Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133382e3131372e33352e302f32342d3234203d3e20323634343739.roa
File:                     3133382e3131372e33352e302f32342d3234203d3e20323634343739.roa (raw, json)
Hash identifier:          f+rG4gVwZYlNgKUKwT7ConffMXcga4nO9a8rAapqFQg=
Subject key identifier:   86:4A:97:44:BA:23:5A:52:68:FC:11:8C:23:30:6E:91:0B:F5:D4:47
Certificate issuer:       /CN=74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5
Certificate serial:       4A1EE159AA019F2FF31EB916C38E7EC367C9CBF8
Authority key identifier: 74:FA:74:03:B3:61:BD:3A:6D:CE:36:95:CF:0E:A2:1A:FC:15:A0:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133382e3131372e33352e302f32342d3234203d3e20323634343739.roa
Signing time:             Fri 20 Jun 2025 16:19:19 +0000
ROA not before:           Fri 20 Jun 2025 16:14:19 +0000
ROA not after:            Fri 19 Jun 2026 16:19:19 +0000
asID:                     264479
IP address blocks:        138.117.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 10:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1e:e1:59:aa:01:9f:2f:f3:1e:b9:16:c3:8e:7e:c3:67:c9:cb:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5
        Validity
            Not Before: Jun 20 16:14:19 2025 GMT
            Not After : Jun 19 16:19:19 2026 GMT
        Subject: CN=864A9744BA235A5268FC118C23306E910BF5D447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:08:dc:ba:b7:51:4a:5d:37:d3:06:cb:13:b4:
                    a7:c9:c7:25:eb:69:73:81:2e:78:7b:ea:f6:bb:d9:
                    28:fd:6f:7c:c1:7f:02:0f:6c:87:d0:d0:39:94:50:
                    8b:f4:cc:a7:29:15:ce:75:70:0f:52:57:4a:85:c5:
                    c6:6a:c6:1e:98:87:52:68:28:05:a6:f9:66:99:48:
                    30:91:23:5a:50:e1:c0:41:49:52:ab:6b:33:1b:c3:
                    e0:5c:54:63:74:ca:98:04:58:db:d8:14:cf:ca:9d:
                    b6:10:44:87:42:fb:83:ea:fd:ff:42:90:53:f8:b0:
                    e3:71:ed:bc:81:3a:0b:82:83:ad:b0:a6:a0:9d:ca:
                    3c:23:d7:9c:7f:c9:3f:05:dd:0d:68:8b:9d:99:d0:
                    50:22:30:8e:6d:eb:4a:fa:a5:17:a1:c5:db:19:b9:
                    e7:ed:be:22:81:85:22:56:b8:43:e6:4c:ca:ba:fc:
                    16:5f:dc:e6:35:d0:f7:ca:31:2b:c8:d2:0a:64:8f:
                    4b:a1:77:15:f7:7c:9f:f9:68:1c:9c:e5:5c:7f:81:
                    17:24:4c:5a:56:00:1d:fa:17:44:76:db:71:23:76:
                    c6:3f:87:85:c6:f3:18:93:29:72:2e:2d:8c:a3:78:
                    82:62:15:c2:68:1e:8e:78:1a:f8:df:05:92:dc:22:
                    c5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4A:97:44:BA:23:5A:52:68:FC:11:8C:23:30:6E:91:0B:F5:D4:47
            X509v3 Authority Key Identifier:
                keyid:74:FA:74:03:B3:61:BD:3A:6D:CE:36:95:CF:0E:A2:1A:FC:15:A0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133382e3131372e33352e302f32342d3234203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:2d:de:eb:0e:87:e6:6e:81:44:52:d5:48:f4:31:7e:18:c1:
         b8:e6:dd:0a:29:cc:b6:41:81:d4:f1:21:d1:b9:96:43:98:fd:
         2a:6d:fc:86:4e:09:3c:d9:e5:3c:46:e4:f7:4a:1a:07:4b:8a:
         d4:6b:81:2e:67:2a:3f:39:a8:9c:4d:d3:40:46:a0:7a:41:cf:
         35:90:29:66:14:c3:cf:10:01:7e:9e:88:d1:5e:b1:2d:2a:a4:
         3b:64:cd:84:ce:36:b2:bd:45:4a:32:3d:2e:19:47:75:ca:c0:
         b3:77:7a:55:ba:9b:01:7c:4c:19:d6:62:7a:7e:c9:98:e6:86:
         fa:83:57:48:25:d5:19:0f:e2:9b:88:9e:9b:ff:f8:0f:5e:a5:
         8b:ba:c4:56:4e:39:5e:05:4c:42:f4:32:ca:6e:01:66:8f:8e:
         1b:b4:82:26:1f:e8:17:7a:cc:0c:6a:1a:ac:5e:44:7d:a4:f7:
         80:c1:b8:95:33:47:bb:69:26:12:d7:24:d0:0f:8e:2d:d1:5d:
         52:b3:b5:7a:7d:2c:28:4f:c3:1e:fd:ec:97:67:34:32:20:c8:
         ef:30:2c:50:b6:13:4c:fc:c9:0f:42:56:38:07:c0:b1:ef:0f:
         8e:80:fb:e7:13:6a:db:82:4e:d7:c9:0c:71:0c:14:c9:d5:ca:
         86:33:08:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:25:03 2025 by rpki-client