Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/3133382e39342e34382e302f32322d3234203d3e20323634313234.roa
File:                     3133382e39342e34382e302f32322d3234203d3e20323634313234.roa (raw, json)
Hash identifier:          vxSv7W3tk/IeQFr8KE+a6hw12+7Lc3Q6kXz+VOEcSK4=
Subject key identifier:   E5:96:86:F5:4B:11:A2:EA:A4:83:8B:05:BB:7E:D8:AD:32:2A:F1:B0
Certificate issuer:       /CN=8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E
Certificate serial:       555247127BEA186919310055604B4242302AC932
Authority key identifier: 89:40:C5:0A:C5:63:1C:CD:F2:D0:D0:91:49:CB:C5:A2:FE:B6:4B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/3133382e39342e34382e302f32322d3234203d3e20323634313234.roa
Signing time:             Tue 20 May 2025 20:00:39 +0000
ROA not before:           Tue 20 May 2025 19:55:39 +0000
ROA not after:            Tue 19 May 2026 20:00:39 +0000
asID:                     264124
IP address blocks:        138.94.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.crl
                          rsync://rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 04:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:52:47:12:7b:ea:18:69:19:31:00:55:60:4b:42:42:30:2a:c9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E
        Validity
            Not Before: May 20 19:55:39 2025 GMT
            Not After : May 19 20:00:39 2026 GMT
        Subject: CN=E59686F54B11A2EAA4838B05BB7ED8AD322AF1B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:af:a3:fa:82:dd:ce:03:60:b6:89:3c:92:
                    9e:c7:24:45:4a:e6:d8:d8:c7:b5:36:08:33:3d:33:
                    86:72:26:22:1f:2e:65:0a:b1:e6:c8:a7:ba:5e:8a:
                    ff:a3:79:34:70:4b:ab:24:3b:20:cc:ce:6b:1b:bf:
                    68:81:6a:69:bd:c4:75:60:6b:82:7d:e2:a2:55:68:
                    82:ef:c8:12:62:48:9c:1c:a6:fb:c0:8f:fb:f7:bc:
                    19:70:89:3d:ba:9e:de:33:e1:87:8e:0b:2a:dd:37:
                    c8:44:f7:52:fa:1d:ab:12:fc:b0:82:bb:81:b4:89:
                    a9:31:b5:8c:70:b9:e1:4c:be:83:40:5a:11:c1:0f:
                    9b:41:74:32:e0:d2:bb:05:39:a0:d9:7d:14:83:16:
                    7e:24:b6:50:a3:ec:13:d0:1e:eb:d1:05:bd:74:a3:
                    4a:6c:11:66:07:fc:b6:91:2c:cd:89:6b:46:dd:d0:
                    bc:63:bf:e2:e2:2a:f5:23:ef:1e:0c:b7:6b:09:09:
                    3c:36:cd:84:7d:f2:59:a5:79:2f:15:d6:5b:38:90:
                    07:65:45:10:9a:3d:5c:04:4d:c1:ae:10:d4:4a:9d:
                    14:87:d6:73:67:86:65:62:96:d0:a5:0f:28:e3:0d:
                    0b:85:ba:74:61:8a:6f:77:21:5e:9d:0e:61:a1:a6:
                    33:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:96:86:F5:4B:11:A2:EA:A4:83:8B:05:BB:7E:D8:AD:32:2A:F1:B0
            X509v3 Authority Key Identifier:
                keyid:89:40:C5:0A:C5:63:1C:CD:F2:D0:D0:91:49:CB:C5:A2:FE:B6:4B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/3133382e39342e34382e302f32322d3234203d3e20323634313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:6c:6a:45:58:5e:09:bd:5a:91:0c:e2:f7:22:ed:15:2c:e5:
         cc:00:69:58:dc:97:ee:b9:ca:12:1f:70:0e:8f:fc:bb:b9:c4:
         28:0c:2f:df:28:88:ea:6a:12:82:c1:03:dd:b4:94:72:50:da:
         aa:a2:48:da:40:d8:f0:64:79:89:91:e8:97:a8:e6:b0:52:3d:
         c7:38:af:0f:2b:ca:f8:17:c3:6a:a0:cb:93:04:f3:9a:7f:37:
         fb:45:47:59:4b:61:1c:38:17:c2:0d:18:42:26:9e:79:06:40:
         f6:97:1b:6f:66:1e:59:30:38:f8:a3:55:e9:55:cf:ec:63:a2:
         63:3b:63:19:80:c6:2b:5b:7b:4b:d9:bc:65:8f:c3:82:d3:95:
         13:6a:11:ad:8f:50:9f:85:b7:c2:43:1b:75:5a:04:1f:3d:45:
         23:ca:99:63:3b:12:8c:8a:0c:31:8d:fc:49:50:71:8f:20:2d:
         c8:38:68:44:7b:bf:7a:d0:78:b0:09:56:17:63:0a:59:9d:da:
         02:60:20:43:ff:a5:10:05:07:e4:59:8c:08:55:d6:7b:75:c9:
         65:60:b9:09:ed:8b:be:20:0c:4a:5a:e0:0e:aa:6d:81:5d:df:
         71:de:73:14:65:54:69:d0:34:9a:0e:5f:52:23:ec:e5:30:c4:
         29:2d:83:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 11:07:13 2025 by rpki-client