Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133382e3131372e33322e302f32342d3234203d3e20323634343739.roa
File:                     3133382e3131372e33322e302f32342d3234203d3e20323634343739.roa (raw, json)
Hash identifier:          fzEcvQSaKsOZyeJXeLkn87It6BtQfhYlGf1Bc++MuMw=
Subject key identifier:   61:C8:E3:1E:5C:14:91:7F:5F:48:18:FE:2D:2B:AC:B4:DF:6C:2C:57
Certificate issuer:       /CN=74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5
Certificate serial:       78B2451C92D649421EC127D512D5C74E852EA4D3
Authority key identifier: 74:FA:74:03:B3:61:BD:3A:6D:CE:36:95:CF:0E:A2:1A:FC:15:A0:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133382e3131372e33322e302f32342d3234203d3e20323634343739.roa
Signing time:             Fri 20 Jun 2025 16:18:19 +0000
ROA not before:           Fri 20 Jun 2025 16:13:19 +0000
ROA not after:            Fri 19 Jun 2026 16:18:19 +0000
asID:                     264479
IP address blocks:        138.117.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 10:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b2:45:1c:92:d6:49:42:1e:c1:27:d5:12:d5:c7:4e:85:2e:a4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5
        Validity
            Not Before: Jun 20 16:13:19 2025 GMT
            Not After : Jun 19 16:18:19 2026 GMT
        Subject: CN=61C8E31E5C14917F5F4818FE2D2BACB4DF6C2C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b3:38:8f:11:5b:6d:47:74:a3:af:18:9c:7a:
                    03:ee:ea:de:d4:0d:db:46:b6:0d:af:52:65:da:e2:
                    a1:25:8c:e9:e8:2f:bf:da:b7:ba:cf:31:50:c4:4a:
                    36:9e:c4:d7:b5:23:3f:35:3c:b7:ff:2b:3c:59:22:
                    74:50:71:9d:b4:8d:3b:7a:cb:35:96:05:cf:a9:ff:
                    2b:44:0b:96:10:0e:50:15:10:99:92:66:9f:1a:30:
                    b4:de:3b:21:53:f2:58:51:c1:bb:56:65:7b:95:b3:
                    cd:e4:68:9e:9a:8d:ba:90:98:99:88:3c:4d:64:d5:
                    d4:5b:4a:7c:db:a5:00:1a:1f:a1:69:96:a4:7b:6d:
                    79:73:1f:6a:0b:11:41:ec:87:b4:9f:83:06:bd:fb:
                    90:24:55:be:ff:2b:05:a5:c2:5d:82:a8:ac:7f:13:
                    e7:fc:9a:62:ce:f0:8f:2c:97:db:6f:47:b7:d2:e6:
                    14:c2:66:b5:1c:d6:55:29:76:70:21:aa:e9:29:62:
                    4a:b2:15:54:64:38:cf:0c:05:34:a9:4a:39:83:74:
                    a3:d6:92:19:92:f0:2b:25:72:ec:d5:f0:e9:87:fa:
                    92:e9:c2:71:d8:fd:4a:1c:e0:96:a2:fe:08:73:3a:
                    a7:3a:b3:f4:6b:50:4c:4a:0e:3c:79:b3:bd:41:04:
                    6f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C8:E3:1E:5C:14:91:7F:5F:48:18:FE:2D:2B:AC:B4:DF:6C:2C:57
            X509v3 Authority Key Identifier:
                keyid:74:FA:74:03:B3:61:BD:3A:6D:CE:36:95:CF:0E:A2:1A:FC:15:A0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133382e3131372e33322e302f32342d3234203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:dc:bf:a6:00:f7:e8:fe:a9:b8:33:cf:1e:77:14:5e:9f:eb:
         af:c2:26:77:85:ca:c8:58:d6:ee:9f:f4:93:c7:9d:60:87:7c:
         e1:5f:e4:3f:5b:ac:58:de:d1:43:33:b6:2d:3b:98:0f:67:9b:
         9f:db:ac:fc:b4:76:8a:42:dc:0c:a7:e4:4d:d7:dd:fc:e0:6d:
         70:f0:e4:ce:31:a6:b1:c4:81:16:dd:4e:f3:1b:20:4e:a3:26:
         2f:8f:29:cf:4f:e3:77:26:ea:f8:27:d9:c4:fd:31:90:4a:aa:
         94:01:8d:90:fe:c4:f6:54:8d:d0:46:b0:9f:fb:76:cc:93:1b:
         21:2e:95:22:41:ac:c7:8f:61:6b:8e:e4:cf:50:61:b0:49:50:
         9c:bb:87:b9:b2:8c:a3:3e:63:5f:cb:0f:a5:23:37:7f:0a:83:
         db:6d:55:63:3a:8c:ca:6c:02:84:9f:a3:41:44:47:aa:d2:91:
         64:bb:8e:93:15:d3:c7:fe:f4:f8:cb:b2:e5:9f:31:68:75:d7:
         25:f6:f4:c2:3f:86:a0:68:2f:6c:c6:29:56:25:86:73:ce:d9:
         fc:b7:f7:40:a4:37:e5:84:7d:52:66:38:2c:73:d7:f0:ba:a6:
         f9:97:fc:79:3b:ef:cc:8d:ee:42:bd:86:d5:98:f8:44:5a:40:
         b6:d1:0c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:25:09 2025 by rpki-client