Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e39302e302f32332d3233203d3e20323632343835.roa
File:                     3133382e3131382e39302e302f32332d3233203d3e20323632343835.roa (raw, json)
Hash identifier:          pwdfA9ug22TwR90X3jh2iN4odRFlVwKWRBpwNFL2hK0=
Subject key identifier:   EF:71:4A:8F:78:5E:52:8D:D1:C9:9F:78:E8:1F:88:3A:11:41:D6:80
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       3B91C64EE5BA43F6F9B2A6645E6236C964C5BA84
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e39302e302f32332d3233203d3e20323632343835.roa
Signing time:             Sat 28 Jun 2025 21:33:40 +0000
ROA not before:           Sat 28 Jun 2025 21:28:40 +0000
ROA not after:            Sat 27 Jun 2026 21:33:40 +0000
asID:                     262485
IP address blocks:        138.118.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 21:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:91:c6:4e:e5:ba:43:f6:f9:b2:a6:64:5e:62:36:c9:64:c5:ba:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jun 28 21:28:40 2025 GMT
            Not After : Jun 27 21:33:40 2026 GMT
        Subject: CN=EF714A8F785E528DD1C99F78E81F883A1141D680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:f4:43:8a:40:44:cc:4d:13:92:d2:6e:d0:
                    f9:28:ba:8f:dc:95:18:0c:b8:51:bc:35:b6:11:7b:
                    a3:b8:44:07:96:83:df:4e:24:60:a0:98:79:4b:6c:
                    53:db:48:b1:25:02:f2:cd:42:e0:93:f7:5b:2f:bf:
                    b8:5b:3c:f8:76:b3:ed:44:8f:66:41:07:df:84:a3:
                    90:15:ad:f6:cc:90:36:fb:0c:85:61:0f:d4:1e:9c:
                    b5:4d:d8:b5:42:d3:b8:22:89:b9:83:b4:56:b5:53:
                    b9:76:8f:53:12:61:0b:40:f4:13:6a:6d:7d:56:61:
                    0d:d2:d3:f3:6a:c1:08:d4:1a:01:cc:13:6e:13:58:
                    b2:51:6f:30:73:de:2f:a6:aa:88:9e:e8:d6:9e:70:
                    d6:09:0b:6a:59:75:9a:fd:30:3e:1e:c6:16:58:c1:
                    bb:1c:77:0e:60:ec:53:f9:6d:38:59:af:41:fb:57:
                    97:6d:d0:2d:2a:06:4e:49:26:6e:02:e3:70:d9:d9:
                    2d:1e:47:b0:92:6d:f6:29:b1:13:ec:5b:5e:07:33:
                    bb:70:1c:b5:f7:ff:7e:3d:a0:67:c3:df:f1:71:16:
                    24:2b:09:a4:29:5a:5c:e5:42:c7:6e:fb:08:2e:d6:
                    26:bf:e0:0c:64:2d:d9:0d:10:c5:ac:31:98:5e:ec:
                    f6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:71:4A:8F:78:5E:52:8D:D1:C9:9F:78:E8:1F:88:3A:11:41:D6:80
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e39302e302f32332d3233203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:91:12:6b:5a:70:69:51:76:3c:64:47:b8:fe:63:67:05:f4:
         8f:a9:31:49:db:d3:3e:4e:09:51:ea:dc:bf:93:dc:16:11:01:
         a8:70:c9:20:e6:fc:c3:e9:26:75:e2:f6:4f:71:39:c0:4b:37:
         06:75:4f:91:60:b0:3d:70:a0:b6:05:80:ee:6b:7c:8f:05:82:
         e0:63:9e:bf:60:be:b1:7e:fe:09:26:75:cb:54:e9:01:2f:c2:
         c2:fe:cb:e1:74:27:21:73:79:af:ec:e1:70:56:aa:60:92:d8:
         64:b7:1f:4b:29:04:b4:99:b2:1a:9c:26:ea:42:af:24:4b:1c:
         b4:6b:65:5b:d2:9d:80:65:1f:d4:09:e3:28:d0:f3:2b:89:4e:
         57:a0:5d:7a:0b:67:93:48:e5:63:6a:fc:f1:62:aa:8e:70:af:
         b0:c3:39:8f:b5:17:f7:66:37:57:9e:f1:16:89:8b:07:c5:dc:
         64:2c:a9:9d:9e:e4:cd:60:68:4c:0b:7c:dd:8d:80:c3:13:5d:
         a7:f7:d4:83:4f:43:8b:fc:cb:62:35:5b:72:90:3f:08:c3:1d:
         ea:3b:fb:1e:38:7d:f7:6c:00:97:8d:2b:5e:60:16:6f:e3:32:
         7c:09:1f:56:ef:14:a9:e2:8f:3f:6e:00:1f:e8:8b:fb:ca:ed:
         a7:a9:36:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:55:39 2025 by rpki-client