Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/3133382e3132322e33322e302f32322d3234203d3e20323634333130.roa
File:                     3133382e3132322e33322e302f32322d3234203d3e20323634333130.roa (raw, json)
Hash identifier:          lnSac6stU8HgRk5fIQB0wDMKYAsXtk6/TRVTUuOQoos=
Subject key identifier:   CA:5B:6A:39:14:FA:AC:BE:B2:78:46:EB:DA:DC:80:33:0B:2E:48:B6
Certificate issuer:       /CN=ADBBDC22DFFC572346705DC21FD364B79726B65C
Certificate serial:       1A9CF7B5A084C5082F6E90BA0BF441F84E54E6AC
Authority key identifier: AD:BB:DC:22:DF:FC:57:23:46:70:5D:C2:1F:D3:64:B7:97:26:B6:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADBBDC22DFFC572346705DC21FD364B79726B65C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/3133382e3132322e33322e302f32322d3234203d3e20323634333130.roa
Signing time:             Wed 09 Jul 2025 17:18:22 +0000
ROA not before:           Wed 09 Jul 2025 17:13:22 +0000
ROA not after:            Wed 08 Jul 2026 17:18:22 +0000
asID:                     264310
IP address blocks:        138.122.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/ADBBDC22DFFC572346705DC21FD364B79726B65C.crl
                          rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/ADBBDC22DFFC572346705DC21FD364B79726B65C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADBBDC22DFFC572346705DC21FD364B79726B65C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 23:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9c:f7:b5:a0:84:c5:08:2f:6e:90:ba:0b:f4:41:f8:4e:54:e6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADBBDC22DFFC572346705DC21FD364B79726B65C
        Validity
            Not Before: Jul  9 17:13:22 2025 GMT
            Not After : Jul  8 17:18:22 2026 GMT
        Subject: CN=CA5B6A3914FAACBEB27846EBDADC80330B2E48B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6d:35:82:53:20:53:92:0c:e9:48:9f:ff:ed:
                    64:f9:dd:6e:56:50:80:32:e0:7f:87:a9:aa:05:4d:
                    17:09:35:88:dd:cf:61:14:29:d7:46:4c:44:e4:7e:
                    09:72:9c:ce:31:6b:cf:cf:dc:87:fe:7d:ef:6f:a8:
                    de:8e:f2:26:b8:aa:95:c5:0b:cb:81:93:6f:91:68:
                    f8:0e:f7:7b:67:e5:5d:bd:03:57:d0:7d:f5:b8:87:
                    53:c2:fa:6e:19:35:6f:00:8e:3a:ca:c4:57:f6:65:
                    c7:43:c5:d4:21:a8:f5:e1:12:56:32:2b:dc:6a:f1:
                    da:e8:6e:3c:0b:db:8d:7a:e8:03:fa:5f:ff:05:f9:
                    2d:bd:22:60:8b:6f:2e:77:16:49:65:20:e4:2d:48:
                    ec:59:52:a2:ec:ce:9f:52:28:0d:7e:a1:ff:d6:be:
                    c2:4f:70:73:ae:ff:d6:ad:24:82:e7:67:1d:17:8e:
                    3d:94:d1:6d:fb:2c:97:78:32:27:47:4f:60:54:cf:
                    8f:89:85:85:d8:91:9a:2a:a0:85:54:95:aa:fb:2c:
                    d3:b8:f5:e4:ca:85:f0:7f:91:21:ad:c3:4d:43:83:
                    f8:90:c2:4b:59:bc:12:33:fd:5b:9e:e4:a5:2d:b2:
                    29:54:62:7f:25:e5:dc:c4:21:d4:c1:c1:33:cc:57:
                    45:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5B:6A:39:14:FA:AC:BE:B2:78:46:EB:DA:DC:80:33:0B:2E:48:B6
            X509v3 Authority Key Identifier:
                keyid:AD:BB:DC:22:DF:FC:57:23:46:70:5D:C2:1F:D3:64:B7:97:26:B6:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/ADBBDC22DFFC572346705DC21FD364B79726B65C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADBBDC22DFFC572346705DC21FD364B79726B65C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/3133382e3132322e33322e302f32322d3234203d3e20323634333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:6b:8e:52:a6:a8:e0:5b:9a:50:61:18:8b:92:2d:97:e2:3e:
         3b:2e:9f:2b:59:1e:33:ee:8e:2d:4f:04:8e:d3:44:b5:2b:db:
         33:2b:a5:59:60:9d:d2:9c:ec:e9:16:e6:3a:93:49:c7:67:fd:
         28:99:ba:f8:ca:cc:e9:5f:67:de:36:3b:66:3c:3d:75:c7:7b:
         e2:b2:c7:8a:93:dc:97:07:2f:59:d1:ab:15:f8:f1:42:4d:f6:
         98:98:c0:a2:15:2c:58:51:67:9d:fe:d1:37:9a:29:8d:23:6f:
         1e:03:58:ff:23:d6:22:0e:14:6f:9d:50:28:25:53:68:45:08:
         00:cd:60:d8:d6:d6:b6:9a:5c:25:6e:88:d7:4d:e3:ea:f7:93:
         6c:2e:94:e4:76:5a:66:b7:09:bb:38:f5:52:da:57:21:d5:9f:
         98:ac:54:3a:4b:79:61:e2:6c:a4:c5:f7:2b:ba:a8:3a:4d:1c:
         08:c5:70:c5:b3:f8:b0:f3:de:a7:80:c3:35:3b:2f:a6:66:4a:
         f0:dd:aa:2d:ad:65:a7:84:82:06:20:7f:b0:5e:02:fd:38:33:
         fb:2c:45:41:f7:a9:15:c6:38:72:03:d3:89:8a:3e:3e:d4:b3:
         5d:5d:55:fe:6d:19:a9:3e:40:c2:4e:f0:dd:0f:e1:7c:21:26:
         a2:50:7d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:01:28 2025 by rpki-client