Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e38392e302f32342d3234203d3e20323632343835.roa
File:                     3133382e3131382e38392e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          Vv7bsHCALNAB3Se339O78anh1BAb+Zcxs7aKZYiJyak=
Subject key identifier:   1A:25:11:74:73:6B:2D:34:E9:37:4E:8E:1F:B6:F3:09:0C:0B:1D:24
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       1AF49D4DC33A256BB6DF536D4E89D13501F02044
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e38392e302f32342d3234203d3e20323632343835.roa
Signing time:             Sat 28 Jun 2025 21:33:38 +0000
ROA not before:           Sat 28 Jun 2025 21:28:38 +0000
ROA not after:            Sat 27 Jun 2026 21:33:38 +0000
asID:                     262485
IP address blocks:        138.118.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 21:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f4:9d:4d:c3:3a:25:6b:b6:df:53:6d:4e:89:d1:35:01:f0:20:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jun 28 21:28:38 2025 GMT
            Not After : Jun 27 21:33:38 2026 GMT
        Subject: CN=1A251174736B2D34E9374E8E1FB6F3090C0B1D24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:cb:da:6f:43:0b:87:b8:7f:b9:94:9c:d7:
                    cc:4b:03:fc:c0:56:07:49:73:48:2a:5e:83:0d:09:
                    15:f4:0e:33:c2:b8:be:6c:fa:e0:16:08:56:f6:68:
                    93:f3:9d:6e:1e:55:72:c3:eb:32:17:81:39:3f:87:
                    0f:7f:e5:0a:1b:36:cd:da:62:57:d0:c2:06:2b:78:
                    e5:a7:d9:54:a4:1b:9b:33:34:d3:60:1f:8d:fb:de:
                    74:dd:e5:1e:0f:45:7f:4e:17:cc:e4:ca:11:59:83:
                    7c:23:72:05:12:54:94:35:64:ac:a5:fc:02:ed:de:
                    df:d2:f5:44:8f:6e:a1:01:93:10:ae:44:e1:a1:54:
                    9a:36:87:66:6d:92:bd:4c:7b:2f:d0:36:93:70:fe:
                    6b:bd:20:12:a0:dc:f5:4a:72:e3:20:e7:4a:76:6e:
                    28:e1:49:9b:b4:03:7a:aa:21:a3:86:e1:9a:fd:41:
                    be:e7:f5:cd:a5:05:8d:ba:f9:b2:53:8d:4b:f6:38:
                    3e:3b:b6:77:e5:5e:6d:2e:87:94:65:46:d5:66:c2:
                    05:fa:b5:de:f0:a4:ce:2c:dc:e0:eb:af:c7:19:f5:
                    81:e7:7a:67:3d:2c:7a:bc:ef:f6:dd:bc:bd:97:c5:
                    03:fd:28:26:df:4b:ee:98:a2:05:2e:99:5a:57:24:
                    06:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:25:11:74:73:6B:2D:34:E9:37:4E:8E:1F:B6:F3:09:0C:0B:1D:24
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e38392e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:6b:6a:65:9e:4c:34:e8:8b:0e:5f:82:0c:ca:49:21:7d:ed:
         dc:e9:e4:21:be:39:fb:7b:c5:a8:7a:78:8f:f6:c8:e5:b6:e9:
         ef:f8:48:53:10:72:90:1e:4c:f3:3a:9c:1f:5c:ac:7b:18:26:
         18:20:2d:1a:83:0a:25:c9:48:d8:49:dd:27:5e:eb:4c:de:23:
         fb:a4:3e:d1:91:66:8b:1b:ca:4b:f8:19:4d:3b:a0:e4:22:32:
         ed:07:3d:e6:7b:4e:a4:2c:4c:35:cc:29:e0:74:30:f4:b3:d5:
         c4:2e:51:be:24:e3:f5:1f:1f:72:39:20:c3:c9:a8:a6:bc:75:
         fb:d1:88:17:17:12:22:be:98:e7:65:e6:28:cd:ab:68:03:72:
         71:c7:d3:14:4d:c7:b1:77:11:27:02:34:81:52:9c:db:01:91:
         5c:1f:9b:13:f1:73:7f:81:32:59:a4:a6:48:73:9c:91:b0:dd:
         59:94:d7:db:21:d3:30:54:e6:53:3b:4a:9f:c6:f4:d3:c8:31:
         1e:f3:60:c7:a3:2e:ee:fb:8e:81:b7:91:80:d2:04:df:72:52:
         da:7d:31:65:1a:d2:9a:a9:bc:71:3f:b2:78:e7:29:20:05:a4:
         5d:98:c5:13:6c:42:22:10:70:a3:d1:b5:66:db:52:82:7f:43:
         8c:72:e9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:31:31 2025 by rpki-client