Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/3133382e39392e3136382e302f32322d3234203d3e203631353832.roa
File:                     3133382e39392e3136382e302f32322d3234203d3e203631353832.roa (raw, json)
Hash identifier:          8F4vHq720JUJiE/oMp9TfoWjhYydHW9Js7dZdgA/F2Q=
Subject key identifier:   FF:1D:C7:46:F1:5F:21:B0:2A:34:83:79:FD:06:1D:F4:1C:67:36:1E
Certificate issuer:       /CN=F3A58196CD0A4AD290F3F47F168D539B895B28A6
Certificate serial:       0CFE6D7666030120CC175EC99B9680E13A5E3E8A
Authority key identifier: F3:A5:81:96:CD:0A:4A:D2:90:F3:F4:7F:16:8D:53:9B:89:5B:28:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3A58196CD0A4AD290F3F47F168D539B895B28A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/3133382e39392e3136382e302f32322d3234203d3e203631353832.roa
Signing time:             Tue 18 Mar 2025 14:47:47 +0000
ROA not before:           Tue 18 Mar 2025 14:42:47 +0000
ROA not after:            Tue 17 Mar 2026 14:47:47 +0000
asID:                     61582
IP address blocks:        138.99.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/F3A58196CD0A4AD290F3F47F168D539B895B28A6.crl
                          rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/F3A58196CD0A4AD290F3F47F168D539B895B28A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3A58196CD0A4AD290F3F47F168D539B895B28A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 13:12:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fe:6d:76:66:03:01:20:cc:17:5e:c9:9b:96:80:e1:3a:5e:3e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3A58196CD0A4AD290F3F47F168D539B895B28A6
        Validity
            Not Before: Mar 18 14:42:47 2025 GMT
            Not After : Mar 17 14:47:47 2026 GMT
        Subject: CN=FF1DC746F15F21B02A348379FD061DF41C67361E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:56:06:b3:c0:db:7d:3c:d3:23:ad:4b:99:3a:
                    f4:45:99:24:6b:69:b4:c5:79:0f:c5:2f:07:6b:af:
                    5e:b9:58:41:ee:43:f8:29:dc:50:d1:02:15:32:c8:
                    b6:35:57:64:39:ee:ec:d7:79:0f:c9:92:9e:06:3e:
                    d1:7a:57:19:e7:1b:7c:96:da:5a:49:d7:41:89:89:
                    21:70:dd:b4:82:ba:c8:9c:00:9a:0d:1b:9c:88:07:
                    7d:88:e6:6e:a0:b3:28:63:c1:b5:5d:75:c4:dc:0f:
                    14:fa:cb:75:b0:2b:49:3c:15:d4:3c:37:74:93:ec:
                    cd:ce:7d:2c:38:76:bb:63:5d:52:21:e6:01:a9:72:
                    c7:59:9c:ac:b6:7a:93:1e:1f:92:90:59:c2:50:2a:
                    3e:75:a4:88:d6:02:27:47:0d:c5:3a:bb:7a:3e:2e:
                    e2:10:dd:6a:a1:b2:ca:a8:e8:fd:36:c6:82:a3:f0:
                    d7:f7:b0:65:d0:3f:c5:88:ec:b2:fb:fb:fe:31:53:
                    ef:02:6c:5f:0f:e6:87:53:2b:ad:b3:be:8c:c4:df:
                    82:e6:2c:3d:2a:06:49:64:ed:c3:5b:33:de:33:7d:
                    8a:83:32:79:93:da:47:9c:52:8d:6a:97:02:6a:7a:
                    1e:15:ba:33:0f:bd:81:19:c0:04:e8:a5:4a:ba:34:
                    eb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1D:C7:46:F1:5F:21:B0:2A:34:83:79:FD:06:1D:F4:1C:67:36:1E
            X509v3 Authority Key Identifier:
                keyid:F3:A5:81:96:CD:0A:4A:D2:90:F3:F4:7F:16:8D:53:9B:89:5B:28:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/F3A58196CD0A4AD290F3F47F168D539B895B28A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3A58196CD0A4AD290F3F47F168D539B895B28A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/3133382e39392e3136382e302f32322d3234203d3e203631353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:af:90:14:34:ed:db:5a:4e:7a:96:27:e6:a4:33:c9:d5:1f:
         d1:fd:7a:fa:ca:42:dc:3a:5b:cd:a7:56:53:4e:d3:37:36:1f:
         e6:0f:f8:c7:31:32:4d:a8:d0:de:4b:f9:fd:a7:07:01:57:5d:
         e7:36:81:02:54:38:c2:12:fb:75:00:c3:fa:ce:ee:89:d2:cb:
         b0:89:a4:54:12:94:a1:d5:5f:aa:24:50:ac:b1:72:33:0b:eb:
         79:a4:c6:99:a2:d3:69:6a:d4:74:3b:70:70:59:53:d2:a9:32:
         7d:b3:4f:4e:44:b5:43:17:85:78:e3:71:78:48:4b:48:59:59:
         5f:83:07:80:30:a1:dc:b1:73:03:e5:72:ca:8e:7e:70:03:bf:
         99:a6:38:3e:74:55:e0:35:61:2c:89:1c:e4:90:3d:61:f4:34:
         39:f2:3b:17:17:0c:ec:b1:46:32:bc:53:35:f3:7f:0c:ea:99:
         27:b0:d2:a1:c1:94:f1:8b:f7:1f:9b:75:fd:ca:f5:28:7d:63:
         ed:31:87:34:f1:f1:6a:11:2a:a1:e9:5b:20:3e:2c:dc:39:2f:
         de:32:84:c8:ef:2b:29:58:89:dd:71:c1:36:99:ec:15:b1:c1:
         62:fa:63:3f:d8:95:c0:a4:ee:65:95:1b:d8:f0:c9:00:b7:b7:
         8d:cc:07:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:35 2025 by rpki-client