wed 03 Jun 2026 13:21:56 +0000
asID:                     263887
IP address blocks:        138.204.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.crl
                          rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 09:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a7:5f:fa:9f:13:a7:f8:81:e8:ab:c8:17:75:c9:d1:e6:8e:d6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612546079777C83995107BFA129E54CE43A50026
        Validity
            Not Before: Jun  4 13:16:56 2025 GMT
            Not After : Jun  3 13:21:56 2026 GMT
        Subject: CN=6D0B31B0FB6D9FF00135ADE42CA6ED9C85CBED3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1b:66:49:e1:df:fe:d7:9f:0e:f0:ab:d1:bf:
                    ee:10:37:a2:6e:63:21:9e:73:ed:03:c2:6d:64:e5:
                    68:fb:6f:4a:85:4d:a0:66:5d:a6:e4:f8:91:76:c8:
                    5d:5e:db:9a:ec:cc:69:ec:fb:29:0c:f9:a7:e3:a7:
                    93:6a:f7:22:ed:6e:4b:4b:db:13:a3:d3:d6:4b:59:
                    bd:39:d7:8c:23:fc:d4:91:97:62:38:5e:34:30:68:
                    c0:c2:4a:c6:84:f5:b4:95:4a:96:c1:97:86:7c:d1:
                    f2:3c:a4:4d:1c:bb:b5:7c:d2:1f:69:4e:c0:2f:09:
                    0a:5d:ed:7e:7a:f2:25:5f:4e:b7:ea:8d:c8:ee:c2:
                    8c:79:14:2c:59:5f:5c:f1:39:09:13:2c:96:b5:68:
                    c3:3e:16:95:77:68:7d:3a:15:94:65:8a:5e:63:52:
                    f2:a7:04:3c:c0:6a:66:0c:6b:90:81:4e:fb:20:4d:
                    12:36:eb:d6:0d:f6:22:26:2f:fd:aa:c9:ec:bc:37:
                    d0:cd:13:30:fe:af:20:58:b9:03:14:35:fc:e3:1f:
                    ab:0e:28:ab:4c:78:7e:fa:fd:ab:41:a3:74:bd:0e:
                    9f:f9:4f:52:fc:a5:22:17:88:70:c1:47:d2:52:77:
                    21:af:d5:e3:6f:70:a8:c9:6e:a8:1a:51:3a:dc:92:
                    d2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0B:31:B0:FB:6D:9F:F0:01:35:AD:E4:2C:A6:ED:9C:85:CB:ED:3F
            X509v3 Authority Key Identifier:
                keyid:61:25:46:07:97:77:C8:39:95:10:7B:FA:12:9E:54:CE:43:A5:00:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:4c:d4:41:61:ad:45:9a:68:59:66:8e:e1:2b:53:ac:05:a5:
         85:a9:f7:39:69:1d:c4:38:38:3a:f4:f1:97:20:ec:8f:0f:13:
         22:4f:20:ba:fc:ed:49:19:e0:a6:3c:49:e6:01:05:0e:b6:fc:
         e4:88:a0:fb:61:91:6f:46:27:0a:a4:4b:0f:e7:51:52:e6:48:
         3d:d6:2c:66:6a:e5:b2:2d:12:b1:9a:f8:88:55:8c:a4:ed:35:
         42:f4:80:d4:84:c2:f0:13:2f:30:38:4c:b6:49:ca:f9:34:b0:
         0d:b0:2e:2a:2e:af:c2:7b:48:96:14:94:75:f9:5c:6d:42:6f:
         ad:c6:d4:e3:81:b3:e7:2a:29:4f:bd:92:c4:61:25:4b:20:0d:
         dc:1a:19:d2:c4:4c:ac:e1:48:21:07:5c:b7:eb:45:72:8f:9d:
         29:b5:d4:21:ff:be:9b:0e:e7:0e:3a:24:44:45:9a:81:72:5d:
         7b:ff:b0:fd:5b:d6:44:ae:d3:1a:a6:9e:ed:5d:c8:89:31:67:
         d8:35:4f:13:92:50:0c:b0:26:30:ab:ed:93:34:cf:f4:72:4e:
         76:58:57:03:5f:e5:2e:7d:c9:1e:bd:85:bc:23:f9:76:80:2f:
         71:63:ee:35:4e:89:38:4b:6b:0e:a8:0a:6f:9e:08:b0:ab:7e:
         b5:19:b3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:22:48 2025 by rpki-client