Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/3133382e39342e3139362e302f32322d3234203d3e203631353831.roa
File:                     3133382e39342e3139362e302f32322d3234203d3e203631353831.roa (raw, json)
Hash identifier:          tdkd6Xsa4Aj40eD0oJe9CQ1WsnyV07zzbGNrUxCUCgc=
Subject key identifier:   A1:43:1A:62:58:FD:E5:74:11:34:05:11:49:7A:D1:EF:ED:BC:E0:DD
Certificate issuer:       /CN=7F47009C8F403A7156B677A0E7EF30D662978434
Certificate serial:       3811B8479AA83DF52448325F908632797AA5A14A
Authority key identifier: 7F:47:00:9C:8F:40:3A:71:56:B6:77:A0:E7:EF:30:D6:62:97:84:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F47009C8F403A7156B677A0E7EF30D662978434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/3133382e39342e3139362e302f32322d3234203d3e203631353831.roa
Signing time:             Thu 12 Jun 2025 20:00:19 +0000
ROA not before:           Thu 12 Jun 2025 19:55:19 +0000
ROA not after:            Thu 11 Jun 2026 20:00:19 +0000
asID:                     61581
IP address blocks:        138.94.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/7F47009C8F403A7156B677A0E7EF30D662978434.crl
                          rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/7F47009C8F403A7156B677A0E7EF30D662978434.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F47009C8F403A7156B677A0E7EF30D662978434.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 19:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:11:b8:47:9a:a8:3d:f5:24:48:32:5f:90:86:32:79:7a:a5:a1:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F47009C8F403A7156B677A0E7EF30D662978434
        Validity
            Not Before: Jun 12 19:55:19 2025 GMT
            Not After : Jun 11 20:00:19 2026 GMT
        Subject: CN=A1431A6258FDE57411340511497AD1EFEDBCE0DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:73:a0:0e:02:c3:6f:28:a2:0b:e9:a0:60:e0:
                    27:f9:a0:fa:ed:bc:c7:cf:0c:a4:b4:54:49:2e:1c:
                    cc:9c:a7:3e:05:e2:a7:63:ce:39:15:f6:d8:e5:e0:
                    8e:8e:c0:72:93:ec:31:fe:b8:d6:71:6a:6f:65:88:
                    ec:67:07:57:b7:d6:f5:85:ce:d9:bb:18:49:97:1f:
                    10:4b:5f:58:b2:4c:78:54:80:55:98:a3:60:25:fe:
                    96:60:69:ec:39:9e:81:bc:0f:26:f9:6f:fb:2b:67:
                    77:6c:c2:6c:61:7a:b0:47:30:6f:2d:88:75:5e:45:
                    65:49:9f:ac:a7:69:a8:f0:df:ec:2c:f2:0e:6b:e7:
                    fe:0f:99:ca:7d:f4:fd:ae:81:92:89:4c:a8:89:25:
                    2a:20:dc:3e:b6:3c:eb:f2:88:95:c9:45:32:33:11:
                    3f:d8:da:e0:07:6d:b3:67:9c:cc:b1:10:0e:03:3a:
                    f5:0a:70:93:cb:9f:d0:5d:53:16:43:3c:42:29:57:
                    10:f4:27:e1:61:b6:19:45:62:16:0d:6f:bd:d9:e1:
                    1d:c5:c3:93:f9:9d:b3:19:82:03:fd:5d:67:84:99:
                    59:e6:ec:38:17:d0:29:b8:13:fe:9b:48:b4:05:dc:
                    45:8e:74:f4:be:ee:e6:89:80:53:3b:c6:fc:8e:91:
                    94:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:43:1A:62:58:FD:E5:74:11:34:05:11:49:7A:D1:EF:ED:BC:E0:DD
            X509v3 Authority Key Identifier:
                keyid:7F:47:00:9C:8F:40:3A:71:56:B6:77:A0:E7:EF:30:D6:62:97:84:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/7F47009C8F403A7156B677A0E7EF30D662978434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F47009C8F403A7156B677A0E7EF30D662978434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/3133382e39342e3139362e302f32322d3234203d3e203631353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:59:6a:6b:c0:75:bb:80:83:de:71:6c:d1:9f:39:69:aa:07:
         ed:77:d7:6a:e1:c8:c1:a3:30:8c:8d:f3:29:35:26:8b:06:8c:
         7c:84:ef:0d:44:25:35:aa:da:2c:29:f5:fb:5c:ce:c6:7f:80:
         e8:38:c7:f3:f0:8b:26:13:53:dd:4b:7e:af:ab:cd:bc:0d:65:
         30:73:ce:cb:84:14:09:2a:af:ac:3a:ac:13:02:6c:c2:e4:f1:
         40:6e:7b:b8:5e:4f:f0:f2:95:c7:cc:57:d8:14:16:57:30:85:
         28:1e:66:45:eb:8e:05:cb:aa:c0:87:e9:ac:64:b5:6c:ee:5a:
         09:4a:fc:09:2c:0c:48:0c:79:30:89:2d:09:12:c8:42:14:4d:
         18:c5:43:8e:54:25:68:3a:9b:87:48:3b:12:ce:8c:96:76:2f:
         02:14:81:a0:76:11:98:15:e1:15:4c:14:f8:66:12:bb:ec:b9:
         cb:3e:66:31:66:a0:b9:68:bc:c0:11:df:44:e4:49:58:53:12:
         63:9f:80:c1:c0:af:80:b2:5c:9a:68:ae:70:34:db:e0:51:24:
         65:0f:75:ab:3d:9b:09:ee:4b:93:2b:89:6a:dd:35:c4:07:37:
         7b:82:bc:2f:81:97:f9:e7:4a:9a:a1:16:da:d3:1a:c9:30:02:
         00:d0:30:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 02:42:22 2025 by rpki-client