Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3133382e3132322e37332e302f32342d3234203d3e20323633323633.roa
File:                     3133382e3132322e37332e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          d8wnKESdb+KlWJfcFWZyuJQVTJ4rPTQ94xVs1RFg+F8=
Subject key identifier:   3C:61:91:95:03:EC:03:B5:25:B5:1F:C4:BC:AD:E1:3A:2B:DA:C1:78
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       51ED47AACAA6DC273C867302561002B20F57CA03
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3133382e3132322e37332e302f32342d3234203d3e20323633323633.roa
Signing time:             Thu 06 Mar 2025 08:00:25 +0000
ROA not before:           Thu 06 Mar 2025 07:55:25 +0000
ROA not after:            Thu 05 Mar 2026 08:00:25 +0000
asID:                     263263
IP address blocks:        138.122.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
                          rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ed:47:aa:ca:a6:dc:27:3c:86:73:02:56:10:02:b2:0f:57:ca:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Mar  6 07:55:25 2025 GMT
            Not After : Mar  5 08:00:25 2026 GMT
        Subject: CN=3C61919503EC03B525B51FC4BCADE13A2BDAC178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:44:4a:e0:44:44:b5:12:b0:50:0d:a3:bf:fa:
                    8e:31:a0:cf:5c:2f:a8:10:c0:0f:43:d5:81:3e:68:
                    d1:ff:bf:d4:d1:88:16:37:a2:20:a0:a2:56:29:d6:
                    f1:87:3e:b6:0d:f2:1d:97:92:e9:52:04:bf:79:30:
                    01:0f:15:93:23:f5:9e:b6:9a:e6:6a:41:cf:8b:97:
                    69:6c:3e:7a:8b:e0:07:d9:69:50:44:bc:57:77:1b:
                    2a:a5:51:6e:9c:9d:01:02:7f:3d:69:97:34:dc:ff:
                    7d:08:d8:1e:7e:d3:8f:08:e2:06:c6:5e:b5:41:cd:
                    0e:7a:c1:d5:b9:62:20:7a:70:23:8f:0b:13:6a:54:
                    33:3a:12:b9:6e:a4:94:10:ab:08:ba:9b:e7:4c:56:
                    5b:60:68:27:87:23:d4:4d:94:01:23:8c:a5:8f:20:
                    9c:7e:9f:bb:de:ce:a3:4c:3b:62:f3:56:d3:55:08:
                    ac:47:e9:52:8c:f9:3e:8d:15:c6:cd:6a:8a:79:9c:
                    9c:4c:aa:cd:5d:bc:44:48:39:2f:d2:c3:9a:b2:a6:
                    54:1e:5b:13:b3:05:07:f2:5f:de:dd:41:52:e2:90:
                    56:d4:df:5e:8e:29:42:51:3a:f2:b0:77:64:84:27:
                    8a:83:8b:1d:b7:ab:36:ef:79:86:09:e8:71:82:3f:
                    85:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:61:91:95:03:EC:03:B5:25:B5:1F:C4:BC:AD:E1:3A:2B:DA:C1:78
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3133382e3132322e37332e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:3a:51:ca:c9:42:29:d6:6b:6c:a9:64:10:02:69:01:32:87:
         15:fa:7e:a1:62:6b:e8:f7:6a:c0:64:cb:11:02:70:a3:49:0e:
         30:86:b8:ef:5b:69:a7:ec:dc:51:82:1d:33:14:b6:2e:a4:18:
         89:93:c1:9d:9e:d0:9b:9f:a6:cf:aa:b6:28:db:0a:1b:ac:31:
         bb:9b:12:3a:f9:d5:59:9b:30:be:7a:dc:10:c8:00:3b:6c:38:
         81:31:1f:7b:32:c5:7e:ff:61:70:f2:33:c4:f0:22:37:dd:66:
         78:be:92:4c:46:78:a1:0a:e2:b9:ff:de:34:3a:e6:af:bc:17:
         35:f4:9f:12:a3:26:49:69:8b:6f:62:34:9c:12:a2:22:cf:23:
         22:67:f2:8a:bc:2b:b8:17:66:a6:5f:64:20:cb:49:ee:76:29:
         02:cd:eb:f1:16:2f:7e:4d:6c:09:df:92:6d:3c:b4:fc:76:14:
         9d:25:89:e2:c5:30:66:dd:58:50:6c:f6:89:38:47:12:bf:1d:
         d5:d2:41:40:a4:e0:a6:e6:db:df:f4:13:8d:cd:cb:10:97:ad:
         53:33:9c:02:ca:a0:85:66:f1:5a:ef:3e:d1:f0:fc:04:46:0b:
         73:61:31:35:aa:f2:3c:be:04:92:e6:eb:cc:96:23:51:17:fc:
         95:2f:f5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:42:58 2025 by rpki-client