Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131342e302f32342d3234203d3e20323633383636.roa
File:                     3133382e3138362e3131342e302f32342d3234203d3e20323633383636.roa (raw, json)
Hash identifier:          T+OFuFfg/s+1xAbED3JLOg06ZuRqR99bPB9kWvxtK8o=
Subject key identifier:   EC:B9:BC:6D:20:26:E1:87:2A:01:60:39:9E:C1:AC:71:5A:55:60:1F
Certificate issuer:       /CN=0D3D646783321347829AF3DBE2CF61D9810C07DF
Certificate serial:       245059E7EA56C8BA808F9C50E3F16DA20BF4BD24
Authority key identifier: 0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131342e302f32342d3234203d3e20323633383636.roa
Signing time:             Wed 18 Jun 2025 20:22:35 +0000
ROA not before:           Wed 18 Jun 2025 20:17:35 +0000
ROA not after:            Wed 17 Jun 2026 20:22:35 +0000
asID:                     263866
IP address blocks:        138.186.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.crl
                          rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 09:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:50:59:e7:ea:56:c8:ba:80:8f:9c:50:e3:f1:6d:a2:0b:f4:bd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D3D646783321347829AF3DBE2CF61D9810C07DF
        Validity
            Not Before: Jun 18 20:17:35 2025 GMT
            Not After : Jun 17 20:22:35 2026 GMT
        Subject: CN=ECB9BC6D2026E1872A0160399EC1AC715A55601F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:2b:a1:9b:4f:fa:a2:1d:51:b8:85:13:9f:
                    ef:ed:58:72:b1:ab:38:cf:5e:3b:c2:86:1b:40:32:
                    d6:91:9c:1b:61:0b:1a:f7:26:8b:48:97:d0:34:90:
                    9a:ea:74:ec:78:64:b8:2b:68:4d:de:9e:99:e2:db:
                    21:8f:99:9a:bc:26:cc:54:fd:20:07:8f:6c:d6:9c:
                    9e:00:54:f7:9a:5b:e6:11:40:39:67:b9:85:90:6b:
                    9f:e7:26:e7:04:d0:68:94:8b:67:84:af:49:03:5d:
                    96:fc:ff:4d:ac:b5:87:08:ed:70:c3:9a:d6:49:45:
                    e4:80:aa:7a:b3:e1:dd:66:31:90:c6:a7:e6:8c:64:
                    7f:9b:5d:b6:bc:7f:61:33:03:b5:b9:4a:2f:06:03:
                    31:13:44:66:a9:3e:9d:39:5a:0d:f6:94:2b:7b:3e:
                    4e:f5:00:c6:23:3f:3b:51:46:9c:2d:43:00:50:e9:
                    f7:f5:1f:3e:3d:6e:df:1e:72:e0:a9:d4:1f:35:f3:
                    51:7b:c1:fb:81:4d:88:b9:6e:1b:f1:8c:e9:aa:7c:
                    5a:33:1d:f0:09:60:ca:87:e9:e8:45:b6:c7:f0:f5:
                    b5:c4:37:fa:63:e5:30:0d:1b:a0:74:c8:4f:3c:54:
                    76:86:6a:49:19:28:b0:bd:aa:85:5c:b3:8e:46:32:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B9:BC:6D:20:26:E1:87:2A:01:60:39:9E:C1:AC:71:5A:55:60:1F
            X509v3 Authority Key Identifier:
                keyid:0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131342e302f32342d3234203d3e20323633383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:fa:f4:a3:da:f6:72:09:5a:de:03:d5:c8:7e:5b:b4:0c:af:
         6c:25:a5:39:f5:3f:5f:1f:31:c8:49:c3:c9:c0:74:44:23:16:
         fa:57:e1:43:58:0f:ed:f6:39:1d:f6:9a:d4:ff:5c:7a:3e:5b:
         a5:38:62:a5:9b:52:68:58:5a:08:ce:64:21:4e:00:96:94:63:
         51:1e:d4:a6:49:d0:23:53:a3:c9:86:55:c8:ed:66:68:18:95:
         0b:26:00:b4:c1:db:9b:0f:92:60:03:32:f1:eb:0d:7a:9c:40:
         89:9e:e6:73:e9:b6:06:46:b0:dd:ef:aa:12:28:d4:60:93:3c:
         c8:71:fc:c3:c1:3b:f0:27:c7:a2:29:7c:f0:f0:95:86:a5:5d:
         af:9d:75:4f:0d:d9:db:a7:54:47:2e:65:d4:57:3d:e9:be:05:
         b5:30:74:ee:5e:4d:5d:29:90:7a:bf:f9:8d:a1:45:ed:3a:4f:
         1d:7e:4e:38:e6:fd:33:c9:2c:18:51:df:20:c3:16:2d:3f:be:
         f4:12:66:10:67:89:cc:b6:76:a5:b3:23:ad:ab:57:b4:18:07:
         c5:dd:a5:7b:4c:80:8a:8f:bf:e0:28:ca:fd:ff:44:84:fa:d5:
         6a:d8:98:f7:76:f4:36:62:26:29:fa:97:fa:c0:b8:ac:88:75:
         80:07:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 18:02:21 2025 by rpki-client