Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133382e39342e3138302e302f32322d3234203d3e203631363636.roa
File:                     3133382e39342e3138302e302f32322d3234203d3e203631363636.roa (raw, json)
Hash identifier:          RlyqKSjAVw8WEs59Swxcp6MnJYCvr862THltzuj1DbY=
Subject key identifier:   9F:50:AE:2A:67:86:31:41:94:62:7C:B1:FB:B4:27:D2:BE:65:9F:9B
Certificate issuer:       /CN=2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E
Certificate serial:       5E49E2DDD36F76FD369A94B0D0A8337936672467
Authority key identifier: 2E:B6:CD:E4:EC:23:50:B1:F6:AF:D7:4A:E7:BE:DE:60:0B:7C:68:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133382e39342e3138302e302f32322d3234203d3e203631363636.roa
Signing time:             Mon 29 Sep 2025 14:50:22 +0000
ROA not before:           Mon 29 Sep 2025 14:45:22 +0000
ROA not after:            Mon 28 Sep 2026 14:50:22 +0000
asID:                     61666
IP address blocks:        138.94.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.crl
                          rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 16:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:49:e2:dd:d3:6f:76:fd:36:9a:94:b0:d0:a8:33:79:36:67:24:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E
        Validity
            Not Before: Sep 29 14:45:22 2025 GMT
            Not After : Sep 28 14:50:22 2026 GMT
        Subject: CN=9F50AE2A6786314194627CB1FBB427D2BE659F9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:de:b0:fc:99:d8:3b:65:2c:5a:55:a8:93:1e:
                    ff:0c:18:92:24:01:d6:02:ea:80:31:e8:a2:63:da:
                    02:70:df:81:e7:66:cc:e0:d2:d3:be:bb:20:f3:cb:
                    2e:71:39:78:fb:70:ac:dd:41:85:33:60:48:8e:10:
                    06:4d:d5:af:42:fa:ac:f1:66:bf:2a:fa:bc:8a:07:
                    1d:a0:f0:35:32:7c:c9:ce:e5:cd:17:50:4a:0f:f5:
                    31:1a:4d:b3:85:e8:41:9e:dd:d1:20:fb:8a:81:a0:
                    c0:ec:53:56:36:c4:a5:2c:a8:f9:4a:20:2c:19:9a:
                    f2:b8:0c:02:db:7f:5a:d9:20:c3:4e:ed:8f:a4:73:
                    df:cb:a1:10:f0:e2:50:e3:b8:09:3b:a4:97:f8:0e:
                    4b:6f:6e:f0:bd:1f:e1:53:11:dc:f3:b0:1e:d0:83:
                    49:b2:a1:90:02:1a:68:00:e0:fe:83:d0:01:f3:95:
                    78:61:33:44:7b:d0:c7:a3:f4:fa:62:af:85:16:f5:
                    75:d6:30:90:c5:8f:22:9f:d4:b4:86:aa:73:6a:7b:
                    29:3e:4f:1a:2b:33:d2:62:d0:ee:de:83:70:e1:25:
                    a8:9c:f4:80:13:e5:24:54:ed:cd:01:77:68:d7:8b:
                    c3:7d:d7:55:54:9e:e2:6d:cd:db:f1:c3:63:b7:a1:
                    0b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:50:AE:2A:67:86:31:41:94:62:7C:B1:FB:B4:27:D2:BE:65:9F:9B
            X509v3 Authority Key Identifier:
                keyid:2E:B6:CD:E4:EC:23:50:B1:F6:AF:D7:4A:E7:BE:DE:60:0B:7C:68:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133382e39342e3138302e302f32322d3234203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:6a:6a:16:4f:9f:13:75:1e:5c:e6:61:e7:82:a8:0a:20:2d:
         67:27:8f:0c:c5:06:36:00:ab:12:59:69:87:48:4f:ec:e6:a9:
         c6:1a:85:be:d8:d6:12:10:1c:31:29:3e:58:35:f5:5d:da:d8:
         b0:74:96:ee:92:ee:95:d1:05:1e:5c:85:52:d5:73:49:a3:d9:
         73:7a:a9:08:63:83:7c:25:e6:2c:ab:f4:7a:b9:a1:78:62:2b:
         f1:a4:dd:e8:11:96:8c:11:04:a5:77:91:f6:65:eb:8e:ea:bf:
         9f:61:31:a8:34:68:21:a6:73:79:1b:98:85:ef:47:0f:57:af:
         c2:01:e8:71:22:13:ed:a8:78:9d:cd:7e:8d:66:01:57:44:89:
         60:56:1a:26:21:fd:6a:f4:90:5e:88:c1:d1:e7:6a:c1:f0:ad:
         49:3c:33:76:a7:df:ce:cd:09:86:8e:ca:28:cd:28:6c:e0:d6:
         00:38:ca:68:a1:1c:0b:91:a5:60:ca:62:e7:3c:26:4c:75:f7:
         47:7e:2f:35:45:5a:90:7a:fb:6b:e7:d3:84:7f:69:47:ec:19:
         72:c2:1d:08:ed:e1:ba:9a:b0:2f:65:25:f0:ec:1c:de:21:62:
         f2:cb:22:91:e8:aa:3a:41:96:05:3a:82:38:55:7a:19:0b:c3:
         cf:6d:d4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:28:22 2025 by rpki-client