Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230312e302f32342d3234203d3e20323634313236.roa
File:                     3133382e35392e3230312e302f32342d3234203d3e20323634313236.roa (raw, json)
Hash identifier:          L7mXU16WalNRvU/g3UN6EAKWiAxCDetlCh8cL1au8k0=
Subject key identifier:   2F:B7:D3:19:36:9F:28:96:84:17:EE:68:03:64:F3:8C:77:20:A3:46
Certificate issuer:       /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial:       3165D2878DD3B40F708D6E8BB1AA317585DDA71B
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230312e302f32342d3234203d3e20323634313236.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     264126
IP address blocks:        138.59.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
                          rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:65:d2:87:8d:d3:b4:0f:70:8d:6e:8b:b1:aa:31:75:85:dd:a7:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=2FB7D319369F28968417EE680364F38C7720A346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:21:3a:dc:b4:13:71:f3:88:c0:a9:bd:3e:
                    5d:b1:9b:b8:a5:b3:87:d7:59:48:ee:b4:65:fd:76:
                    0f:e0:e2:ac:bb:4a:04:91:84:17:08:87:47:7e:a5:
                    2a:94:9c:f0:83:17:9e:32:22:a3:8b:3e:70:73:5f:
                    e4:47:07:90:36:2d:e1:96:42:9b:1f:8e:92:b1:e7:
                    c2:6d:18:f0:1e:4f:16:24:37:1a:2e:d0:07:c6:d9:
                    e6:58:a2:11:35:23:82:64:f2:8d:14:72:89:20:48:
                    ce:cb:e5:9e:4e:02:32:44:f1:42:fb:4b:fa:54:4c:
                    c3:85:7d:6d:b1:07:fa:91:e8:b3:14:88:6c:81:0d:
                    16:8d:fe:4a:8d:a6:e5:03:ee:d9:35:fb:a3:60:3f:
                    58:18:97:a7:b0:65:61:d4:ed:1c:56:51:dd:80:6f:
                    fa:97:35:75:a2:bb:a5:aa:f3:2f:5a:f6:21:db:f0:
                    e9:d9:66:6b:6f:d5:08:33:5f:e2:18:69:d4:30:99:
                    85:f7:da:59:18:a3:8d:88:e6:ed:5e:f4:49:ed:72:
                    74:f9:4d:09:2b:e7:8f:19:1c:3a:ba:fd:6f:25:93:
                    2f:ed:c9:97:8c:c4:bb:53:48:ae:49:90:84:7f:60:
                    fb:9e:aa:be:92:88:b8:54:6b:5c:4a:f1:f0:48:6d:
                    9e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B7:D3:19:36:9F:28:96:84:17:EE:68:03:64:F3:8C:77:20:A3:46
            X509v3 Authority Key Identifier:
                keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230312e302f32342d3234203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:93:9f:c4:96:1b:60:b7:3b:21:60:a3:a4:c5:8f:e1:0f:e0:
         d1:95:10:1e:14:6e:af:14:cb:68:eb:7f:eb:f7:f3:4a:08:4f:
         a3:cb:c3:7e:0c:bb:fd:4c:00:52:c9:e4:ca:cd:a0:ba:9b:80:
         e7:0a:5f:cf:e2:eb:e3:02:10:e8:3f:f2:d1:0d:1f:21:31:98:
         e7:23:76:c1:1a:e1:4a:6a:6a:40:bc:7f:30:29:8e:13:c3:ab:
         47:63:96:69:21:95:ac:8a:69:d2:f2:08:73:a1:00:fc:91:a5:
         9d:03:55:28:80:fb:e4:e4:e3:a4:f9:4c:bf:37:0b:8a:63:c6:
         99:4c:29:74:1c:a3:aa:92:e7:5b:c4:39:e9:c3:b2:0c:12:59:
         48:84:70:ec:4b:6a:30:6d:ce:64:c4:5e:39:89:44:e5:a8:68:
         e3:6e:67:75:70:bc:c3:7c:00:6a:a1:9d:fe:84:11:ea:74:bf:
         3b:ab:a2:5f:e2:c0:6e:d6:2c:d4:b5:ce:88:35:c2:11:ad:63:
         e3:3c:12:65:da:fa:b5:78:dd:c3:f5:20:d2:83:64:f0:44:d5:
         49:14:bf:4e:30:96:c8:04:09:b5:1f:4e:9d:a6:4f:b3:a6:a3:
         f7:8b:4b:01:50:48:d4:e0:f7:e0:c4:b7:a0:6a:d9:aa:27:a6:
         9d:ef:7f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:02:18 2025 by rpki-client