Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e38382e302f32342d3234203d3e20323632343835.roa
File:                     3133382e3131382e38382e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          xJW04TzttuJOQpIAd1TIOnfRd/PvMkT/WvVob4YEScc=
Subject key identifier:   05:18:3E:79:95:C6:3A:1B:22:B6:A3:C0:D6:F8:F6:55:C4:31:94:08
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       0F1B032F6CD2130177FF5D5995D9A80E1B1D3709
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e38382e302f32342d3234203d3e20323632343835.roa
Signing time:             Sat 28 Jun 2025 21:33:39 +0000
ROA not before:           Sat 28 Jun 2025 21:28:39 +0000
ROA not after:            Sat 27 Jun 2026 21:33:39 +0000
asID:                     262485
IP address blocks:        138.118.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 21:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1b:03:2f:6c:d2:13:01:77:ff:5d:59:95:d9:a8:0e:1b:1d:37:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jun 28 21:28:39 2025 GMT
            Not After : Jun 27 21:33:39 2026 GMT
        Subject: CN=05183E7995C63A1B22B6A3C0D6F8F655C4319408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:c4:3b:47:26:97:55:06:97:5b:51:aa:f1:
                    54:5b:f5:49:08:89:30:aa:00:54:6c:ab:9f:c0:82:
                    ff:13:75:da:6a:95:13:07:b8:7b:73:11:be:71:a8:
                    bd:11:77:1e:de:62:35:7f:dc:49:d8:40:b4:67:1e:
                    81:85:bc:3a:bf:7b:80:f4:54:8d:fb:8a:a7:d5:2e:
                    5e:f1:78:0b:df:ce:fd:f0:b3:49:6b:ad:6d:45:a6:
                    e0:1f:ca:79:cd:27:10:da:c0:51:b0:3b:1d:fb:cc:
                    34:52:e2:5c:31:15:40:55:c6:8d:27:65:51:51:7f:
                    f4:e1:f0:81:53:71:b6:fa:24:a2:82:50:62:1b:d1:
                    21:87:ee:b2:66:25:71:96:f4:83:5f:ee:d2:13:6d:
                    9e:3b:1a:a6:4d:2c:e1:c2:45:72:51:8d:bf:2b:b4:
                    82:d3:a8:77:fa:7e:20:da:e8:7e:09:f6:fb:90:63:
                    6f:21:39:94:63:ed:aa:12:af:ae:9d:77:1c:d8:6d:
                    de:20:1d:9e:e8:dc:6c:f5:f7:44:f3:4e:aa:29:a5:
                    fe:b9:b8:8f:1a:63:28:4d:52:be:21:e8:d7:7a:53:
                    fe:1e:14:e6:df:59:7b:80:5a:b2:14:b5:c1:67:9f:
                    a3:0d:a1:80:4e:ca:ec:35:dd:21:56:bb:03:83:2b:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:18:3E:79:95:C6:3A:1B:22:B6:A3:C0:D6:F8:F6:55:C4:31:94:08
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e38382e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:80:49:6d:cc:02:3f:51:08:62:6f:e7:48:6f:a5:f6:03:41:
         cc:22:0e:e9:22:7f:06:e7:9c:67:9c:f2:de:1d:41:2e:bd:7b:
         7b:99:92:eb:6b:28:0f:df:9b:83:45:00:da:b3:12:91:e8:bf:
         d9:a6:75:9a:3b:9e:be:78:88:54:36:a9:25:29:6b:f7:47:2d:
         90:1f:90:99:89:10:32:81:b5:82:a9:1b:63:28:c4:f5:23:b7:
         46:6a:7a:3b:f1:2a:6b:ff:ce:48:a4:34:ce:cc:a0:d6:c2:ad:
         d5:f5:7f:25:aa:3f:ca:59:9b:3e:7a:6a:e1:53:9b:7d:1a:28:
         3d:f0:13:54:70:b1:ea:8f:73:70:6c:fd:aa:17:6e:0e:47:bf:
         17:55:cd:4b:da:91:63:96:5c:68:4c:8e:df:94:30:34:92:f9:
         39:3d:8a:c2:c3:1c:35:2f:6d:3e:40:32:85:f2:d0:b5:d1:d6:
         6f:e7:b6:63:fd:be:21:92:6b:53:47:0d:22:ca:d8:0e:8d:3a:
         fd:29:d0:4d:7c:e9:d7:90:dd:df:dc:39:f3:6d:e2:88:ae:7a:
         d4:12:7a:89:13:7c:62:88:83:19:a6:7f:31:1c:60:f2:c7:c8:
         57:a1:7f:f6:bd:f2:3e:ad:9e:80:4b:60:2a:c2:ed:f9:29:d4:
         2b:72:d6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:18:10 2025 by rpki-client