Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32342d3234203d3e20323633393131.roa
File:                     3133382e3230342e3137322e302f32342d3234203d3e20323633393131.roa (raw, json)
Hash identifier:          jRRmpkYINt6f7Kh0pdTxWCvw9ovtGEVlyUA0cJo4gA4=
Subject key identifier:   7A:16:65:D4:F5:51:E4:0D:5E:67:AD:03:FF:0D:4C:56:0C:F7:36:76
Certificate issuer:       /CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC
Certificate serial:       6FED99DE1BCB9CEFE76CBBD164AF65EE56F44CA5
Authority key identifier: 1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32342d3234203d3e20323633393131.roa
Signing time:             Mon 03 Feb 2025 20:58:36 +0000
ROA not before:           Mon 03 Feb 2025 20:53:36 +0000
ROA not after:            Mon 02 Feb 2026 20:58:36 +0000
asID:                     263911
IP address blocks:        138.204.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.crl
                          rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 18:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ed:99:de:1b:cb:9c:ef:e7:6c:bb:d1:64:af:65:ee:56:f4:4c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC
        Validity
            Not Before: Feb  3 20:53:36 2025 GMT
            Not After : Feb  2 20:58:36 2026 GMT
        Subject: CN=7A1665D4F551E40D5E67AD03FF0D4C560CF73676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:98:70:8b:f9:2b:37:93:32:c4:32:8f:47:
                    17:3f:33:67:d5:02:cd:ec:60:a9:53:93:e7:fa:15:
                    97:72:79:13:d6:eb:63:b1:c3:d0:eb:35:f5:b8:ae:
                    5f:5d:d3:dd:6b:6f:3b:16:23:f6:55:ce:dc:46:26:
                    b3:0d:cf:95:20:d9:b2:15:3f:5e:92:95:50:c9:2e:
                    ce:c9:da:33:fa:88:c2:da:a5:ff:24:b4:c4:f1:35:
                    a7:d8:20:2c:64:2e:11:49:cb:50:a4:99:05:a1:95:
                    06:db:ea:90:87:76:8a:1d:bb:f6:84:5f:d1:c3:06:
                    e4:eb:2a:ba:f3:80:2a:16:0a:9c:f6:26:6a:69:dd:
                    26:f9:01:53:77:c0:00:40:58:49:59:18:c3:08:6c:
                    cc:08:c2:9f:59:51:9b:7f:55:de:ac:48:ce:c6:13:
                    e6:4f:bc:83:a6:52:07:29:2a:22:8f:1e:a5:28:0a:
                    3c:4c:96:6a:0f:4c:19:8f:5c:d2:9b:8c:a6:04:4c:
                    7c:b9:de:38:ee:96:d4:2d:4f:2d:5d:95:9f:80:7a:
                    b2:53:e4:79:fb:04:c8:4f:54:93:18:a8:08:41:ca:
                    22:bc:60:10:90:83:36:4c:eb:0b:58:64:17:5a:f0:
                    28:2b:0d:65:26:9c:af:d5:7c:b2:f2:95:6e:da:1d:
                    a5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:16:65:D4:F5:51:E4:0D:5E:67:AD:03:FF:0D:4C:56:0C:F7:36:76
            X509v3 Authority Key Identifier:
                keyid:1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32342d3234203d3e20323633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         eb:be:71:f3:f3:09:12:58:e5:1b:d7:62:e4:9a:06:23:16:1c:
         15:c6:57:19:59:c8:ca:8b:fe:57:c5:d0:99:83:c0:08:0f:cd:
         4b:d3:06:77:b3:9b:39:45:2e:fd:05:95:d3:78:21:38:39:29:
         e9:7d:dc:e6:56:70:61:1c:ab:d5:c5:ce:e8:15:f2:bb:e1:89:
         2f:48:ad:b6:47:ed:a3:8a:71:8d:d1:f6:0d:8d:17:7b:cb:94:
         75:27:6e:04:c8:12:1d:67:b5:c5:39:3a:f6:b8:ef:bb:d9:36:
         2c:30:53:56:82:36:a4:d7:f7:22:00:9b:47:19:f7:0c:63:14:
         e9:66:79:27:76:3a:8b:89:9b:45:2a:47:33:00:6d:d0:cb:45:
         be:50:b7:29:c7:a9:10:fe:a1:cb:c8:3f:89:7b:c6:f6:6e:3c:
         c7:d7:01:a8:49:d8:0f:5b:b4:82:b6:3b:f4:d9:61:9b:62:0d:
         28:6b:92:98:9a:d4:d8:9b:1c:e6:1f:32:1a:44:ae:f0:2a:e8:
         60:2e:ac:4c:d5:86:a4:47:a9:79:c6:13:7a:8a:8b:1b:ce:a8:
         88:bb:66:5d:d9:b6:2f:01:55:c6:62:1c:1c:13:7a:37:bf:db:
         f9:da:57:33:e0:0a:16:5c:0f:7b:4d:10:94:5d:2e:6c:34:90:
         df:11:d2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:52:59 2025 by rpki-client