Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/3133382e302e3137322e302f32322d3234203d3e20323634353532.roa
File:                     3133382e302e3137322e302f32322d3234203d3e20323634353532.roa (raw, json)
Hash identifier:          GmwZJbaoy+k1FTw6qlwbLXe+EFZw6807X+9GSA5dJ74=
Subject key identifier:   13:EB:26:9D:46:4E:CE:91:98:37:46:18:F8:00:5F:5A:4E:7F:F6:9F
Certificate issuer:       /CN=42E0C742D5DC5A6C41753F73202F41323E27436C
Certificate serial:       67C93BD4CF797AC5FC95265749EF27C5172E2297
Authority key identifier: 42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/3133382e302e3137322e302f32322d3234203d3e20323634353532.roa
Signing time:             Thu 06 Mar 2025 04:31:20 +0000
ROA not before:           Thu 06 Mar 2025 04:26:20 +0000
ROA not after:            Thu 05 Mar 2026 04:31:20 +0000
asID:                     264552
IP address blocks:        138.0.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.crl
                          rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 19:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c9:3b:d4:cf:79:7a:c5:fc:95:26:57:49:ef:27:c5:17:2e:22:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E0C742D5DC5A6C41753F73202F41323E27436C
        Validity
            Not Before: Mar  6 04:26:20 2025 GMT
            Not After : Mar  5 04:31:20 2026 GMT
        Subject: CN=13EB269D464ECE9198374618F8005F5A4E7FF69F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:6e:6a:27:e8:ef:5e:90:6f:04:77:e5:cf:
                    08:df:8a:c0:84:7d:fa:e8:a1:14:fe:12:e0:be:7c:
                    e7:05:f4:3c:57:2e:5f:a6:e9:0b:e7:c0:4b:ec:74:
                    bf:12:ee:95:6e:cf:b7:2a:fc:61:22:d2:d9:1d:6f:
                    b5:db:6a:5f:b1:ff:bd:a3:7a:5e:fe:b3:a5:44:88:
                    9c:36:c3:49:89:4f:2e:f3:75:9e:64:08:17:f7:bc:
                    38:28:2e:73:ba:15:93:42:f5:e3:6b:72:e1:bf:6c:
                    b6:5c:d5:a0:5c:f9:9c:a4:24:56:d6:30:8d:fd:17:
                    55:93:b1:e9:6d:ca:da:be:03:27:bc:f7:fe:46:89:
                    1a:7f:7f:cf:e0:88:fc:8f:61:fe:d6:6d:30:34:71:
                    49:39:7c:e3:5c:52:86:e7:ca:80:73:53:6d:fd:71:
                    ad:d8:fd:16:bd:bd:86:8d:3d:c5:ab:78:65:58:74:
                    98:f4:b4:75:94:fc:d3:c7:bf:f4:56:5c:13:c9:0a:
                    2d:f0:17:84:e8:fe:53:cd:dc:3d:19:5e:dc:26:5c:
                    09:4c:ea:b8:cd:7d:25:ea:f2:7b:16:a7:6a:eb:e8:
                    a5:34:dc:bd:c2:26:c1:80:fc:61:e8:f2:ee:ab:d2:
                    74:54:fb:b4:ed:1d:61:e6:13:5f:52:33:33:60:00:
                    ec:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EB:26:9D:46:4E:CE:91:98:37:46:18:F8:00:5F:5A:4E:7F:F6:9F
            X509v3 Authority Key Identifier:
                keyid:42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/3133382e302e3137322e302f32322d3234203d3e20323634353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:8f:50:c0:46:eb:dc:29:8c:9a:b3:3c:da:de:ad:4d:98:38:
         12:28:ae:f0:b0:d7:50:ae:d6:18:9c:c2:f2:8a:a9:ac:fb:f9:
         0a:f9:a0:50:f2:03:ae:63:e3:17:ef:9e:73:a9:b4:d6:7c:4d:
         4d:64:3c:3b:b3:2b:7e:d9:ef:39:64:19:22:90:f7:c9:87:9b:
         cc:2c:63:29:01:4d:c2:f4:14:16:57:0a:69:6a:d1:12:21:9c:
         fe:93:42:86:9c:c8:ff:22:6e:8d:52:f4:7a:b8:30:56:5b:86:
         70:3a:67:48:b9:e3:68:a3:1b:0f:9d:07:3a:15:c6:e0:2e:1a:
         2d:00:03:50:61:ff:c5:97:89:5e:b3:aa:23:83:32:b3:04:d7:
         8d:32:5d:fd:10:f7:aa:22:92:9c:6a:5e:2e:45:e9:5f:4e:05:
         e2:25:35:31:9f:a4:43:ee:df:cd:c0:9c:5c:d3:a7:07:02:27:
         3a:a4:1a:6e:b1:ac:36:e7:65:e4:c4:7b:81:ce:c1:42:33:30:
         50:ab:83:09:92:27:b5:30:7d:5f:f8:c1:82:e6:df:a9:c4:b0:
         59:54:a1:2c:73:d0:d6:a5:1b:79:f5:df:59:8a:5d:b9:ca:fd:
         f8:01:28:d0:c8:6e:4b:fd:7c:49:b3:9b:3a:cd:7c:3a:1c:4b:
         13:a1:9d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:17:29 2025 by rpki-client