Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232362e302f32332d3233203d3e20323633393839.roa
File:                     3133382e3235352e3232362e302f32332d3233203d3e20323633393839.roa (raw, json)
Hash identifier:          LptXCwgVx2/5SKCHrPN2DJrQCkLdJBXBouz775RBDi4=
Subject key identifier:   E1:AD:45:E8:39:34:C7:AB:D7:8F:CB:54:8C:85:2C:67:DE:39:DF:41
Certificate issuer:       /CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
Certificate serial:       6A95C3D2B1547972B6AFA2463FCE22B27D00016A
Authority key identifier: 6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232362e302f32332d3233203d3e20323633393839.roa
Signing time:             Wed 05 Mar 2025 19:32:37 +0000
ROA not before:           Wed 05 Mar 2025 19:27:37 +0000
ROA not after:            Wed 04 Mar 2026 19:32:37 +0000
asID:                     263989
IP address blocks:        138.255.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl
                          rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 02:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:95:c3:d2:b1:54:79:72:b6:af:a2:46:3f:ce:22:b2:7d:00:01:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
        Validity
            Not Before: Mar  5 19:27:37 2025 GMT
            Not After : Mar  4 19:32:37 2026 GMT
        Subject: CN=E1AD45E83934C7ABD78FCB548C852C67DE39DF41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e0:d1:13:6a:d7:04:55:55:c8:c9:9c:08:9b:
                    66:ce:6b:46:6e:71:b9:36:40:ad:c3:f7:ab:e0:30:
                    e0:95:58:97:29:9e:56:e3:e4:da:57:a9:6b:52:b1:
                    c6:c4:93:d3:b6:e1:ff:41:ec:c6:70:cc:95:2a:0f:
                    8b:a1:39:02:55:af:1c:f2:16:b3:fd:e2:43:ee:ea:
                    e1:90:f6:73:62:ad:0b:ea:c5:50:3a:47:fd:b9:05:
                    ec:73:29:9c:ad:83:37:a2:4c:6b:db:fb:61:9d:90:
                    f0:e5:48:9f:4f:ca:cf:06:e1:7d:1f:51:49:5d:2b:
                    90:3d:90:1c:1e:18:cc:63:ef:df:ad:42:f6:1a:be:
                    c7:b9:01:e5:f9:eb:93:9f:88:1f:75:5a:ef:3a:21:
                    a5:8e:dd:81:5e:14:78:5c:fc:4f:b8:23:eb:7d:68:
                    89:88:14:11:64:c2:af:a3:e5:6e:10:ed:58:0d:dc:
                    38:1c:be:21:26:e9:b6:63:8e:c5:70:1f:47:20:c1:
                    d0:40:a8:6d:42:e3:06:a9:5d:6d:cb:12:6d:3d:6a:
                    66:c3:61:14:08:95:14:54:df:5e:00:a2:ca:e3:b5:
                    09:f7:94:7f:6b:92:02:7f:56:d3:7b:56:b2:5a:e5:
                    8e:a7:c8:cf:1a:1d:23:44:69:c2:fc:c3:23:d3:d1:
                    df:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AD:45:E8:39:34:C7:AB:D7:8F:CB:54:8C:85:2C:67:DE:39:DF:41
            X509v3 Authority Key Identifier:
                keyid:6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232362e302f32332d3233203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:c6:eb:15:6a:a2:39:16:4b:c2:8d:d1:9d:7e:57:60:69:6f:
         22:80:cf:22:6d:7c:58:ed:4e:27:00:39:e7:2a:ae:d8:20:95:
         d0:69:4c:15:18:1e:b8:cd:66:86:56:67:fb:27:9a:07:c5:74:
         9c:51:8d:5b:d0:a4:97:e2:29:ab:ba:23:dc:e5:94:93:d9:3d:
         5d:98:0c:7d:75:3c:90:67:24:90:ae:95:4e:83:9d:93:e4:db:
         c3:3f:df:fe:82:e9:1d:30:17:38:6e:6c:e9:33:c2:22:7a:ef:
         56:d5:6a:03:f2:80:1f:5a:93:9a:c5:32:2c:83:e2:88:03:61:
         f8:67:a8:c8:2e:2b:09:02:53:ff:f2:fb:07:6f:09:bd:42:59:
         0f:b7:2e:b9:77:8f:99:0e:9a:92:18:ee:7e:e9:54:23:43:b4:
         f7:db:cc:57:62:a0:9d:ed:eb:39:05:bf:c5:a2:9e:a6:46:6e:
         02:b7:a5:aa:1c:e9:d0:ea:32:8b:b7:05:50:4a:16:7d:4c:55:
         3f:57:0c:bf:50:96:4c:bb:e7:54:44:67:6d:19:0b:e2:61:6d:
         75:86:8c:63:2d:cb:d4:07:0d:e7:1a:66:1c:e7:27:6e:ad:b8:
         e1:c8:4b:9b:28:08:d5:ef:35:b9:31:81:23:28:f0:36:ac:87:
         b0:24:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:19:53 2025 by rpki-client