Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/3133382e3132312e302e302f32342d3234203d3e20323634323834.roa
File:                     3133382e3132312e302e302f32342d3234203d3e20323634323834.roa (raw, json)
Hash identifier:          GRUpqGALPaVUJU7Js+ViRoE1Sb1j5PEEMq7Tn6pva7k=
Subject key identifier:   FA:C8:89:8E:D6:52:94:E2:0D:B8:FC:1D:6C:2A:91:A6:39:68:F9:EF
Certificate issuer:       /CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
Certificate serial:       7E5585E99B843A7D5A78A97D5BAF3AA14A05121C
Authority key identifier: 80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/3133382e3132312e302e302f32342d3234203d3e20323634323834.roa
Signing time:             Fri 18 Apr 2025 15:25:45 +0000
ROA not before:           Fri 18 Apr 2025 15:20:45 +0000
ROA not after:            Fri 17 Apr 2026 15:25:45 +0000
asID:                     264284
IP address blocks:        138.121.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.crl
                          rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 01:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:55:85:e9:9b:84:3a:7d:5a:78:a9:7d:5b:af:3a:a1:4a:05:12:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
        Validity
            Not Before: Apr 18 15:20:45 2025 GMT
            Not After : Apr 17 15:25:45 2026 GMT
        Subject: CN=FAC8898ED65294E20DB8FC1D6C2A91A63968F9EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:93:ec:68:13:6d:61:ea:de:2a:a5:02:20:f8:
                    33:b1:80:4c:12:e5:9b:c3:5e:61:30:57:ab:bd:49:
                    f8:fd:62:a0:ac:c9:b1:87:34:97:68:c6:9d:32:8a:
                    dc:5b:49:ce:4a:1b:9d:93:e9:e7:ba:3e:1e:d2:f8:
                    7a:b0:f4:2b:e3:7b:b7:a9:37:c2:e3:db:58:a9:43:
                    5d:3e:dc:30:48:f0:57:d9:f3:35:75:fa:6c:57:01:
                    eb:b8:e0:b7:22:82:3a:5e:af:f8:5a:3c:8d:d3:94:
                    d8:c1:62:c9:28:0b:8f:d3:ba:34:1e:b9:b0:88:6c:
                    cb:e3:d5:f2:97:09:d5:d6:62:58:6a:f4:55:10:93:
                    21:14:1b:40:bc:0b:86:34:4c:63:56:28:c2:4a:16:
                    9c:cd:e2:5d:bb:28:b2:e5:47:ce:c4:d4:db:6d:5b:
                    49:5c:7b:80:41:e8:d4:19:54:3c:c9:13:c3:06:6e:
                    67:c8:43:d7:fb:a1:c0:d4:c3:a8:5e:84:88:2d:7a:
                    92:8a:24:61:95:5b:b0:5a:12:e1:2e:37:0d:12:c1:
                    7b:77:ed:41:47:6a:16:b3:69:85:c9:98:32:1f:f7:
                    32:1f:c1:0c:e8:9c:b7:dc:7f:51:80:1e:b5:78:4d:
                    f8:19:72:d1:87:18:aa:ad:b1:1e:19:6a:10:b0:6b:
                    e5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C8:89:8E:D6:52:94:E2:0D:B8:FC:1D:6C:2A:91:A6:39:68:F9:EF
            X509v3 Authority Key Identifier:
                keyid:80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/3133382e3132312e302e302f32342d3234203d3e20323634323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:91:e2:10:69:2f:4c:54:88:e9:26:22:d6:39:e5:89:7f:2b:
         3b:99:5a:f6:d7:5c:bf:9b:d9:b1:a3:c7:3a:fe:f5:58:21:6d:
         c5:31:ba:d2:a1:1a:50:87:0f:97:e9:43:c6:60:12:9c:15:4c:
         6a:fe:a8:9d:bc:1c:aa:f1:80:d4:79:be:7f:6c:42:be:f5:b4:
         61:89:e8:85:b9:ea:3d:ca:52:64:1a:38:df:a5:80:cb:d6:ea:
         76:55:ce:7b:b7:72:56:62:30:3e:92:93:b2:ca:05:39:f0:ed:
         48:17:17:26:91:cc:41:8c:29:94:43:1c:dc:f6:12:2f:63:52:
         25:81:d7:98:64:f2:2c:7d:47:02:00:c8:42:ac:1a:d7:29:b7:
         55:39:e4:05:f2:33:b7:ce:b8:a6:dc:e3:46:3e:c5:c3:17:6f:
         53:4f:ba:1f:e5:36:d6:86:a7:40:83:a9:5a:90:b3:72:f3:d5:
         85:80:fb:77:17:51:43:79:43:4a:8d:46:43:97:ea:cf:da:75:
         46:58:c0:0c:1b:92:d3:45:54:81:cb:2c:8c:e1:22:cd:be:56:
         53:ff:df:44:e4:c7:ff:f1:a9:81:66:55:e3:24:52:bd:14:a8:
         ad:d1:85:ba:85:e4:61:6d:84:ad:88:8f:e8:34:11:6e:9a:07:
         09:ab:be:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:03:27 2025 by rpki-client