Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232332e302f32342d3234203d3e203533313533.roa
File:                     3133382e3230342e3232332e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          jTYc3I2BW4aZhyp9zAZ9FLAlexIqZ5QFXrjtcjgIoQM=
Subject key identifier:   73:9B:BA:8D:BF:72:AB:8A:D4:78:42:D0:7E:A5:6C:39:51:51:7F:69
Certificate issuer:       /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial:       BAA220D9B599D70621E506716CA28FBF7C8150
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232332e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 04 Dec 2024 15:40:47 +0000
ROA not before:           Wed 04 Dec 2024 15:35:47 +0000
ROA not after:            Wed 03 Dec 2025 15:40:47 +0000
asID:                     53153
IP address blocks:        138.204.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 11:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ba:a2:20:d9:b5:99:d7:06:21:e5:06:71:6c:a2:8f:bf:7c:81:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
        Validity
            Not Before: Dec  4 15:35:47 2024 GMT
            Not After : Dec  3 15:40:47 2025 GMT
        Subject: CN=739BBA8DBF72AB8AD47842D07EA56C3951517F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:70:c9:92:63:2c:71:44:fc:a8:ca:35:12:b7:
                    29:26:bc:9b:12:bf:7a:c2:fc:e1:8c:17:e1:f6:0d:
                    8c:61:1e:58:1d:4f:86:76:1c:95:74:e2:6d:e7:76:
                    ff:74:b9:b7:38:79:71:19:30:73:2f:62:c3:26:99:
                    cc:eb:87:76:7e:0a:df:d3:f1:41:9d:db:bd:8f:dd:
                    62:c0:8e:3e:67:2a:89:31:4c:e2:a7:6a:eb:3c:68:
                    e0:1a:f3:79:48:49:4c:0a:20:53:78:2b:f5:75:48:
                    eb:04:f6:79:c0:82:04:4a:c4:c3:23:52:05:1b:1f:
                    f3:dc:27:11:d9:c5:31:b2:4b:21:84:b3:a0:3f:18:
                    19:ed:0d:96:7a:93:05:b8:d9:86:33:2c:d0:96:60:
                    ef:37:a1:7b:a6:9b:51:7b:07:9f:6d:1b:ab:cb:53:
                    66:2f:5b:07:3e:9d:f2:0a:e7:79:e5:60:01:a0:c6:
                    0f:a8:91:af:6b:1b:d4:68:bd:1a:b0:65:62:44:00:
                    00:08:f8:fb:db:01:46:6c:70:d2:a7:98:87:5d:f3:
                    25:6b:16:18:c3:a4:28:0e:1d:b7:96:91:b7:6a:c0:
                    bd:27:7c:3f:a7:d6:1e:27:1d:0c:27:70:1b:bb:f1:
                    5a:71:d7:61:88:85:8e:a0:3a:7a:74:d0:55:47:73:
                    e6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9B:BA:8D:BF:72:AB:8A:D4:78:42:D0:7E:A5:6C:39:51:51:7F:69
            X509v3 Authority Key Identifier:
                keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232332e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:00:15:d8:e7:00:36:bc:d4:7b:46:63:42:3c:fe:2f:dd:85:
         b6:35:88:08:3d:0d:41:1f:fb:65:66:af:95:22:4a:d9:dd:e4:
         a2:71:0f:d9:dc:3a:5a:ba:2a:05:58:c0:4d:8f:59:1b:72:ed:
         70:45:b2:de:fe:05:d7:9f:52:e3:f2:f5:e0:07:87:99:32:59:
         7d:df:98:bd:18:93:90:4e:ff:04:7b:71:f5:6e:bb:de:b7:2d:
         fc:ce:e7:e2:6a:99:3c:8e:8b:9e:b2:f3:8a:9a:00:dc:66:73:
         4a:f1:a2:69:84:58:74:a9:a8:57:1a:74:4e:2f:3f:8e:93:29:
         2d:7e:1b:aa:08:34:70:4e:99:14:51:5d:b6:12:ef:c6:87:3c:
         71:5b:5c:4c:19:c9:67:95:b6:67:7c:eb:e0:07:d5:d3:d9:fa:
         fb:d0:06:90:64:a9:7f:f9:be:07:3f:37:93:16:c5:f3:8a:63:
         8b:5b:12:84:db:dd:d4:f4:fe:43:f4:7c:a7:d2:69:23:d4:08:
         1e:ba:e2:69:6d:4d:b7:3a:a5:4d:ed:3e:21:68:8a:4f:53:58:
         1d:68:64:e0:fa:d2:8e:92:8b:8c:ef:76:2d:8e:a7:af:07:0b:
         ac:21:de:ee:76:cb:6b:d0:8e:2c:e4:bb:22:11:7e:3e:80:fe:
         9c:51:65:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:32:21 2025 by rpki-client