Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3133382e3138362e34372e302f32342d3234203d3e203532373731.roa
File:                     3133382e3138362e34372e302f32342d3234203d3e203532373731.roa (raw, json)
Hash identifier:          cwWDuYXNgtm8vhLG8Wjk2qqu6f7CrU6fdW2sXrl1onk=
Subject key identifier:   99:D6:FA:73:A2:A7:0C:53:69:EF:1D:4B:A5:96:A3:A8:BE:8B:02:C8
Certificate issuer:       /CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Certificate serial:       758BA63EFD6EBF0CFAEF5FB5CCCA1ABF79F4CBFF
Authority key identifier: 39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3133382e3138362e34372e302f32342d3234203d3e203532373731.roa
Signing time:             Tue 10 Jun 2025 18:00:53 +0000
ROA not before:           Tue 10 Jun 2025 17:55:53 +0000
ROA not after:            Tue 09 Jun 2026 18:00:53 +0000
asID:                     52771
IP address blocks:        138.186.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
                          rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 23:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8b:a6:3e:fd:6e:bf:0c:fa:ef:5f:b5:cc:ca:1a:bf:79:f4:cb:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
        Validity
            Not Before: Jun 10 17:55:53 2025 GMT
            Not After : Jun  9 18:00:53 2026 GMT
        Subject: CN=99D6FA73A2A70C5369EF1D4BA596A3A8BE8B02C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a5:e9:b2:8a:59:f2:fb:f5:60:f4:a4:e4:23:
                    95:7d:0e:e1:f7:2e:39:9f:6f:ff:7b:dc:e8:d4:c5:
                    bc:78:3d:62:c8:b1:42:56:11:27:2d:88:69:27:10:
                    ed:1e:46:8a:a5:87:18:53:d1:77:ca:c0:f1:27:3f:
                    3e:6f:5d:72:df:d3:70:76:37:fe:aa:ce:79:ce:0a:
                    c0:88:06:10:1f:42:76:de:60:9c:e1:98:91:5b:51:
                    0d:a5:d2:47:5a:99:16:c7:39:9d:fe:21:6a:15:04:
                    73:4d:e1:e7:64:e6:54:51:63:da:21:ad:79:fc:27:
                    49:fe:68:01:91:27:5a:e1:52:ff:e0:97:1e:fd:ea:
                    f0:7b:b3:71:6d:38:22:e7:49:20:74:61:30:07:58:
                    99:8c:de:97:5e:f0:d6:13:76:fb:dc:a8:cc:17:89:
                    22:36:83:24:c0:84:11:62:24:e1:53:56:85:c5:ef:
                    3b:4b:43:8d:9f:01:02:1a:a1:ad:d4:c7:95:89:a2:
                    a2:bd:bd:c4:e6:07:2d:76:8e:ac:ef:77:77:56:9f:
                    f4:fd:25:bb:ef:17:92:18:54:0f:46:2f:4d:60:6c:
                    88:59:70:a3:19:15:5b:c4:2f:cd:fd:0b:87:96:59:
                    1e:59:c6:b5:79:eb:87:f8:56:01:db:1e:8d:09:07:
                    09:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D6:FA:73:A2:A7:0C:53:69:EF:1D:4B:A5:96:A3:A8:BE:8B:02:C8
            X509v3 Authority Key Identifier:
                keyid:39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3133382e3138362e34372e302f32342d3234203d3e203532373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:fc:40:8f:c2:cf:b3:92:c2:1c:ff:c2:27:1e:f9:1e:16:dd:
         55:de:fc:12:d3:99:e4:e0:33:62:7d:81:6c:1b:3f:3a:85:e5:
         4d:0d:0c:e0:d1:c5:77:dc:be:68:bb:c3:a9:98:d9:95:c2:82:
         08:fc:38:c4:9b:02:c6:13:2c:79:7a:1c:60:0b:3d:76:55:b8:
         34:63:1a:21:51:3a:75:3d:85:98:80:3f:93:ec:e4:2c:1f:52:
         97:47:70:87:51:b6:2a:f2:8a:9e:db:12:a3:0d:26:0b:c6:77:
         c2:2f:11:18:30:c4:09:e9:2d:da:cb:94:5d:80:97:36:c8:c8:
         03:68:80:2b:0b:63:10:89:84:c6:d2:de:dd:9f:9b:fd:b4:49:
         8a:dc:e6:7e:d2:79:54:c5:63:27:19:55:91:cf:f0:bc:e7:85:
         aa:d4:2a:2a:ef:f8:41:55:6c:40:ad:3b:9f:83:43:c4:98:c3:
         e0:97:12:6e:99:65:63:3d:d3:5f:c3:57:be:9e:de:a5:ca:6f:
         71:45:cf:b6:b9:51:28:03:ae:a3:2d:14:8b:62:d8:e2:af:75:
         b6:5c:77:47:f1:2b:0d:94:a3:21:f7:96:88:e6:c4:ec:eb:11:
         13:f9:67:98:8e:41:ab:59:e7:8a:91:2e:2d:40:4d:83:60:13:
         0d:92:7b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:41:42 2025 by rpki-client