Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32332d3233203d3e20323633393430.roa
File:                     3133382e3138352e3235322e302f32332d3233203d3e20323633393430.roa (raw, json)
Hash identifier:          wFnr9F/sIBNM71fz9wM22TSDzOBZpJzNqns8Sf2zB3I=
Subject key identifier:   09:55:02:28:AD:A9:FC:8F:71:2E:96:F8:28:B7:53:C4:36:97:30:C3
Certificate issuer:       /CN=49035094B34CBA1B308381D57F68D0820CEA3A4F
Certificate serial:       190DB26DFCA1EB85DCBC1BD96B4F9B1D6273330B
Authority key identifier: 49:03:50:94:B3:4C:BA:1B:30:83:81:D5:7F:68:D0:82:0C:EA:3A:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49035094B34CBA1B308381D57F68D0820CEA3A4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32332d3233203d3e20323633393430.roa
Signing time:             Mon 05 May 2025 20:48:51 +0000
ROA not before:           Mon 05 May 2025 20:43:51 +0000
ROA not after:            Mon 04 May 2026 20:48:51 +0000
asID:                     263940
IP address blocks:        138.185.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/49035094B34CBA1B308381D57F68D0820CEA3A4F.crl
                          rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/49035094B34CBA1B308381D57F68D0820CEA3A4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49035094B34CBA1B308381D57F68D0820CEA3A4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 07:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0d:b2:6d:fc:a1:eb:85:dc:bc:1b:d9:6b:4f:9b:1d:62:73:33:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49035094B34CBA1B308381D57F68D0820CEA3A4F
        Validity
            Not Before: May  5 20:43:51 2025 GMT
            Not After : May  4 20:48:51 2026 GMT
        Subject: CN=09550228ADA9FC8F712E96F828B753C4369730C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0d:db:5f:1a:eb:a0:bc:30:b6:69:cf:12:82:
                    34:de:3c:f0:a8:a7:a0:02:3c:5b:2e:7f:46:18:8c:
                    e5:bf:be:c8:df:09:dc:1a:3b:ec:9c:ce:a8:e3:ac:
                    a8:9c:2a:79:f1:96:4a:2c:58:e6:c0:4b:93:26:51:
                    31:3f:6d:b4:39:a0:40:01:cf:f2:6b:9c:c3:e2:85:
                    67:09:89:f4:ba:8b:4f:4a:02:44:c8:59:ba:b5:e5:
                    be:ce:c9:28:b7:fc:f2:61:3d:a7:4c:10:27:0f:9c:
                    12:49:e4:ec:08:35:24:64:e0:2e:05:35:42:ca:e1:
                    ff:2c:01:84:6d:b8:28:11:ae:ea:07:b1:40:65:a7:
                    b9:75:cd:d6:16:34:79:49:da:d3:af:30:1b:54:2a:
                    e1:4f:43:87:7f:83:a6:f6:5b:bb:da:fe:d1:97:a1:
                    c8:49:48:9e:bc:a1:b7:86:c4:1c:57:f1:4c:1f:97:
                    86:9a:38:b3:8b:4c:92:e2:e2:8d:12:51:81:1d:78:
                    d6:1a:31:ec:bb:1d:60:0f:ed:7f:06:6b:b9:fa:42:
                    43:a6:5c:92:34:9f:06:e4:85:dc:cf:54:eb:45:25:
                    83:be:0c:a8:f5:a1:c5:25:94:3f:0e:0e:a3:2b:3f:
                    c8:b1:9e:f2:a7:d5:8e:f1:c2:3e:94:fe:05:44:21:
                    fc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:55:02:28:AD:A9:FC:8F:71:2E:96:F8:28:B7:53:C4:36:97:30:C3
            X509v3 Authority Key Identifier:
                keyid:49:03:50:94:B3:4C:BA:1B:30:83:81:D5:7F:68:D0:82:0C:EA:3A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/49035094B34CBA1B308381D57F68D0820CEA3A4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49035094B34CBA1B308381D57F68D0820CEA3A4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32332d3233203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:f7:f4:bc:3a:c6:6a:d4:8a:53:cd:03:19:20:09:bb:51:7c:
         11:6d:4b:19:0e:f9:9c:3d:79:12:bb:c2:44:41:ce:75:de:c8:
         8e:35:c8:0a:18:e8:6d:cd:ec:8c:25:2d:d1:99:b0:63:b6:47:
         a9:86:3b:4a:c7:29:4d:2d:80:0b:a5:90:5c:b6:cc:f6:a3:f0:
         77:17:d3:15:e2:a3:fd:04:ac:62:af:a5:94:49:11:86:19:65:
         ed:03:15:bf:31:75:01:72:8f:be:6d:18:4b:28:62:2d:b6:0c:
         0b:ae:4c:78:5c:35:75:40:59:7e:70:d1:2f:23:48:97:ff:1a:
         d8:11:63:85:30:95:7d:0a:0a:d4:a0:81:5e:e2:ca:89:b0:63:
         99:1d:52:72:37:f2:17:34:e6:c2:c9:b2:ed:6c:c9:56:6b:18:
         96:60:c8:6c:85:94:04:f1:de:8a:67:32:7b:5e:fe:18:79:e6:
         f6:eb:49:47:f4:91:ec:5f:f8:20:e0:65:42:71:84:f8:0c:d5:
         af:2e:ee:30:73:fc:11:63:fd:2a:84:52:c7:f7:ba:65:83:51:
         2e:0e:c6:4d:af:69:af:ca:2b:c0:ff:0e:7b:ef:d7:6a:e2:c3:
         71:5e:51:1f:df:af:a1:5b:5c:6d:0c:a9:d4:54:72:39:9c:ca:
         da:cc:7a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 17:53:48 2025 by rpki-client