Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3133322e3235352e32342e302f32322d3332203d3e20323632323836.roa
File:                     3133322e3235352e32342e302f32322d3332203d3e20323632323836.roa (raw, json)
Hash identifier:          kFfUlyTs5mx5FarSpSwBX6eqNiy4Jt15s91Z7iMxXEY=
Subject key identifier:   5B:52:AF:C6:9F:AC:7B:3F:53:A6:FC:03:66:D8:2F:26:CF:ED:06:15
Certificate issuer:       /CN=3865E3537268319DD70D1072B951BD12CEB4D7D2
Certificate serial:       568839BD07414E673EA2460D8F2488BE101E1C3E
Authority key identifier: 38:65:E3:53:72:68:31:9D:D7:0D:10:72:B9:51:BD:12:CE:B4:D7:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3865E3537268319DD70D1072B951BD12CEB4D7D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3133322e3235352e32342e302f32322d3332203d3e20323632323836.roa
Signing time:             Tue 15 Jul 2025 19:48:41 +0000
ROA not before:           Tue 15 Jul 2025 19:43:41 +0000
ROA not after:            Tue 14 Jul 2026 19:48:41 +0000
asID:                     262286
IP address blocks:        132.255.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3865E3537268319DD70D1072B951BD12CEB4D7D2.crl
                          rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3865E3537268319DD70D1072B951BD12CEB4D7D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3865E3537268319DD70D1072B951BD12CEB4D7D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 18:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:88:39:bd:07:41:4e:67:3e:a2:46:0d:8f:24:88:be:10:1e:1c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3865E3537268319DD70D1072B951BD12CEB4D7D2
        Validity
            Not Before: Jul 15 19:43:41 2025 GMT
            Not After : Jul 14 19:48:41 2026 GMT
        Subject: CN=5B52AFC69FAC7B3F53A6FC0366D82F26CFED0615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:a5:fa:cc:bf:d0:d0:56:b4:af:3e:27:75:
                    57:79:ca:a7:d6:60:af:9a:a9:9a:77:43:ec:a2:2a:
                    7c:6d:e5:67:82:89:f7:67:5d:66:bc:b1:24:b1:79:
                    66:60:4f:15:f2:40:e1:6d:96:92:e4:6c:76:6b:c0:
                    83:e6:d8:c4:b6:06:ca:85:b2:ef:64:70:eb:99:dc:
                    92:89:47:ec:bb:d5:fc:58:ab:9d:9f:f3:6f:76:49:
                    6a:22:41:ec:2a:c3:e5:97:35:e5:b6:b8:40:e1:34:
                    1f:5c:71:46:02:23:5d:6b:2a:8c:07:ed:7e:66:28:
                    a3:2a:37:81:d5:70:78:c1:71:c9:f8:b3:b3:a1:e8:
                    12:73:34:a3:f7:31:07:81:fd:37:7f:1a:a2:2e:1f:
                    12:78:85:27:85:e8:b7:67:a1:78:34:61:c8:a5:b2:
                    23:32:18:45:a5:2b:42:6b:d2:a6:c3:ca:2b:dd:21:
                    44:42:5b:25:bf:60:ec:97:e9:7e:64:37:f8:a0:0d:
                    bb:78:66:32:04:ee:ab:3c:7e:de:cf:da:12:a8:a4:
                    ba:48:c9:5b:79:9c:f6:47:a5:4e:88:d2:a6:24:a0:
                    a7:24:07:c9:bc:64:eb:f4:9a:25:95:60:db:7a:db:
                    00:62:79:2e:e8:56:dd:bc:5e:b7:3b:0a:b6:d7:43:
                    aa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:52:AF:C6:9F:AC:7B:3F:53:A6:FC:03:66:D8:2F:26:CF:ED:06:15
            X509v3 Authority Key Identifier:
                keyid:38:65:E3:53:72:68:31:9D:D7:0D:10:72:B9:51:BD:12:CE:B4:D7:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3865E3537268319DD70D1072B951BD12CEB4D7D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3865E3537268319DD70D1072B951BD12CEB4D7D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3133322e3235352e32342e302f32322d3332203d3e20323632323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:61:6a:21:c7:e1:4f:ca:28:ca:1d:68:1c:16:34:6e:7b:51:
         7d:ba:40:51:9a:f8:28:b2:35:08:67:db:60:30:c7:de:21:05:
         3d:57:49:d9:74:ca:07:78:7e:b5:dd:54:9e:01:a6:4e:a5:27:
         c1:e8:73:39:a1:3d:fe:85:e3:2b:d6:c8:8e:d5:05:59:c9:6a:
         12:95:38:99:c1:a3:eb:c3:41:e8:f0:e6:be:fd:08:b0:37:12:
         4c:42:08:28:2d:0e:d1:09:5c:38:a5:4b:69:90:30:5d:63:7d:
         1b:e4:f0:2e:41:2a:f2:a3:64:25:93:fa:8f:4d:f0:4a:da:87:
         e2:26:64:08:0c:9d:ec:74:2f:0b:cf:ec:30:31:0b:b9:f5:ff:
         ab:72:13:08:a3:44:f6:63:e8:af:c1:d6:a1:5b:63:6d:1d:c6:
         ef:cc:6a:dc:d4:f8:ed:70:0e:c2:88:f6:88:eb:84:e1:d9:12:
         5c:b1:e2:36:7d:3e:6f:3e:b4:8e:9f:e3:1f:5d:b4:ca:eb:df:
         d9:58:01:73:a4:3c:68:ed:da:62:32:8c:2a:5c:1f:96:ef:93:
         27:4a:70:95:7c:fa:f4:52:10:d7:70:c3:96:48:70:2d:2f:03:
         d7:1c:e6:20:44:02:b1:1e:8e:fb:ea:bf:ae:d6:af:5f:66:15:
         16:4b:50:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:45:17 2025 by rpki-client