Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6dAnpnsyHHQraAyCK9UgE4t7LZo8yKQxxvpiM2sJMrD/0/3133382e3231392e3130382e302f32322d3232203d3e20323633393434.roa
File:                     3133382e3231392e3130382e302f32322d3232203d3e20323633393434.roa (raw, json)
Hash identifier:          4NC7IfNXFtYTlbQftqPC6OQE+OdBwP4RyNxFAyLLo5I=
Subject key identifier:   ED:EF:1C:F7:49:E2:69:45:82:E7:29:E5:4C:0D:D6:1B:05:CC:DD:68
Certificate issuer:       /CN=E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287
Certificate serial:       4F54C39F6148310A8C67D8DD96EEA23843046C4A
Authority key identifier: E1:B1:6B:75:87:8B:CD:93:19:92:CD:9E:3A:9D:7E:F5:D5:E6:B2:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6dAnpnsyHHQraAyCK9UgE4t7LZo8yKQxxvpiM2sJMrD/0/3133382e3231392e3130382e302f32322d3232203d3e20323633393434.roa
Signing time:             Fri 22 Aug 2025 18:15:41 +0000
ROA not before:           Fri 22 Aug 2025 18:10:41 +0000
ROA not after:            Fri 21 Aug 2026 18:15:41 +0000
asID:                     263944
IP address blocks:        138.219.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6dAnpnsyHHQraAyCK9UgE4t7LZo8yKQxxvpiM2sJMrD/0/E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287.crl
                          rsync://rpki-repo.registro.br/repo/E6dAnpnsyHHQraAyCK9UgE4t7LZo8yKQxxvpiM2sJMrD/0/E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:54:c3:9f:61:48:31:0a:8c:67:d8:dd:96:ee:a2:38:43:04:6c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287
        Validity
            Not Before: Aug 22 18:10:41 2025 GMT
            Not After : Aug 21 18:15:41 2026 GMT
        Subject: CN=EDEF1CF749E2694582E729E54C0DD61B05CCDD68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:7b:29:06:6e:ed:92:20:a0:7f:61:74:72:
                    36:9a:f2:c7:43:bb:ba:93:91:94:5a:43:55:80:f0:
                    fe:61:d0:2f:05:34:ab:38:3b:63:a2:1a:ee:e0:45:
                    e7:aa:d9:4d:e8:d5:c1:84:ec:0f:79:d9:38:f1:9c:
                    d8:7c:6d:03:ad:44:df:65:92:e6:12:ec:94:90:f9:
                    8b:3e:18:01:26:60:56:dc:57:53:74:50:9a:bb:e3:
                    5a:41:0e:4a:5c:03:62:14:83:30:36:64:e7:89:53:
                    4a:30:9b:90:61:8a:c9:1b:5b:52:85:98:95:9d:04:
                    1d:fe:92:99:3c:68:4b:ba:c7:d7:aa:27:ef:45:70:
                    80:b6:c9:bd:53:85:5b:9b:08:3f:7f:40:53:5a:2c:
                    38:1c:a1:e4:b0:46:1d:9e:32:f1:eb:5f:b2:54:72:
                    d4:9f:eb:3d:66:1d:cf:53:54:52:4f:2b:be:d9:af:
                    f7:94:7c:4a:e9:a5:a0:83:78:b0:51:f5:7a:87:48:
                    9e:ce:8a:0a:36:26:56:b7:5e:69:ab:7e:55:84:f5:
                    03:99:a3:32:ae:73:a0:3f:ed:e1:69:53:92:9f:eb:
                    86:97:d0:c4:03:d5:6f:14:86:6e:53:f1:16:37:6c:
                    ad:42:94:ca:03:e5:a0:4f:c9:2e:9d:f1:31:0a:3f:
                    63:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EF:1C:F7:49:E2:69:45:82:E7:29:E5:4C:0D:D6:1B:05:CC:DD:68
            X509v3 Authority Key Identifier:
                keyid:E1:B1:6B:75:87:8B:CD:93:19:92:CD:9E:3A:9D:7E:F5:D5:E6:B2:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6dAnpnsyHHQraAyCK9UgE4t7LZo8yKQxxvpiM2sJMrD/0/E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6dAnpnsyHHQraAyCK9UgE4t7LZo8yKQxxvpiM2sJMrD/0/3133382e3231392e3130382e302f32322d3232203d3e20323633393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:10:d3:f9:45:1b:a5:f5:78:28:33:3f:a5:17:37:f6:f0:b7:
         ee:d8:1b:f3:ea:17:2d:f1:0f:4d:df:e9:a7:77:70:bf:02:7e:
         46:c8:19:d8:6b:49:21:e2:e0:94:0a:11:42:61:29:f0:2e:ae:
         8c:34:65:a8:54:bf:b1:5e:5c:f4:c3:44:ed:da:03:d7:3a:19:
         24:d1:9d:9b:27:b8:86:dc:05:bc:39:fe:c9:dc:a2:53:f1:8c:
         9e:7f:5b:42:0d:74:c2:9b:40:e4:20:46:4a:6a:de:4c:15:15:
         32:03:42:76:2c:2b:cc:b2:22:de:56:d3:6f:2f:80:f3:d2:62:
         11:6d:a3:cb:ed:4d:1e:52:58:c2:25:08:0e:34:c5:75:ab:24:
         34:39:95:f8:d3:c6:5b:f2:33:39:bd:78:e4:cf:c2:62:e4:76:
         7d:51:93:61:08:94:11:ee:5a:19:82:39:01:61:9c:5f:19:b7:
         70:b8:d2:3b:8a:bc:20:b7:46:0f:d8:32:8d:5d:3d:33:53:0b:
         dd:2e:37:52:8f:16:38:b1:af:51:b4:cd:da:80:5c:cb:0a:09:
         86:7e:d2:e3:08:fa:2e:64:9c:ac:4c:73:a9:13:9a:8b:b4:b5:
         05:e9:7f:2f:bb:93:11:ab:4a:30:43:41:8b:e1:f1:94:08:a5:
         25:cb:5b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:43:16 2025 by rpki-client