Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e39302e302f32342d3234203d3e20323632343835.roa
File:                     3133382e3131382e39302e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          lTkXn6fxRa3jNgNLN04X+R4+KbaNfD4aVLAIUXemO2k=
Subject key identifier:   B9:61:40:65:D8:F7:37:72:62:44:27:49:4B:CF:1B:A7:22:36:D7:25
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       0B964ADEFC33F987E94EC8C84698947DCE6262F7
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e39302e302f32342d3234203d3e20323632343835.roa
Signing time:             Sat 28 Jun 2025 21:33:38 +0000
ROA not before:           Sat 28 Jun 2025 21:28:38 +0000
ROA not after:            Sat 27 Jun 2026 21:33:38 +0000
asID:                     262485
IP address blocks:        138.118.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 21:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:96:4a:de:fc:33:f9:87:e9:4e:c8:c8:46:98:94:7d:ce:62:62:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jun 28 21:28:38 2025 GMT
            Not After : Jun 27 21:33:38 2026 GMT
        Subject: CN=B9614065D8F73772624427494BCF1BA72236D725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:4f:25:52:a5:d1:6d:6d:05:d1:84:33:15:
                    25:98:0d:8a:22:f5:43:fb:c0:9e:ad:01:10:81:de:
                    db:c2:22:56:29:0a:05:3b:f3:07:c4:9f:76:e4:7c:
                    7f:6d:fd:fe:aa:4b:b7:0c:05:a4:0f:09:c6:24:d9:
                    ef:a4:85:df:1a:8f:2c:2e:39:9b:c1:d8:b3:fb:d0:
                    9c:88:28:4d:40:a8:39:a6:50:3e:2d:a4:bd:01:35:
                    f7:38:84:15:53:3e:c1:9a:49:79:2e:9c:d7:f5:7c:
                    18:f7:a8:c1:87:51:91:01:b3:63:d0:ca:07:c2:ee:
                    16:ce:a2:20:7b:16:13:cf:57:7c:43:c2:27:e8:94:
                    d3:b8:e9:57:10:58:9d:07:e4:4d:7d:9c:c3:39:db:
                    9b:1b:a6:e6:4e:15:8b:a5:a1:6e:99:06:45:8e:18:
                    e8:d1:80:93:31:65:29:e1:b5:a5:93:31:4b:57:91:
                    42:86:cd:b3:1a:4e:6f:a1:d9:92:10:86:e0:05:8f:
                    cc:77:55:3e:fe:5f:58:7e:65:cb:04:53:9b:63:a0:
                    42:b1:41:d5:2a:81:04:42:a3:c1:55:76:c5:ae:d7:
                    c0:03:36:32:20:ed:29:fc:cd:78:24:bd:8b:ce:5d:
                    6c:c1:be:c9:89:f7:12:b3:f8:8c:8a:0f:e7:ba:dc:
                    6a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:61:40:65:D8:F7:37:72:62:44:27:49:4B:CF:1B:A7:22:36:D7:25
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e39302e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:73:76:69:df:87:e8:72:5b:87:ab:f8:f0:50:34:94:84:ba:
         99:05:9e:5a:cb:6e:72:80:b8:35:f6:cf:26:2a:2b:29:a5:9a:
         a9:ca:94:47:1f:6f:13:ff:6e:ca:ef:97:5f:8a:d4:e5:7d:10:
         dc:b9:9f:70:0c:17:f6:63:a1:29:a3:e1:2e:d5:2b:e5:30:d9:
         8c:81:86:76:a5:57:77:67:52:fa:f1:0f:f3:68:1c:97:d8:41:
         4d:c1:87:2d:35:46:5c:d6:c1:ad:66:07:c4:24:00:57:f8:09:
         15:08:f6:3b:a0:46:eb:fc:56:4a:c8:b6:65:a1:c7:a3:3c:33:
         29:64:95:06:d9:f9:4f:80:11:c2:14:62:bc:73:c3:10:d4:30:
         29:11:43:8a:3c:92:23:1f:d2:8c:da:97:ca:06:e4:2d:69:03:
         91:1d:38:4c:b1:87:f9:eb:18:e3:18:53:2b:be:cb:11:83:55:
         ef:6b:62:d7:6a:f3:26:a3:02:7b:96:d6:ee:bf:a5:17:fa:59:
         ef:e5:9a:44:3f:f3:f5:12:36:e9:66:48:f3:95:71:7a:f8:f1:
         6a:a9:4d:03:02:e3:83:be:52:19:b1:41:45:aa:0d:09:25:df:
         e2:81:b1:c5:40:31:c2:ee:b8:d0:53:1a:66:cc:b9:24:84:08:
         7b:b3:03:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:11:03 2025 by rpki-client