Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233322e302f32322d3332203d3e203631363936.roa
File:                     3133382e33362e3233322e302f32322d3332203d3e203631363936.roa (raw, json)
Hash identifier:          0PAGB5C8H6IcqwDv00MSTHzGTYgYIUYZIqOHywJKqvU=
Subject key identifier:   10:CE:C4:33:94:BE:8B:2A:2B:30:85:38:62:0C:DD:22:FE:DF:6A:C8
Certificate issuer:       /CN=0688357ED433C0A60770FB474BDB2C72796B78BD
Certificate serial:       2379DFAFAF5855A12DA116E746D7B5F00C20A3B5
Authority key identifier: 06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233322e302f32322d3332203d3e203631363936.roa
Signing time:             Wed 16 Apr 2025 10:22:08 +0000
ROA not before:           Wed 16 Apr 2025 10:17:08 +0000
ROA not after:            Wed 15 Apr 2026 10:22:08 +0000
asID:                     61696
IP address blocks:        138.36.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl
                          rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 17:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:79:df:af:af:58:55:a1:2d:a1:16:e7:46:d7:b5:f0:0c:20:a3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0688357ED433C0A60770FB474BDB2C72796B78BD
        Validity
            Not Before: Apr 16 10:17:08 2025 GMT
            Not After : Apr 15 10:22:08 2026 GMT
        Subject: CN=10CEC43394BE8B2A2B308538620CDD22FEDF6AC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:93:06:f2:f1:ef:cf:4c:64:6b:99:3c:ca:e7:
                    4d:5d:63:6f:df:8a:d4:b3:53:84:dc:03:27:87:ee:
                    3c:fb:e2:86:90:22:4b:b0:36:f5:ab:a4:6a:9a:a4:
                    8a:32:c8:c0:a2:da:ce:01:a1:c7:be:68:40:ca:87:
                    45:c8:f1:ab:3e:c7:f9:a0:85:8c:e8:e3:f2:00:14:
                    d2:20:e8:d6:4b:5b:bd:b0:2d:0d:ed:61:81:04:f6:
                    0a:b8:53:13:e1:87:97:b8:32:39:9b:ab:df:24:8c:
                    db:7e:01:ee:11:a4:0a:cb:6e:eb:43:f9:93:d4:d6:
                    07:c3:95:6c:a7:09:14:90:27:0f:d7:0f:b2:b4:9c:
                    38:3f:fa:e1:b0:78:a2:72:1b:cb:01:82:67:23:36:
                    53:a6:30:99:95:2a:ef:fb:4d:e8:4b:34:9a:2c:3e:
                    b7:bf:81:a8:06:2f:12:85:5a:23:45:55:85:e7:c1:
                    39:c8:39:85:57:d5:41:ad:3d:34:dd:51:5e:a7:62:
                    90:86:e5:55:8b:f5:cd:c4:64:85:b6:e9:2f:17:43:
                    29:06:5b:46:96:3c:72:82:d9:b9:31:1c:68:79:c5:
                    9f:37:e7:a9:cb:eb:ea:08:5b:bf:e4:88:90:1b:66:
                    62:d5:2a:29:83:e2:1d:2e:ef:f2:49:17:81:34:34:
                    1d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CE:C4:33:94:BE:8B:2A:2B:30:85:38:62:0C:DD:22:FE:DF:6A:C8
            X509v3 Authority Key Identifier:
                keyid:06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233322e302f32322d3332203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:9f:cf:71:17:fc:49:ce:1e:a5:dd:c0:32:55:19:6d:b4:27:
         25:8e:a6:30:4e:0f:0f:1b:4a:61:a6:b8:88:89:42:58:fa:f2:
         0a:a0:7b:a8:33:3e:9e:71:97:ae:a9:8b:1a:e7:16:8b:cd:9d:
         5e:69:4b:cb:35:20:ed:5d:46:1b:14:90:2a:4e:dc:27:8d:0e:
         99:f8:3f:42:cf:d5:86:ed:65:b2:13:a7:99:9a:1c:1d:d1:ed:
         eb:f9:e3:0d:05:b2:26:ad:21:f3:9c:1f:95:7b:d9:6d:7a:32:
         7a:77:4f:f3:d6:2a:3d:f5:78:1a:06:3f:5d:cc:f0:40:18:25:
         ca:23:99:c0:2e:a6:33:51:0b:c4:f9:07:d0:6a:33:9d:a5:0b:
         71:5b:97:8c:ac:bd:1f:56:c8:3b:53:4f:24:9d:b4:0b:57:08:
         72:5f:bb:ef:d3:04:93:9e:99:8b:cd:8a:5e:fc:af:3f:a7:2a:
         db:07:34:c1:3f:78:49:60:05:56:c4:90:66:93:25:d4:53:c8:
         59:44:aa:07:29:35:8b:75:07:88:ab:c2:cd:16:9f:14:46:54:
         5e:1f:7a:6c:3d:97:02:c1:f9:26:2d:93:e7:05:bc:7f:63:9f:
         49:bf:61:61:4b:34:35:30:be:72:51:37:16:67:0d:ce:00:0c:
         db:4e:28:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:25:37 2025 by rpki-client