Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3133382e3132312e35322e302f32322d3332203d3e20323634323831.roa
File:                     3133382e3132312e35322e302f32322d3332203d3e20323634323831.roa (raw, json)
Hash identifier:          ai1AGoqmerLyDTM7q1iq8K+UBOHEs6MxgF9EGfUO3l4=
Subject key identifier:   7B:51:C2:25:41:3D:09:FF:83:F9:02:AC:A6:38:75:16:D7:75:76:BF
Certificate issuer:       /CN=C6311968EBC105398794FB43DCF25FAA7999A36E
Certificate serial:       689AF025E7F3B03D113FD6A82F8AE88161416F80
Authority key identifier: C6:31:19:68:EB:C1:05:39:87:94:FB:43:DC:F2:5F:AA:79:99:A3:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3133382e3132312e35322e302f32322d3332203d3e20323634323831.roa
Signing time:             Thu 20 Mar 2025 11:17:58 +0000
ROA not before:           Thu 20 Mar 2025 11:12:58 +0000
ROA not after:            Thu 19 Mar 2026 11:17:58 +0000
asID:                     264281
IP address blocks:        138.121.52.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.crl
                          rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 22:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9a:f0:25:e7:f3:b0:3d:11:3f:d6:a8:2f:8a:e8:81:61:41:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6311968EBC105398794FB43DCF25FAA7999A36E
        Validity
            Not Before: Mar 20 11:12:58 2025 GMT
            Not After : Mar 19 11:17:58 2026 GMT
        Subject: CN=7B51C225413D09FF83F902ACA6387516D77576BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:97:69:aa:5c:aa:69:8b:a4:bb:b3:7a:4f:
                    2c:61:68:c7:9e:b6:b9:3e:a5:16:ef:7a:e7:2a:45:
                    56:84:a9:9f:ce:17:65:ae:f4:21:ad:24:0f:b3:6a:
                    7b:32:0c:d4:3f:b5:85:9b:47:fe:6d:b7:46:a9:8b:
                    4d:31:4f:e9:d5:eb:0e:5e:fa:9c:11:eb:39:a6:40:
                    cf:e5:fa:06:31:62:b5:2c:f5:de:d7:d7:44:1f:1f:
                    cf:53:5d:b2:ff:55:ca:38:0c:e7:46:1b:70:73:fa:
                    af:ff:ec:f3:87:77:d3:cd:e6:41:30:cb:2e:c1:0c:
                    62:a8:02:59:00:dc:5b:14:0e:f2:5c:ef:a1:e3:9a:
                    4f:37:02:e1:4c:48:76:96:50:6e:83:c5:1e:8b:43:
                    4f:fd:e0:96:dc:aa:af:1c:9a:d8:5a:19:c0:6c:51:
                    76:16:ba:27:50:36:f3:a2:9a:f2:2c:17:30:68:48:
                    a2:f2:6d:2b:b5:58:26:87:a2:fe:9d:15:d9:e8:d7:
                    5f:fa:33:c8:97:14:4e:6f:c6:e5:89:5c:20:81:e8:
                    f0:ad:bc:22:55:b4:05:35:07:ed:71:08:f1:95:41:
                    ab:ba:ed:32:96:2c:43:5a:2d:cc:7d:cd:9e:19:0d:
                    81:f5:a6:6a:31:91:38:00:4f:a0:41:38:b8:c9:5c:
                    de:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:51:C2:25:41:3D:09:FF:83:F9:02:AC:A6:38:75:16:D7:75:76:BF
            X509v3 Authority Key Identifier:
                keyid:C6:31:19:68:EB:C1:05:39:87:94:FB:43:DC:F2:5F:AA:79:99:A3:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3133382e3132312e35322e302f32322d3332203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:eb:b8:e5:56:a0:95:e0:de:c6:40:fc:68:f7:ad:e2:fe:58:
         3b:83:0d:d9:ed:e9:ed:28:a9:05:a0:30:40:70:ae:15:1b:a3:
         df:22:6c:9b:9c:7c:60:3c:e1:00:4d:07:77:e8:54:c0:e4:ed:
         36:0a:ef:7a:b1:3b:e0:4e:bf:84:48:36:0a:11:6d:ea:5d:04:
         2b:91:6d:d0:11:0c:06:e0:42:e7:48:b5:9f:78:57:11:85:6e:
         57:f5:fb:37:f2:cf:b5:d1:42:69:d2:d6:32:b3:36:c9:c1:22:
         19:73:31:b8:b0:49:20:6a:50:34:8d:fe:de:c6:07:32:61:e8:
         9c:60:7a:29:af:53:49:7f:03:01:2d:d4:0e:1e:76:a8:35:06:
         6d:38:10:08:b1:45:fd:8d:0b:c7:75:25:46:27:c1:90:ee:c1:
         e3:83:e5:b4:7a:54:69:df:51:37:35:9c:27:e5:1a:84:dd:36:
         fb:1b:9a:3e:f5:b0:e2:c7:55:a5:14:ed:27:7a:f3:31:43:66:
         93:bf:39:16:0c:12:10:4c:ed:8c:9e:2c:59:6f:24:e8:c0:7c:
         c4:72:7c:89:33:3e:ae:be:17:df:2b:d6:f6:e9:be:dc:9f:5e:
         1d:99:eb:84:be:16:dd:d2:bd:e1:6d:32:3d:84:82:7f:8f:de:
         8c:6c:38:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:02 2025 by rpki-client