Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3133382e3131382e3130322e302f32332d3233203d3e203532373038.roa
File:                     3133382e3131382e3130322e302f32332d3233203d3e203532373038.roa (raw, json)
Hash identifier:          6SMyLXYm7o+6nD4HiC1sx57AD5tgiDGsqISt31nmv/M=
Subject key identifier:   C1:CE:7C:42:38:C0:96:1E:74:66:56:19:04:16:0E:E5:81:3F:09:06
Certificate issuer:       /CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
Certificate serial:       64CDB895854B2D5230A34D7DF4587D495C194980
Authority key identifier: 06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3133382e3131382e3130322e302f32332d3233203d3e203532373038.roa
Signing time:             Wed 05 Mar 2025 19:00:27 +0000
ROA not before:           Wed 05 Mar 2025 18:55:27 +0000
ROA not after:            Wed 04 Mar 2026 19:00:27 +0000
asID:                     52708
IP address blocks:        138.118.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl
                          rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 16:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:cd:b8:95:85:4b:2d:52:30:a3:4d:7d:f4:58:7d:49:5c:19:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
        Validity
            Not Before: Mar  5 18:55:27 2025 GMT
            Not After : Mar  4 19:00:27 2026 GMT
        Subject: CN=C1CE7C4238C0961E7466561904160EE5813F0906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2b:e6:4a:ac:e3:10:1e:45:1f:01:50:98:31:
                    96:88:41:a1:ae:63:ac:f3:1d:14:05:51:fe:f0:0f:
                    b1:87:f1:7f:5a:44:a4:5e:40:20:07:54:14:13:91:
                    ed:d8:92:5e:65:63:cc:f0:1f:28:85:e0:ab:bb:8d:
                    1d:e1:4d:b0:e7:24:0e:3c:b1:46:97:80:af:96:d2:
                    df:d8:68:26:af:a6:5b:0d:e9:67:a2:51:ee:1a:33:
                    15:9e:38:39:60:c7:67:a7:87:6d:87:fa:b3:2a:40:
                    1f:4b:da:63:4f:4d:67:d7:a4:06:d4:be:30:ce:1c:
                    f7:15:3c:56:b8:50:a0:55:02:f8:15:7b:22:ff:b2:
                    32:a4:fa:e3:27:3e:b8:c0:b9:1e:f3:4f:f7:dd:15:
                    f9:54:9b:07:8d:e5:18:86:46:5c:54:6f:f0:6c:cb:
                    56:fd:30:02:53:d8:e2:d3:7f:8a:c8:55:6a:d4:41:
                    15:ae:b8:90:9f:9c:02:61:36:66:a0:32:06:c2:9b:
                    67:4e:23:b7:85:1f:d5:10:eb:eb:10:d9:60:eb:0e:
                    c4:4e:ca:a0:c5:73:54:76:0d:1d:d7:1d:d5:3c:ee:
                    91:6e:89:c9:ed:25:44:4d:05:12:6a:b6:8c:35:c4:
                    31:66:8a:be:b4:a1:6c:b1:1d:ba:b0:6d:77:ca:97:
                    a5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CE:7C:42:38:C0:96:1E:74:66:56:19:04:16:0E:E5:81:3F:09:06
            X509v3 Authority Key Identifier:
                keyid:06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3133382e3131382e3130322e302f32332d3233203d3e203532373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:f0:e8:7e:b7:a9:d8:e1:7f:4c:69:db:e1:c5:74:d9:1e:f3:
         c6:ac:ce:74:dd:ac:43:38:82:82:dc:bb:14:dd:5c:42:fc:88:
         2b:aa:32:e9:02:73:3f:68:7e:24:9a:3a:0e:a3:82:58:e0:b0:
         0e:cc:33:f0:25:c3:f0:82:31:1f:a6:cf:2c:f7:20:67:00:ab:
         11:3c:68:a7:f7:df:a2:f6:29:13:4d:f7:78:29:93:19:22:35:
         5c:c1:58:e2:dc:61:df:12:05:1b:81:be:e4:c2:2c:ed:50:94:
         da:dc:79:0f:71:62:3b:ba:f4:8a:6b:13:8a:93:be:f3:fa:8f:
         7c:84:7d:c5:c7:40:f5:9c:fa:59:25:4a:67:ed:9c:08:0e:c5:
         2d:5e:08:d4:85:56:67:c6:e2:c4:cc:3e:45:e0:05:4f:3b:9f:
         4a:f2:d8:a6:fb:b5:f5:cb:0b:88:24:0b:7c:14:9e:78:60:6c:
         07:01:b9:72:44:34:0d:e1:a4:a0:fc:1f:f7:71:06:10:70:ae:
         8d:c0:c5:0f:2c:ae:26:48:5a:4a:4f:ab:5c:e3:cf:34:3a:7e:
         8c:90:39:f7:5f:65:b3:d5:fa:16:23:a3:ea:ed:0d:ed:bf:cb:
         db:70:80:b8:69:ea:d3:0e:38:eb:57:67:d7:f4:b3:b2:9a:9f:
         10:2e:d7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:03:27 2025 by rpki-client