Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/3136382e3139372e3135332e302f32342d3234203d3e20323635343834.roa
File:                     3136382e3139372e3135332e302f32342d3234203d3e20323635343834.roa (raw, json)
Hash identifier:          mU9j1eH/ij0pYMxywalB5xSaBOdQ6VaAayECuuFpXko=
Subject key identifier:   A3:D5:BC:60:78:AA:CE:7A:C8:5C:64:6D:1E:DF:09:BD:C2:A0:BE:AB
Certificate issuer:       /CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Certificate serial:       48528FFA42D3A310D3DDADEA1058CCA74763A94A
Authority key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/3136382e3139372e3135332e302f32342d3234203d3e20323635343834.roa
Signing time:             Sat 21 Jun 2025 11:48:48 +0000
ROA not before:           Sat 21 Jun 2025 11:43:48 +0000
ROA not after:            Sat 20 Jun 2026 11:48:48 +0000
asID:                     265484
IP address blocks:        168.197.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
                          rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 15:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:52:8f:fa:42:d3:a3:10:d3:dd:ad:ea:10:58:cc:a7:47:63:a9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
        Validity
            Not Before: Jun 21 11:43:48 2025 GMT
            Not After : Jun 20 11:48:48 2026 GMT
        Subject: CN=A3D5BC6078AACE7AC85C646D1EDF09BDC2A0BEAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:08:35:5b:26:88:62:43:50:95:5a:68:fe:
                    74:e6:0d:b1:fc:c8:ff:9e:93:b7:ee:90:e2:00:a3:
                    0c:84:a4:ff:ca:8e:12:ce:d4:04:83:1d:07:cc:52:
                    f0:9c:7d:02:7c:61:0a:3d:7a:bb:20:b4:94:18:e0:
                    f6:6f:56:28:60:ef:34:95:f5:69:d5:05:b9:69:63:
                    3a:02:b6:00:30:24:91:9d:69:b4:14:c0:bf:18:d0:
                    22:0b:43:6d:d6:68:bd:6d:4e:94:1d:b8:d0:e7:9c:
                    3a:52:de:5c:4b:63:98:47:bb:1e:75:33:f6:14:47:
                    f9:76:1d:10:d0:81:2a:88:e0:56:c0:75:61:72:e7:
                    f3:a2:1a:cd:cb:cd:6c:ef:76:22:bd:70:f3:4f:2e:
                    d1:17:5d:34:e8:f4:8e:55:88:30:c6:10:12:8d:c1:
                    72:b9:42:4a:dc:58:ee:ae:5d:69:df:ca:fa:5c:8f:
                    99:78:a6:eb:ff:bc:db:de:5d:a7:4b:d9:53:60:3e:
                    ff:42:0e:0f:e0:da:1a:99:de:49:b4:3a:ae:cd:87:
                    c6:73:9e:7e:a9:5a:0f:61:18:27:40:87:2a:2c:a9:
                    ef:e7:0f:30:35:c0:b1:b0:e3:11:45:8b:56:f1:5a:
                    23:b9:1d:a0:87:fc:58:66:6f:01:b1:03:03:63:31:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D5:BC:60:78:AA:CE:7A:C8:5C:64:6D:1E:DF:09:BD:C2:A0:BE:AB
            X509v3 Authority Key Identifier:
                keyid:38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/3136382e3139372e3135332e302f32342d3234203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:2d:c0:a3:a6:a8:09:69:f8:32:1f:5a:15:eb:6d:6e:1f:11:
         0a:be:f9:72:66:24:94:a7:9b:e9:57:b1:4d:f0:64:8e:e9:e3:
         41:a1:39:a7:20:4b:9f:b6:84:9f:85:d3:d0:e8:b6:11:bb:4c:
         a3:ff:27:4a:82:0e:08:a2:1d:8c:6f:7c:34:db:3e:05:28:99:
         c1:ea:1d:69:a8:ea:bf:cd:e7:93:5b:44:f9:1f:ad:87:93:12:
         6c:53:12:6c:3a:d2:78:a6:0c:43:80:75:24:87:9a:37:1f:fc:
         76:c0:05:92:66:66:48:a9:2c:9a:89:11:80:8d:49:90:34:ca:
         0e:ba:7f:23:89:89:e0:e0:5e:2c:3d:b8:b3:0a:10:49:b6:1b:
         02:9b:b2:fd:df:2f:a1:89:a2:d1:4d:bb:4f:f4:2d:92:57:1b:
         2b:e9:c8:e6:86:20:94:5d:8c:2f:84:98:7e:d6:40:06:4e:fb:
         df:5c:5a:ed:83:41:f1:5b:6b:f0:b0:94:37:d8:94:44:e2:c1:
         75:b0:ed:0b:ba:17:f4:8f:04:85:de:28:e1:af:85:79:b1:e2:
         e2:7f:d9:be:e7:74:0c:45:72:f9:a4:93:fc:13:34:16:d9:17:
         44:53:55:b7:66:bf:7f:27:4a:38:99:a8:51:ca:51:55:a8:e2:
         b5:21:99:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:37:54 2025 by rpki-client