Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3231392e34382e302f32322d3234203d3e20323733333039.roa
File:                     3133382e3231392e34382e302f32322d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          7iwrAtUWL2cE8izic4nQL5DlNTIHQdGDy9xPCUd6+AM=
Subject key identifier:   79:D5:98:85:EA:3D:4F:C4:FB:71:A5:D7:F7:1F:C2:DE:04:DE:AC:DD
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       19A5DAD920238BBAD9D575A0C657DE933A8DFC52
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3231392e34382e302f32322d3234203d3e20323733333039.roa
Signing time:             Mon 16 Jun 2025 14:41:16 +0000
ROA not before:           Mon 16 Jun 2025 14:36:16 +0000
ROA not after:            Mon 15 Jun 2026 14:41:16 +0000
asID:                     273309
IP address blocks:        138.219.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 09:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a5:da:d9:20:23:8b:ba:d9:d5:75:a0:c6:57:de:93:3a:8d:fc:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Jun 16 14:36:16 2025 GMT
            Not After : Jun 15 14:41:16 2026 GMT
        Subject: CN=79D59885EA3D4FC4FB71A5D7F71FC2DE04DEACDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fd:48:82:a6:93:84:10:b9:a2:30:36:ee:6a:
                    ea:f9:0c:92:b1:cf:ff:08:97:e8:d4:f8:7d:eb:eb:
                    ad:6c:35:e3:df:11:86:67:89:b5:21:20:53:c0:f0:
                    99:e1:df:c5:7e:3a:2e:38:fa:f9:28:58:2e:75:ca:
                    d4:8d:c6:87:c7:10:9d:43:06:f6:39:3b:a1:ac:92:
                    c6:bc:6a:cc:03:35:10:92:49:8c:43:b5:b7:88:d8:
                    00:57:e8:7c:1c:cc:63:cc:a6:dc:7e:6e:4e:d4:a5:
                    de:f8:8a:69:ec:3a:d5:b9:49:52:a2:6f:04:1d:29:
                    82:ab:6e:3f:a6:ba:66:eb:b1:7f:08:1d:fa:a1:06:
                    78:78:7f:4e:dd:ca:1e:6a:24:4b:3c:81:5a:ee:72:
                    20:7c:d3:38:b1:92:6d:f6:c0:93:4a:3c:02:5f:3e:
                    6a:d3:87:9f:53:01:69:b1:37:ae:9e:14:4f:07:f8:
                    1f:71:21:7b:93:a1:14:05:65:08:0d:bf:57:b7:54:
                    cf:a8:71:ef:d2:97:1b:2c:d7:be:72:b5:f8:ae:16:
                    6e:e5:1b:08:59:64:2f:b2:a2:be:42:9a:5b:ff:0f:
                    d2:fe:e4:4b:22:ea:af:a6:6e:71:88:40:70:a0:3d:
                    ae:ba:39:d7:a2:e7:e0:2d:9a:22:8a:9a:de:15:9e:
                    16:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D5:98:85:EA:3D:4F:C4:FB:71:A5:D7:F7:1F:C2:DE:04:DE:AC:DD
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3231392e34382e302f32322d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:08:dd:1b:b2:67:91:92:4f:7a:04:09:8a:9d:86:9e:3c:e2:
         fa:e2:c9:6c:87:79:d0:5e:18:05:71:94:2c:80:ea:06:a8:a7:
         8a:68:29:a8:32:4e:3e:fc:c7:09:40:d5:c7:70:f8:f8:0d:e1:
         f8:fe:95:17:20:82:75:bf:94:92:6f:99:81:38:09:76:62:63:
         bf:8a:ae:48:9c:96:ac:20:8c:ed:ee:7f:62:6b:d3:4f:cb:69:
         cf:0b:f2:b8:b6:79:30:d2:44:b4:ca:e7:a9:65:af:b5:67:7c:
         5e:53:e0:8a:13:89:a2:7d:6d:a3:7e:6b:c3:93:39:cb:99:77:
         67:33:86:0e:93:2d:b2:6d:e8:9c:63:37:09:20:35:c6:74:cc:
         07:41:2d:0a:a5:80:ac:0f:13:4e:83:0a:2e:4f:67:55:4b:c5:
         b5:34:3c:29:5f:52:00:d6:52:61:8a:82:c4:a7:82:0c:9b:bf:
         40:aa:6b:d6:97:eb:12:d3:97:db:b4:4a:d7:5a:d6:ff:5e:b8:
         1a:f4:a0:63:65:d5:86:8d:71:d8:c5:dd:fe:13:37:9f:c6:20:
         97:ad:a8:a3:47:13:3e:e5:ee:32:fd:96:35:f7:49:7c:3b:20:
         6f:72:b1:08:3b:12:c1:8c:1c:09:14:d3:6a:6a:92:d1:08:c0:
         17:f8:6f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 15:14:11 2025 by rpki-client