Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/3133382e39342e3137312e302f32342d3234203d3e20323730383736.roa
File:                     3133382e39342e3137312e302f32342d3234203d3e20323730383736.roa (raw, json)
Hash identifier:          Qy6/IRCgdz00QWb/OF4UFtbjB05oGxSUDYg3mEcsRks=
Subject key identifier:   C8:32:A8:47:8E:F4:BE:15:5B:E0:59:F4:3B:6A:11:93:56:D7:BA:C6
Certificate issuer:       /CN=AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83
Certificate serial:       5BC37C54D4D4FF81E8423B2D2807278B28D69D3F
Authority key identifier: AE:59:A4:8B:AA:81:6C:14:CB:96:DA:B0:CA:10:6B:59:B3:B8:DC:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/3133382e39342e3137312e302f32342d3234203d3e20323730383736.roa
Signing time:             Thu 06 Mar 2025 06:43:03 +0000
ROA not before:           Thu 06 Mar 2025 06:38:03 +0000
ROA not after:            Thu 05 Mar 2026 06:43:03 +0000
asID:                     270876
IP address blocks:        138.94.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.crl
                          rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 05:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c3:7c:54:d4:d4:ff:81:e8:42:3b:2d:28:07:27:8b:28:d6:9d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83
        Validity
            Not Before: Mar  6 06:38:03 2025 GMT
            Not After : Mar  5 06:43:03 2026 GMT
        Subject: CN=C832A8478EF4BE155BE059F43B6A119356D7BAC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:35:89:b5:32:45:22:a9:2b:9b:97:3c:7b:50:
                    90:e4:e4:fb:84:05:1e:d2:4e:69:3a:57:07:40:64:
                    8b:a9:b8:c0:ef:c1:c2:17:5d:5d:fc:63:9e:1e:b9:
                    b9:75:e1:fd:61:a5:dd:1c:3a:0e:77:ff:f0:15:8f:
                    5d:cf:ac:5c:9d:e5:36:af:74:ef:21:c2:c9:16:6b:
                    0c:66:31:6c:02:ec:91:29:7c:05:28:db:44:e4:ed:
                    40:1f:04:52:7a:30:a6:db:0d:02:36:bb:82:b0:89:
                    50:7d:d2:75:a9:70:e9:88:5c:21:99:20:30:89:6c:
                    23:e6:88:4e:2f:5e:25:48:39:4b:a9:eb:c3:a0:01:
                    2f:74:04:d8:96:74:48:2e:8d:78:8e:b9:b4:f7:07:
                    1c:df:49:54:60:4b:55:ea:f7:a4:56:34:54:dd:1e:
                    c5:c0:3c:2f:89:f9:cb:8f:43:57:a5:d9:e5:07:f3:
                    3a:84:e5:4a:61:a7:85:64:b9:35:3d:cd:14:b2:ad:
                    12:58:72:a5:f7:f6:30:a0:90:ae:58:c1:d5:b1:29:
                    0d:83:c6:f0:83:ba:10:52:e5:d6:6e:70:93:20:ae:
                    64:30:39:24:71:69:fc:09:47:be:df:89:c1:42:62:
                    af:d5:17:0e:4e:45:9b:2f:a3:45:71:5e:de:e5:9e:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:32:A8:47:8E:F4:BE:15:5B:E0:59:F4:3B:6A:11:93:56:D7:BA:C6
            X509v3 Authority Key Identifier:
                keyid:AE:59:A4:8B:AA:81:6C:14:CB:96:DA:B0:CA:10:6B:59:B3:B8:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/3133382e39342e3137312e302f32342d3234203d3e20323730383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:b6:d9:a0:14:f6:c4:f0:49:1f:aa:43:a3:3d:ea:f6:3c:7e:
         5c:39:ab:ca:79:22:93:1b:67:20:d2:aa:09:7c:1d:a4:63:48:
         b6:59:ac:5a:77:d1:5d:36:f2:5b:3a:c5:72:f3:3c:ed:a9:15:
         e4:4f:ce:fb:66:b7:b7:32:5a:7a:2e:09:9c:cd:9d:44:2a:0e:
         aa:73:a8:11:b1:85:d7:0f:bf:ae:33:49:d0:f3:5f:a0:e8:36:
         a4:e3:c1:38:84:de:aa:89:e3:50:ed:53:fc:36:5a:27:95:e2:
         08:b8:ec:f2:47:4c:75:84:d2:62:af:79:35:a8:41:2f:f9:7e:
         bb:dd:9c:0c:90:d0:6b:99:a6:e6:cf:8b:01:90:7d:35:a7:2a:
         0c:9f:74:a8:bc:c3:68:19:71:0b:a4:f1:54:9e:73:89:7a:8c:
         d4:48:96:57:d7:2f:57:ad:ff:6a:52:4c:45:c0:d8:c9:65:9e:
         cc:75:cc:f3:8a:41:5b:b7:09:8a:f6:54:48:0e:ef:1b:03:9b:
         55:df:72:d2:ce:ed:0c:ce:f3:89:ee:54:4c:48:24:86:50:75:
         9f:b5:c6:a4:38:3a:2f:e1:8e:01:3a:e6:c7:f3:76:0f:fb:a8:
         7e:4c:52:55:49:d1:c5:dd:4a:7a:56:66:f3:0d:01:2c:5d:85:
         06:23:a0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:30:22 2025 by rpki-client