Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/3133382e39342e34302e302f32322d3234203d3e20323730393330.roa
File:                     3133382e39342e34302e302f32322d3234203d3e20323730393330.roa (raw, json)
Hash identifier:          26d2RZzImxIBzXs+u9w5EbknazYx8KMeJW4UB0dLGs4=
Subject key identifier:   90:8D:B2:66:55:66:6C:14:26:AC:E6:00:56:48:5F:B2:4A:BE:C0:A6
Certificate issuer:       /CN=EB986415C5BF985366A96083947F73D2559B6754
Certificate serial:       5F8A0EAC4833DDB34F465B5DAB33C9E0EC07F9E5
Authority key identifier: EB:98:64:15:C5:BF:98:53:66:A9:60:83:94:7F:73:D2:55:9B:67:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB986415C5BF985366A96083947F73D2559B6754.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/3133382e39342e34302e302f32322d3234203d3e20323730393330.roa
Signing time:             Sun 27 Apr 2025 23:24:49 +0000
ROA not before:           Sun 27 Apr 2025 23:19:49 +0000
ROA not after:            Sun 26 Apr 2026 23:24:49 +0000
asID:                     270930
IP address blocks:        138.94.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/EB986415C5BF985366A96083947F73D2559B6754.crl
                          rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/EB986415C5BF985366A96083947F73D2559B6754.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB986415C5BF985366A96083947F73D2559B6754.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 00:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8a:0e:ac:48:33:dd:b3:4f:46:5b:5d:ab:33:c9:e0:ec:07:f9:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB986415C5BF985366A96083947F73D2559B6754
        Validity
            Not Before: Apr 27 23:19:49 2025 GMT
            Not After : Apr 26 23:24:49 2026 GMT
        Subject: CN=908DB26655666C1426ACE60056485FB24ABEC0A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:12:12:cb:53:ea:29:54:e1:a0:2d:ff:01:9a:
                    a5:34:42:16:b2:89:aa:f0:2c:8a:28:35:a7:12:cc:
                    2d:49:2b:33:43:5d:b4:ea:b9:ea:ce:53:30:02:ea:
                    a9:c8:60:e7:73:cb:93:63:ae:09:1f:f3:90:34:4f:
                    d8:4d:dd:91:08:8d:13:94:15:cb:91:05:99:54:fb:
                    38:d9:4f:b0:fb:c9:84:c7:dd:2c:9b:8e:c4:60:05:
                    7d:2c:e7:69:a0:4f:2f:91:0a:a8:a6:05:71:60:5b:
                    ff:b1:d0:d4:5f:be:74:89:d6:f2:c2:f7:e2:4d:d7:
                    d3:5c:02:48:99:d3:2e:e1:45:bc:3f:db:5a:7b:45:
                    01:d9:92:b4:b8:8c:b5:2c:81:5c:66:d8:88:fb:15:
                    18:ea:65:c5:49:23:46:f0:2c:b4:b5:b0:d8:6c:1b:
                    b9:cd:0c:5a:9a:ab:19:7e:d2:83:56:91:56:c5:12:
                    5c:82:ab:93:34:9e:5c:bf:8a:d3:f0:5b:6e:a1:56:
                    eb:f1:b0:d7:bd:ab:9d:a4:a9:d4:18:96:78:c4:5d:
                    be:88:c2:cf:9e:b9:43:22:48:38:0d:5e:6f:a3:6d:
                    dc:c7:4e:5c:51:7a:15:b2:1d:9a:a4:af:be:e6:f1:
                    ae:be:4c:15:9a:c9:d6:00:da:cf:7c:a9:15:a1:86:
                    dd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8D:B2:66:55:66:6C:14:26:AC:E6:00:56:48:5F:B2:4A:BE:C0:A6
            X509v3 Authority Key Identifier:
                keyid:EB:98:64:15:C5:BF:98:53:66:A9:60:83:94:7F:73:D2:55:9B:67:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/EB986415C5BF985366A96083947F73D2559B6754.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB986415C5BF985366A96083947F73D2559B6754.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/3133382e39342e34302e302f32322d3234203d3e20323730393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:83:d7:1e:01:6a:42:86:14:11:50:d6:45:30:e5:22:09:73:
         a2:eb:ee:51:99:1c:02:e4:c8:81:cc:b2:7c:96:f2:b4:30:7d:
         8a:60:59:0a:40:2a:e9:9e:44:23:6d:d1:84:79:2b:d4:f6:ce:
         61:28:5f:1f:0d:d8:70:7f:29:f5:5d:42:d1:0e:5d:14:45:ee:
         72:db:86:14:34:f7:6d:71:c6:3b:d8:0e:bb:cf:b8:82:44:86:
         dd:23:92:1a:3f:6f:ec:aa:4e:e1:0d:d5:95:1e:e0:8f:e8:de:
         56:a6:91:98:6f:35:d6:7f:a2:ce:d4:d9:da:ad:3f:e1:ef:77:
         37:76:bf:9f:31:0d:5e:51:bf:84:73:c3:b5:0f:64:99:70:27:
         37:5c:18:4f:35:bc:63:f0:04:29:c7:17:76:72:f2:1a:af:14:
         36:e9:5d:28:06:da:3d:72:68:69:4b:b2:1d:97:e4:92:85:9a:
         5e:36:e0:79:6c:43:3f:60:69:dc:fd:5e:33:82:bc:4a:8d:45:
         c5:7f:1d:98:34:8f:69:91:e4:99:9e:45:7a:6d:b1:c1:f6:b1:
         39:cc:6d:2c:35:ae:ff:34:ee:c8:83:a3:e0:cc:ef:7a:bb:1f:
         76:ad:32:82:46:83:4b:15:2c:4a:19:58:03:41:64:fb:bc:db:
         cd:58:a1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:41:14 2025 by rpki-client