Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/3133382e33362e3234302e302f32332d3233203d3e20323634353839.roa
File:                     3133382e33362e3234302e302f32332d3233203d3e20323634353839.roa (raw, json)
Hash identifier:          +3XDDjbpUjZYS64iae7bMObO4htNGF2MzhF9x1grRfk=
Subject key identifier:   71:73:C9:CE:96:72:86:7F:18:94:D7:46:D3:05:94:57:A4:81:F3:E9
Certificate issuer:       /CN=0E88601104C6C43AC785175C29585EFD06974620
Certificate serial:       06C1C2C6D3F168FCBD86A6630B0B20B137331526
Authority key identifier: 0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/3133382e33362e3234302e302f32332d3233203d3e20323634353839.roa
Signing time:             Thu 06 Mar 2025 08:50:14 +0000
ROA not before:           Thu 06 Mar 2025 08:45:14 +0000
ROA not after:            Thu 05 Mar 2026 08:50:14 +0000
asID:                     264589
IP address blocks:        138.36.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 15:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c1:c2:c6:d3:f1:68:fc:bd:86:a6:63:0b:0b:20:b1:37:33:15:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E88601104C6C43AC785175C29585EFD06974620
        Validity
            Not Before: Mar  6 08:45:14 2025 GMT
            Not After : Mar  5 08:50:14 2026 GMT
        Subject: CN=7173C9CE9672867F1894D746D3059457A481F3E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:08:3a:03:ff:4d:b6:89:c2:e3:ec:e8:51:
                    7c:16:2f:2f:3d:f4:cf:0f:a3:f0:52:94:cf:21:b1:
                    82:90:cd:ee:f2:05:e0:b5:0e:25:7c:de:ad:a8:9e:
                    cc:5f:eb:56:2c:61:6c:5d:31:3c:6b:e4:40:35:e9:
                    73:30:12:8b:50:06:cc:08:2b:3a:46:4f:fc:14:f0:
                    e2:73:ce:54:ad:df:ba:f6:b4:bd:00:5d:f5:de:b0:
                    5f:24:d0:99:bd:ee:2c:d2:9a:21:42:49:f2:22:a5:
                    20:3d:2e:ab:ce:1a:21:02:0a:9d:39:c1:6b:33:78:
                    ed:06:7f:00:e3:91:2d:a5:50:29:a0:63:c8:fa:ad:
                    ee:2c:82:f5:18:61:24:68:78:3d:78:32:d6:11:39:
                    ba:b0:25:17:4b:0b:1d:e3:ae:19:1f:8d:67:88:f5:
                    77:e1:d2:5e:eb:cd:f5:5e:c3:2c:92:dc:f4:07:96:
                    5e:07:66:c6:c9:7d:9a:0e:5e:a1:00:f0:df:19:9f:
                    0d:29:13:d2:e5:fa:90:6f:0b:cd:d9:04:8c:2d:16:
                    9f:26:bb:e3:e5:24:36:77:de:fd:57:d6:b8:ce:1e:
                    99:c6:9b:74:6f:37:82:ba:db:de:b3:43:7f:88:e7:
                    3d:05:1c:6a:29:61:44:34:37:de:71:06:ef:f3:51:
                    26:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:73:C9:CE:96:72:86:7F:18:94:D7:46:D3:05:94:57:A4:81:F3:E9
            X509v3 Authority Key Identifier:
                keyid:0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/3133382e33362e3234302e302f32332d3233203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:64:21:df:3b:b9:db:11:2b:7d:a1:23:93:aa:26:e0:b4:35:
         74:7d:97:8d:43:57:86:5e:3a:8f:b9:92:e1:2b:b5:f2:b4:07:
         53:3e:a7:95:28:28:7c:6a:5d:37:fc:19:26:9a:2f:b8:da:f5:
         a9:58:5c:2e:47:05:d8:5b:7a:f8:6a:a6:f6:8d:6c:ed:40:40:
         6c:42:32:c2:b5:69:d3:3b:f2:ea:21:e2:9c:49:44:c1:b3:4c:
         6d:21:27:d0:2b:2b:ab:f2:51:32:7e:d4:95:ac:67:7b:39:61:
         06:8e:53:b4:b2:03:89:18:80:ba:55:fb:76:cb:34:39:22:47:
         63:a7:d4:99:aa:ab:a3:33:ed:b5:1b:af:40:db:a3:cd:a5:38:
         f6:cc:95:c9:69:ef:88:48:29:96:0b:73:b1:e1:bd:50:f3:70:
         cb:31:3b:bb:b9:3f:43:05:45:86:46:ef:f5:aa:25:41:5b:57:
         85:cd:37:43:42:c8:03:f3:12:18:e2:4d:33:ba:7a:f5:f4:fe:
         0f:80:78:e8:a3:9f:a4:b5:07:b9:4b:ad:6b:d1:40:60:16:81:
         06:2d:ca:96:9d:9a:bb:90:81:df:2b:05:3f:1e:9e:b5:e0:53:
         da:7a:f4:5d:ab:ae:b3:5a:d5:03:9a:70:d1:4b:9a:85:32:36:
         27:fe:26:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:26:20 2025 by rpki-client