Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133382e3131372e33342e302f32342d3234203d3e20323634343739.roa
File:                     3133382e3131372e33342e302f32342d3234203d3e20323634343739.roa (raw, json)
Hash identifier:          /0JxgbRRZ2sJ7ktlZmhNmUErzhfavvOjz+8qwEFmryQ=
Subject key identifier:   42:65:9F:D0:40:82:DB:AC:3F:F1:55:C0:81:E5:7F:65:D9:20:DB:F9
Certificate issuer:       /CN=74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5
Certificate serial:       70F9596DB8B841C567CC91EC89C5F61E4697958A
Authority key identifier: 74:FA:74:03:B3:61:BD:3A:6D:CE:36:95:CF:0E:A2:1A:FC:15:A0:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133382e3131372e33342e302f32342d3234203d3e20323634343739.roa
Signing time:             Fri 20 Jun 2025 16:19:07 +0000
ROA not before:           Fri 20 Jun 2025 16:14:07 +0000
ROA not after:            Fri 19 Jun 2026 16:19:07 +0000
asID:                     264479
IP address blocks:        138.117.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 03:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f9:59:6d:b8:b8:41:c5:67:cc:91:ec:89:c5:f6:1e:46:97:95:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5
        Validity
            Not Before: Jun 20 16:14:07 2025 GMT
            Not After : Jun 19 16:19:07 2026 GMT
        Subject: CN=42659FD04082DBAC3FF155C081E57F65D920DBF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f9:5a:60:28:39:a4:14:7e:25:41:c2:8f:ee:
                    da:33:6c:41:e9:47:28:31:da:93:89:74:dc:04:62:
                    22:1d:e4:bf:a2:71:16:39:e8:58:3b:86:6f:7e:1b:
                    75:dc:c6:39:b1:80:68:54:60:44:30:36:38:e1:2f:
                    b2:6f:37:41:c3:3e:fc:83:a7:cf:b4:40:36:4c:05:
                    6f:eb:ed:b2:ed:40:f8:4e:ef:2f:9d:22:ce:18:89:
                    36:a6:6f:3c:e8:df:5f:96:49:98:1c:af:20:06:75:
                    5e:ff:60:65:2b:18:74:ca:f2:6f:1e:80:6c:ff:23:
                    a5:52:73:c1:5b:4b:c8:c7:34:9b:f1:4e:f5:8b:c9:
                    c2:c1:a4:5c:08:28:e4:41:bb:bc:ab:8c:9e:59:75:
                    c2:5e:36:8a:a0:30:27:ff:14:7e:4f:e4:c1:60:21:
                    72:50:a3:08:f8:a1:6c:f4:c3:57:10:b3:22:ee:a3:
                    ec:2e:de:72:2e:82:52:56:72:63:d7:6d:34:0f:79:
                    c0:a6:c2:7a:01:e2:05:85:89:9e:c8:06:df:93:29:
                    b6:48:c5:e9:a7:03:09:31:50:c4:25:ca:cf:09:83:
                    da:2e:bb:40:e6:84:c9:e8:7a:40:d7:d7:ca:e9:f1:
                    9d:ce:7a:fb:15:e2:02:21:ee:fb:9b:d3:3e:d5:1b:
                    d2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:65:9F:D0:40:82:DB:AC:3F:F1:55:C0:81:E5:7F:65:D9:20:DB:F9
            X509v3 Authority Key Identifier:
                keyid:74:FA:74:03:B3:61:BD:3A:6D:CE:36:95:CF:0E:A2:1A:FC:15:A0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133382e3131372e33342e302f32342d3234203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:33:eb:47:9e:09:23:d3:56:66:91:77:52:b1:ec:23:af:0c:
         44:28:5b:55:5a:c0:8e:3c:33:e3:73:fb:8c:47:10:24:e6:35:
         3a:5b:3f:0a:b5:38:56:f7:86:c5:1a:33:bf:84:c5:88:f7:1d:
         8f:53:5b:18:3a:fc:b3:20:2e:ec:f9:36:58:8f:aa:9e:9c:b7:
         47:80:bc:8c:7d:1c:9e:2e:9f:29:6f:77:5c:73:bb:8d:5f:6d:
         ea:c9:52:90:35:d4:64:f8:83:55:7d:2d:e4:54:5c:c8:8b:fa:
         f5:3a:a2:bf:b9:cd:2c:1e:bf:1a:4b:18:bb:df:2d:9a:4d:4f:
         29:1e:72:7e:0c:a3:17:e0:f0:34:e9:7c:56:78:23:94:15:cd:
         8e:a6:8a:03:c6:73:d7:c5:70:d9:78:e3:8f:33:d9:ca:ab:84:
         2a:79:8c:20:8e:da:2d:b2:67:dc:ba:f0:7a:37:c1:fb:78:80:
         9d:de:f8:69:5e:f1:10:65:37:4f:c6:20:3f:48:22:2f:cb:1c:
         bd:d9:98:e5:dd:ee:e3:42:d5:ab:da:a0:0f:90:2f:da:85:83:
         55:60:9e:19:2b:00:00:f1:a3:6a:63:8b:1a:de:45:76:85:c7:
         d9:c2:cf:d9:84:68:67:25:bd:0b:51:dd:68:0e:9d:3e:85:86:
         60:32:20:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:12:48 2025 by rpki-client