Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3133382e39342e32382e302f32322d3232203d3e20323634313030.roa
File:                     3133382e39342e32382e302f32322d3232203d3e20323634313030.roa (raw, json)
Hash identifier:          +KkzQ35zjlZqK66Sd0Are1vUc8y4eNFt7FzyepX1W4A=
Subject key identifier:   49:FB:0B:5B:23:59:6C:60:2B:DA:01:73:FF:45:36:E4:48:32:9C:60
Certificate issuer:       /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial:       3FBB6B9136AE29A54714EAF51C4010A31C1E8B60
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3133382e39342e32382e302f32322d3232203d3e20323634313030.roa
Signing time:             Mon 02 Dec 2024 12:09:12 +0000
ROA not before:           Mon 02 Dec 2024 12:04:12 +0000
ROA not after:            Mon 01 Dec 2025 12:09:12 +0000
asID:                     264100
IP address blocks:        138.94.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl
                          rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bb:6b:91:36:ae:29:a5:47:14:ea:f5:1c:40:10:a3:1c:1e:8b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
        Validity
            Not Before: Dec  2 12:04:12 2024 GMT
            Not After : Dec  1 12:09:12 2025 GMT
        Subject: CN=49FB0B5B23596C602BDA0173FF4536E448329C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:54:8b:58:ac:bc:d3:db:1b:14:7d:f7:ba:
                    1f:ca:07:0d:f5:74:f2:aa:84:8b:c8:de:22:01:b6:
                    9f:7a:7c:e9:93:25:ac:aa:ca:13:68:84:cf:4b:93:
                    47:d1:e0:b1:1d:1d:7e:43:76:13:c3:23:75:fa:f8:
                    81:35:f8:f6:b3:30:4b:0d:50:30:7b:28:01:80:a0:
                    fb:45:06:fe:b4:27:17:0d:20:a7:71:55:2c:3d:ed:
                    cf:1b:6e:c4:b4:19:91:29:f1:c1:49:e6:29:fb:d4:
                    7e:cf:ad:bf:a5:90:f0:20:70:ed:8a:82:35:06:6e:
                    d3:0a:a9:f0:7a:84:03:a6:62:b6:d3:7e:6b:9a:e2:
                    89:5b:6c:e9:6e:20:47:75:50:80:48:ca:94:24:5f:
                    ff:8a:a7:a7:fa:a0:28:5b:2a:c8:a6:89:72:93:01:
                    59:3d:6a:32:29:e4:51:96:fb:64:13:0b:56:7a:77:
                    4f:a6:ec:c0:24:21:d2:19:af:32:ff:8f:b0:38:49:
                    b8:2e:f9:4b:53:e6:e1:16:13:e4:a3:2c:03:e2:24:
                    d7:56:5f:bd:2f:0b:26:ee:be:7a:c2:e7:e9:4c:87:
                    5f:e7:0e:2e:3e:ce:5b:54:59:8d:0e:1f:74:83:0b:
                    8c:c1:97:bc:4f:2c:f2:0d:49:c1:1f:58:6e:5c:01:
                    7d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FB:0B:5B:23:59:6C:60:2B:DA:01:73:FF:45:36:E4:48:32:9C:60
            X509v3 Authority Key Identifier:
                keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3133382e39342e32382e302f32322d3232203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:51:73:40:14:99:86:b0:26:bc:9b:1b:23:76:37:90:03:b2:
         8d:a6:8e:8c:68:72:e9:4c:9c:05:5f:12:07:7b:d5:5f:44:63:
         aa:27:10:fb:50:54:15:c1:5c:e3:d0:42:e4:ce:07:ff:eb:57:
         07:59:d6:c5:6b:30:b7:b4:d7:8c:cb:ec:76:77:64:2f:3b:ba:
         8d:4c:a6:17:96:30:ae:87:5b:47:f8:81:0d:77:43:af:68:f2:
         56:5e:03:62:cb:21:87:d2:b7:35:01:41:38:8f:8d:e0:95:0b:
         7f:ea:1b:05:7a:a7:14:25:56:a4:87:17:88:2c:29:bc:68:0e:
         e4:bd:5d:0c:1e:82:ff:58:fc:64:20:40:b0:33:28:ed:a3:e9:
         d6:c1:9d:4a:57:9f:96:c7:c6:f3:13:5d:99:e3:3d:bf:ce:af:
         17:b8:fb:93:59:78:e8:07:cf:ae:a0:55:e4:cf:b8:4d:cc:17:
         50:a1:d0:44:86:91:f8:12:e5:45:35:f1:68:10:af:b7:e8:47:
         e5:2a:31:06:c9:87:f7:ee:20:cb:a0:f9:8a:f9:4a:e2:ed:60:
         b4:ed:ca:21:bb:c3:a6:f6:cc:a3:8c:80:d5:4d:12:a0:83:0f:
         6e:96:aa:f7:50:da:9f:66:1a:99:93:fa:7b:51:9a:2f:a4:d4:
         10:7a:a1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:22:54 2025 by rpki-client