Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/3133382e3131382e3138342e302f32342d3234203d3e20323634303637.roa
File:                     3133382e3131382e3138342e302f32342d3234203d3e20323634303637.roa (raw, json)
Hash identifier:          B0G3qiBgi9eK+2JFv/wdA9/rxvM3FdKmJnxeZjSTirI=
Subject key identifier:   77:84:7A:52:AA:A5:F3:A6:1C:A3:67:72:C3:FB:58:CF:D9:64:7E:D3
Certificate issuer:       /CN=608E3468464471A407DA37B93E7EAA2E8A3F6EE4
Certificate serial:       3339FA278361C6B7BC81E91081A0825E0B605250
Authority key identifier: 60:8E:34:68:46:44:71:A4:07:DA:37:B9:3E:7E:AA:2E:8A:3F:6E:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/3133382e3131382e3138342e302f32342d3234203d3e20323634303637.roa
Signing time:             Wed 09 Jul 2025 12:45:01 +0000
ROA not before:           Wed 09 Jul 2025 12:40:01 +0000
ROA not after:            Wed 08 Jul 2026 12:45:01 +0000
asID:                     264067
IP address blocks:        138.118.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.crl
                          rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 06:51:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:39:fa:27:83:61:c6:b7:bc:81:e9:10:81:a0:82:5e:0b:60:52:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608E3468464471A407DA37B93E7EAA2E8A3F6EE4
        Validity
            Not Before: Jul  9 12:40:01 2025 GMT
            Not After : Jul  8 12:45:01 2026 GMT
        Subject: CN=77847A52AAA5F3A61CA36772C3FB58CFD9647ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4a:cf:35:73:55:f4:cf:2c:9f:53:e0:e7:bb:
                    6f:d8:4a:53:b3:f5:4c:ff:0a:9b:45:22:2c:ae:38:
                    cb:47:9b:90:b3:99:3f:b0:f4:86:2c:15:94:b2:84:
                    25:a9:fb:6d:2c:69:90:f1:cc:0c:5a:43:0e:ee:95:
                    7a:24:3f:1d:59:39:5f:61:26:00:fe:23:75:ea:54:
                    13:4e:ec:e0:5c:46:bd:cd:cf:66:48:c7:01:c4:d2:
                    c7:ba:5a:88:36:48:d9:26:bb:f9:f2:ad:9b:74:cd:
                    6e:b6:e0:99:45:cb:24:44:3a:e0:47:29:0c:e3:fc:
                    cc:cb:d1:fc:ee:e6:fb:ff:a6:b4:21:e9:b9:77:f0:
                    4a:da:7d:0d:cf:18:da:59:40:0b:f5:c1:ea:f0:0c:
                    07:66:4d:93:2f:5c:79:c8:09:1f:a8:ec:8b:9b:49:
                    93:c0:89:00:59:4f:7d:11:8f:99:d5:94:f5:d0:f0:
                    0e:d0:5b:b0:b6:ee:45:a0:f0:0d:cb:08:50:4a:74:
                    b3:aa:79:ee:61:c8:5f:59:d5:17:77:11:0b:b1:f1:
                    3d:f9:9a:90:d0:9c:50:cb:38:d8:30:24:dd:e6:31:
                    2a:ec:91:13:ab:0a:58:64:21:5c:c0:87:85:75:a3:
                    4b:ad:0a:a7:89:7e:46:dd:f8:e5:0f:d9:ad:77:b7:
                    ab:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:84:7A:52:AA:A5:F3:A6:1C:A3:67:72:C3:FB:58:CF:D9:64:7E:D3
            X509v3 Authority Key Identifier:
                keyid:60:8E:34:68:46:44:71:A4:07:DA:37:B9:3E:7E:AA:2E:8A:3F:6E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/3133382e3131382e3138342e302f32342d3234203d3e20323634303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:5c:af:8c:dd:88:1f:47:00:7b:b2:01:5e:e9:04:cb:e6:c5:
         31:4c:eb:7a:ca:f2:6a:94:e7:57:3a:99:08:4e:6c:37:02:c6:
         24:eb:d2:4e:a0:dc:34:a9:53:1b:ba:70:56:31:23:ca:61:75:
         63:09:a1:95:2c:9e:59:bc:ee:b6:ad:32:32:45:3a:c0:a2:9c:
         3a:17:32:58:b4:ad:86:1e:14:1f:00:05:c0:92:5f:94:f2:63:
         33:ae:55:a8:96:a6:28:7f:a7:41:86:b9:fa:39:33:82:ae:59:
         fe:aa:61:12:07:33:b5:e7:34:9f:20:ad:ff:36:7d:c7:30:cc:
         4f:dd:fe:41:de:fa:93:b8:0a:cb:15:4f:7b:3a:b7:22:de:a3:
         11:c5:89:77:50:8c:12:89:e3:d3:3d:c0:1e:d7:ea:8d:fa:53:
         ae:57:8b:57:ca:73:05:60:3c:3a:9d:3e:66:fb:2f:b8:d1:a0:
         e2:47:33:d0:5f:1b:86:32:a3:f2:ca:1c:5f:64:93:24:7a:ec:
         4f:59:7d:2c:9d:f6:7a:da:e8:09:e1:b8:c8:ed:19:3d:76:b3:
         d8:61:8f:f9:4a:c3:cc:30:78:f5:49:df:6d:f3:bf:22:a3:16:
         11:72:7f:85:5d:ad:87:9c:8b:ef:41:1b:60:4e:7d:5a:09:26:
         b5:27:08:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:56:25 2025 by rpki-client