Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/3133382e39342e38342e302f32322d3234203d3e20323633353734.roa
File:                     3133382e39342e38342e302f32322d3234203d3e20323633353734.roa (raw, json)
Hash identifier:          58S1o+dZWigO+d/fYJmeJ3Utn8cVXi9VQDT9ySjpQGk=
Subject key identifier:   22:C3:87:92:07:03:02:80:8C:80:0F:F7:B8:4A:2C:72:DE:20:92:AA
Certificate issuer:       /CN=8D0F799DDE369B44B3A0931DBECC6483E27050C6
Certificate serial:       28D0423DD2F832CDCDE0E53B02A5155BCDD5020E
Authority key identifier: 8D:0F:79:9D:DE:36:9B:44:B3:A0:93:1D:BE:CC:64:83:E2:70:50:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/3133382e39342e38342e302f32322d3234203d3e20323633353734.roa
Signing time:             Thu 06 Mar 2025 03:48:34 +0000
ROA not before:           Thu 06 Mar 2025 03:43:34 +0000
ROA not after:            Thu 05 Mar 2026 03:48:34 +0000
asID:                     263574
IP address blocks:        138.94.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.crl
                          rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d0:42:3d:d2:f8:32:cd:cd:e0:e5:3b:02:a5:15:5b:cd:d5:02:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0F799DDE369B44B3A0931DBECC6483E27050C6
        Validity
            Not Before: Mar  6 03:43:34 2025 GMT
            Not After : Mar  5 03:48:34 2026 GMT
        Subject: CN=22C38792070302808C800FF7B84A2C72DE2092AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0c:39:14:e2:75:01:2c:91:80:a4:eb:8d:01:
                    1b:91:77:ba:e2:fb:bb:c6:9a:ab:c7:25:80:05:6e:
                    41:af:b7:dc:c0:bf:f2:bd:88:6b:88:2c:a9:9a:aa:
                    93:92:0f:df:ed:31:cd:10:7f:2e:56:18:7c:e7:4d:
                    6d:46:27:8e:e7:4e:d2:f1:93:ab:5d:67:2f:df:06:
                    44:5d:9b:2a:99:16:4a:55:bb:c8:c6:df:99:c6:8d:
                    08:ac:d7:b2:c7:53:81:58:c4:58:ef:2e:e2:04:0a:
                    95:fe:bd:13:e1:d1:82:f0:85:bf:8d:6f:bb:05:47:
                    69:aa:c1:b9:a3:06:6e:ed:4f:e4:b4:74:dc:1f:ca:
                    91:50:00:88:16:5f:12:8a:58:2d:51:6d:06:24:7b:
                    57:d4:85:07:54:2d:c4:c2:1f:fe:33:ec:29:2b:c1:
                    36:9d:85:81:eb:40:ea:4b:7c:46:da:c5:76:5f:1d:
                    1c:02:81:44:13:15:a4:20:20:a6:1e:9f:0e:9a:6c:
                    a7:9a:9b:8b:1f:17:f8:0b:ca:c4:95:6c:fd:52:20:
                    8a:41:7b:92:36:20:af:30:5a:d6:36:96:9f:56:f7:
                    63:f0:9d:8d:67:cc:60:9d:7e:dd:b0:19:cd:32:fb:
                    4e:e1:31:1d:96:66:63:9e:88:0d:2c:7a:04:30:18:
                    c9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C3:87:92:07:03:02:80:8C:80:0F:F7:B8:4A:2C:72:DE:20:92:AA
            X509v3 Authority Key Identifier:
                keyid:8D:0F:79:9D:DE:36:9B:44:B3:A0:93:1D:BE:CC:64:83:E2:70:50:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/3133382e39342e38342e302f32322d3234203d3e20323633353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ef:54:af:82:3c:11:c3:8a:80:61:5f:16:f8:86:eb:8f:7d:b7:
         27:00:ae:c9:33:ec:7b:33:db:04:cb:60:87:07:ee:bc:28:27:
         51:c7:ea:c4:45:1b:92:a0:3f:ff:94:85:08:76:e1:06:c4:df:
         fd:bf:52:11:bb:ae:35:91:2b:98:ab:be:5d:c9:53:d8:9b:a2:
         ed:40:c2:c0:75:60:85:82:da:42:bf:1f:4a:cd:18:dd:27:e5:
         75:d3:17:09:78:52:8a:d6:5d:64:45:46:93:ec:b1:a3:0f:2d:
         09:eb:92:82:dd:6e:98:98:1f:dc:83:5d:6c:ea:fa:33:b6:f8:
         38:b9:e6:1f:57:3a:61:cd:a2:2d:7c:00:cd:1f:e0:3f:15:c2:
         57:8a:2f:2f:e6:e8:8c:e1:a6:50:63:70:e8:eb:d2:e5:60:62:
         57:93:72:48:aa:ad:bc:66:5a:82:56:17:cf:00:4b:48:5d:b7:
         c8:0d:2d:4f:71:77:a2:9f:ed:48:7c:34:f0:0d:72:a9:dd:be:
         11:52:9e:91:d0:f9:5c:c1:d2:4b:a8:43:b7:5a:9f:3a:53:cd:
         96:fc:14:b8:ec:fd:14:be:cf:8d:e4:8f:a7:0f:9b:31:24:25:
         3e:11:3d:26:cb:ba:c5:5e:6f:4e:e5:5c:26:b9:c0:c2:a9:f4:
         30:00:93:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:16:49 2025 by rpki-client