Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa
File:                     3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa (raw, json)
Hash identifier:          gdg4CkiWZlxLCSS9uiJZl16iA1AfnTQyxIxntLHmqDo=
Subject key identifier:   83:EE:FC:0D:6D:0E:9B:81:FD:5A:5F:21:87:78:69:2B:F7:4F:72:EF
Certificate issuer:       /CN=B20E3C8281FB009A48EDFE56131C930D739F11C4
Certificate serial:       347AB12F1759FAA96B5AF21AEF1CACD5ABD70F9A
Authority key identifier: B2:0E:3C:82:81:FB:00:9A:48:ED:FE:56:13:1C:93:0D:73:9F:11:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa
Signing time:             Thu 06 Mar 2025 02:16:35 +0000
ROA not before:           Thu 06 Mar 2025 02:11:35 +0000
ROA not after:            Thu 05 Mar 2026 02:16:35 +0000
asID:                     263972
IP address blocks:        138.255.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.crl
                          rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7a:b1:2f:17:59:fa:a9:6b:5a:f2:1a:ef:1c:ac:d5:ab:d7:0f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B20E3C8281FB009A48EDFE56131C930D739F11C4
        Validity
            Not Before: Mar  6 02:11:35 2025 GMT
            Not After : Mar  5 02:16:35 2026 GMT
        Subject: CN=83EEFC0D6D0E9B81FD5A5F218778692BF74F72EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:e9:98:d1:38:3f:ca:e9:e4:bb:8a:24:0a:
                    07:82:19:f5:a0:39:59:ec:07:10:a0:d5:7c:3c:f5:
                    19:59:a1:10:6f:f4:30:52:0a:0c:a8:84:13:a3:0f:
                    60:15:c4:d8:27:7d:b4:5b:75:8c:78:1c:be:b9:c9:
                    6d:b0:cf:c6:48:35:e1:43:60:df:26:bd:51:de:b0:
                    9d:3f:3c:35:c8:74:f9:26:e6:33:e7:65:92:58:54:
                    ad:19:36:a3:08:66:e0:bb:02:54:d6:a0:87:fc:d3:
                    e0:eb:18:87:ea:88:06:d5:56:61:b8:5c:23:bd:70:
                    fe:e2:1f:26:c7:25:d2:c8:98:22:55:59:62:fc:89:
                    b6:dd:ec:b7:72:0c:20:3f:e0:1e:09:c7:fd:30:9a:
                    ab:4c:d5:31:ab:88:ba:c3:8d:8c:ab:4e:a9:29:b7:
                    9c:7c:d2:e1:86:07:46:e7:bd:73:4f:49:35:af:42:
                    d8:9b:38:7d:1d:e4:a0:b1:dc:b7:b8:77:41:57:61:
                    f8:11:5a:13:b4:9e:c7:89:87:f5:ac:bd:29:75:65:
                    0f:0e:3d:b8:7e:43:53:85:de:cf:6f:1d:c0:33:32:
                    c7:04:7b:6c:77:66:bc:de:c1:81:e5:07:68:a5:27:
                    a5:51:2f:98:d8:fb:d0:f3:94:24:7c:6f:58:9c:fc:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EE:FC:0D:6D:0E:9B:81:FD:5A:5F:21:87:78:69:2B:F7:4F:72:EF
            X509v3 Authority Key Identifier:
                keyid:B2:0E:3C:82:81:FB:00:9A:48:ED:FE:56:13:1C:93:0D:73:9F:11:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:ec:38:25:f3:bb:67:9a:bb:09:5a:a8:bd:d2:c6:68:d2:5e:
         7b:e6:24:24:18:6a:51:da:1f:98:3e:f2:e7:19:a6:d2:4c:f3:
         c3:51:ce:53:dc:fd:4f:0c:07:f4:ec:ef:ad:f5:c1:01:09:0b:
         83:64:62:40:2b:1e:c5:36:70:77:73:91:3f:bc:c1:2e:7d:dc:
         f0:2b:6f:72:be:d1:f5:40:90:e7:27:57:0e:9d:60:28:38:b0:
         8b:cf:2b:7a:e7:84:1b:b1:d5:76:00:52:3a:f9:b6:ff:ad:ab:
         54:b8:52:b4:c2:dc:a2:09:f4:eb:3d:ca:ff:f8:79:90:13:05:
         30:e2:1b:cd:8c:25:26:2c:ac:aa:d0:e2:b0:5f:78:22:b9:84:
         d3:c5:e2:f1:f1:0c:04:3d:a3:91:ad:c0:89:bb:8c:05:0b:4e:
         0d:ee:46:97:9e:6f:b7:05:6b:91:df:1a:48:66:30:f6:38:ff:
         54:73:5c:93:5c:46:4c:81:82:6e:67:19:d9:9f:c3:d1:9b:ed:
         3d:2c:0c:1e:ef:aa:7e:a6:fb:a1:87:22:8f:95:f8:5d:85:4c:
         47:87:20:95:39:e4:a9:3e:c6:83:6a:b8:e3:d0:3c:05:a3:cd:
         c3:1d:36:ba:50:ac:ef:56:4a:b8:ec:03:98:66:d7:58:8b:e9:
         12:b3:e0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:21:38 2025 by rpki-client