Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/3133382e3131382e36302e302f32322d3234203d3e20323634323438.roa
File:                     3133382e3131382e36302e302f32322d3234203d3e20323634323438.roa (raw, json)
Hash identifier:          bLvVnNggRP1GntDXKarrX/dm9lklD+hOb/dpG7gSELk=
Subject key identifier:   40:2C:D2:16:8A:85:BC:C6:35:66:D0:B2:38:A4:A1:5F:68:AE:42:63
Certificate issuer:       /CN=173181F9E386B23D1F08C0B4F7613C6DFE7B08A3
Certificate serial:       7AE3C7F26BE2F8CCF525431AC7CCDD4394572A72
Authority key identifier: 17:31:81:F9:E3:86:B2:3D:1F:08:C0:B4:F7:61:3C:6D:FE:7B:08:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173181F9E386B23D1F08C0B4F7613C6DFE7B08A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/3133382e3131382e36302e302f32322d3234203d3e20323634323438.roa
Signing time:             Fri 13 Jun 2025 14:38:30 +0000
ROA not before:           Fri 13 Jun 2025 14:33:30 +0000
ROA not after:            Fri 12 Jun 2026 14:38:30 +0000
asID:                     264248
IP address blocks:        138.118.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/173181F9E386B23D1F08C0B4F7613C6DFE7B08A3.crl
                          rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/173181F9E386B23D1F08C0B4F7613C6DFE7B08A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173181F9E386B23D1F08C0B4F7613C6DFE7B08A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 13:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e3:c7:f2:6b:e2:f8:cc:f5:25:43:1a:c7:cc:dd:43:94:57:2a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173181F9E386B23D1F08C0B4F7613C6DFE7B08A3
        Validity
            Not Before: Jun 13 14:33:30 2025 GMT
            Not After : Jun 12 14:38:30 2026 GMT
        Subject: CN=402CD2168A85BCC63566D0B238A4A15F68AE4263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:51:bb:fa:c1:8d:b3:b2:5c:91:df:34:01:34:
                    4f:64:dc:94:67:d9:e0:e8:93:88:66:78:ca:e8:0e:
                    39:ae:3e:21:2a:82:b4:09:44:8d:31:45:74:91:75:
                    f9:89:a5:28:d0:cd:c2:a2:ec:54:84:b0:1f:2a:02:
                    fc:2f:5c:68:ca:cb:b9:5c:6d:05:93:37:22:db:72:
                    f9:5c:63:3c:2b:ed:3f:df:de:df:0f:49:d7:36:1e:
                    f8:eb:6f:86:5b:ad:9c:6c:07:a8:a7:39:0c:f3:be:
                    c3:95:b6:0d:5f:ea:aa:6c:0a:97:93:f0:51:f9:b3:
                    5d:31:af:40:24:7e:2d:05:84:75:a5:ca:0c:5b:d6:
                    db:d3:d1:c6:6e:5c:e2:9f:22:db:88:42:0e:53:f4:
                    82:ee:d8:f5:65:ac:09:fb:7b:f3:40:01:51:dd:d6:
                    d3:92:26:ee:be:2c:de:ab:5d:ec:5e:58:92:83:92:
                    81:17:8f:b6:84:e5:fa:26:48:38:29:c3:78:96:6b:
                    f0:22:6f:66:36:db:db:27:f2:5e:43:fb:99:35:2b:
                    24:df:71:83:f8:d0:0c:6f:a3:47:e2:65:6c:48:68:
                    70:43:e9:58:3a:98:db:b5:d9:aa:bf:5e:9e:05:38:
                    69:f7:1e:6d:74:41:76:7e:b3:a8:45:a0:d4:7f:94:
                    71:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2C:D2:16:8A:85:BC:C6:35:66:D0:B2:38:A4:A1:5F:68:AE:42:63
            X509v3 Authority Key Identifier:
                keyid:17:31:81:F9:E3:86:B2:3D:1F:08:C0:B4:F7:61:3C:6D:FE:7B:08:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/173181F9E386B23D1F08C0B4F7613C6DFE7B08A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173181F9E386B23D1F08C0B4F7613C6DFE7B08A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/3133382e3131382e36302e302f32322d3234203d3e20323634323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:a9:75:5f:7f:5d:d8:75:48:61:39:95:c8:6a:e6:d8:05:93:
         09:03:2c:6f:e5:ac:10:4a:47:98:e9:d7:61:f7:50:bb:97:9b:
         73:b0:c5:5e:a9:6b:e0:9b:4c:85:fd:5a:6c:17:5a:fb:bc:cc:
         02:b2:98:c8:26:c0:9b:a1:ff:3b:68:3f:e6:2c:2c:f1:87:8c:
         fb:e1:79:10:cb:80:c5:3d:30:1f:ef:96:97:2b:98:21:86:a9:
         af:2e:33:34:03:c4:d0:14:68:3b:16:5e:09:08:02:9c:82:46:
         f1:d2:03:05:07:f2:d0:d4:57:67:30:ae:d2:70:c9:42:46:93:
         c3:74:91:82:6b:e0:3d:20:c9:99:82:57:9d:d1:ed:5b:03:d5:
         bd:89:d2:a7:f7:2f:24:e7:8e:3d:f5:c1:bc:60:a3:a8:84:91:
         28:88:fa:96:72:df:50:bf:65:aa:b8:a7:d5:c5:2c:ce:82:38:
         2e:d3:79:e1:d8:c6:bc:c1:f0:0d:85:23:fe:9e:5a:fe:2e:27:
         3a:fb:1a:57:39:d0:a9:13:37:7e:d6:ab:a1:bb:65:83:76:8b:
         9d:1b:80:23:b0:5c:8d:72:30:cd:29:cd:fd:54:8f:f7:25:20:
         bc:0e:7c:82:88:8e:2a:52:09:7e:aa:88:d9:bb:67:60:60:29:
         32:9a:6a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:56:43 2025 by rpki-client