Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31362e302f32322d3234203d3e20323733333039.roa
File:                     3133382e3132322e31362e302f32322d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          RE2vYDbsOrzwhh/qMLE9KOCRe/bXoVxuyZLBkw0S2ps=
Subject key identifier:   A2:B7:17:33:54:D4:41:5C:C1:49:D4:45:1A:2E:9A:9E:A3:39:A6:CA
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       42B70F57AAFE467FEE7806D1DF3A15026ED4EEFF
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31362e302f32322d3234203d3e20323733333039.roa
Signing time:             Mon 16 Jun 2025 19:48:02 +0000
ROA not before:           Mon 16 Jun 2025 19:43:02 +0000
ROA not after:            Mon 15 Jun 2026 19:48:02 +0000
asID:                     273309
IP address blocks:        138.122.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 09:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b7:0f:57:aa:fe:46:7f:ee:78:06:d1:df:3a:15:02:6e:d4:ee:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Jun 16 19:43:02 2025 GMT
            Not After : Jun 15 19:48:02 2026 GMT
        Subject: CN=A2B7173354D4415CC149D4451A2E9A9EA339A6CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:30:69:32:60:11:b3:48:86:9a:eb:47:97:
                    78:3f:4c:61:84:90:b7:8a:52:d4:0b:f1:d5:b2:9a:
                    e0:2c:ed:5e:73:df:46:a8:9e:39:7a:19:dd:81:98:
                    1e:47:f3:62:a5:98:10:8a:d4:d8:74:aa:62:d5:1a:
                    e6:a1:e5:23:00:9c:28:82:78:cc:2c:7d:35:40:e9:
                    04:76:0a:70:5d:8a:b4:36:38:85:1a:6c:40:ed:8a:
                    c6:d5:bf:5c:2f:04:be:73:97:cc:8d:f7:f3:0e:c8:
                    7e:27:b0:5a:f6:f6:09:dc:ac:cc:c3:22:18:16:a7:
                    f6:1f:ac:35:f6:cc:f0:d6:da:af:2d:e9:29:5a:c5:
                    10:d2:b4:a3:48:2b:f4:56:2b:88:b6:64:c9:b0:cb:
                    fc:a0:5c:e8:b1:d3:c2:ba:bf:25:64:c0:f8:96:02:
                    c4:99:10:34:ff:6a:2c:2e:59:a8:b4:92:9d:8b:04:
                    eb:e4:65:fa:c1:6d:fb:19:fc:bd:e5:fe:02:f8:c9:
                    ad:1d:d0:b7:a3:b6:62:bf:02:d9:3b:d0:aa:2e:40:
                    b3:7d:61:75:25:e5:c1:de:e4:c3:17:3b:dc:1d:f3:
                    9b:2e:2d:fd:0f:99:77:a6:68:51:a4:62:9e:04:25:
                    a3:a7:96:64:98:0b:20:75:65:68:ab:92:1a:e3:60:
                    74:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B7:17:33:54:D4:41:5C:C1:49:D4:45:1A:2E:9A:9E:A3:39:A6:CA
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31362e302f32322d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:df:84:25:05:54:14:90:58:65:46:33:14:b3:11:9e:f9:80:
         fc:ac:65:40:b8:86:cf:e9:cd:a1:1d:cf:e2:f3:f0:72:8b:aa:
         3e:54:b3:42:95:48:b2:e3:96:85:00:fa:d6:f8:20:35:30:79:
         b0:ab:19:f9:fb:61:b2:6b:2e:ed:2c:70:ea:09:06:9c:ff:07:
         5d:18:b4:e8:19:f7:32:f8:7a:c7:c5:b1:34:5e:b3:54:12:63:
         7d:6d:ff:07:dc:3d:51:18:d2:b6:04:54:93:a0:44:c4:70:50:
         b8:30:23:65:e7:d5:fc:2d:29:87:98:a4:91:39:cb:ce:f7:12:
         c3:73:2f:79:be:45:b9:0d:e2:09:41:68:58:08:0d:39:ed:73:
         8f:dc:6a:ba:7b:57:e5:c6:17:02:ec:f5:48:c9:22:89:15:70:
         c1:b5:63:51:5d:73:a7:77:e5:c2:3d:16:0b:d1:18:2a:33:1f:
         d2:f0:73:f8:21:c7:10:64:df:89:1a:43:7f:4a:68:c0:0d:e2:
         12:9e:f3:e3:b2:fb:5e:34:fe:71:fc:8c:c5:30:ad:c7:55:67:
         67:94:11:8a:a7:77:10:02:8c:ed:21:6c:19:89:1b:47:fb:c8:
         54:2a:1d:51:58:cd:eb:2b:fa:e2:44:6e:23:fd:c7:45:7e:d5:
         82:3c:d9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:51:53 2025 by rpki-client