Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133382e3138352e32342e302f32322d3234203d3e203238323031.roa
File:                     3133382e3138352e32342e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          TGC+BSdBBirsS5aYIG8tGlorSgQw/4YNA58ljLjXTzg=
Subject key identifier:   75:12:C7:4E:39:71:5E:87:7B:14:63:EE:C9:6B:26:D2:45:77:FA:BE
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       08FFA1B7B4996368D6D45D99DDE3213CBF28AA2F
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133382e3138352e32342e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 12 Mar 2025 13:33:21 +0000
ROA not before:           Wed 12 Mar 2025 13:28:21 +0000
ROA not after:            Wed 11 Mar 2026 13:33:21 +0000
asID:                     28201
IP address blocks:        138.185.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ff:a1:b7:b4:99:63:68:d6:d4:5d:99:dd:e3:21:3c:bf:28:aa:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Mar 12 13:28:21 2025 GMT
            Not After : Mar 11 13:33:21 2026 GMT
        Subject: CN=7512C74E39715E877B1463EEC96B26D24577FABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cd:69:a7:ec:bf:37:d3:7e:b9:29:66:9f:ba:
                    d1:93:51:74:e1:69:84:a7:26:d6:ba:f6:4a:0b:7d:
                    f4:26:a1:99:96:d5:3e:4b:0f:e0:03:26:c0:0a:ec:
                    69:1e:79:87:e8:a9:ed:ac:f7:0d:6f:10:a0:44:0c:
                    b0:43:fc:8b:22:fb:e2:50:01:31:e9:16:3d:8a:b4:
                    3f:45:42:fd:a3:8d:de:02:9a:8f:2d:5f:cc:ac:4a:
                    4a:b9:e9:ed:0d:b2:7f:14:67:b4:74:b5:ce:ec:43:
                    87:99:ab:0c:58:f1:3d:c1:85:4f:e5:a1:da:e6:4c:
                    c7:f2:ea:35:51:f5:8d:70:ba:42:0f:0c:d7:99:31:
                    2b:1b:1f:9f:d2:70:cc:6d:c9:fb:7b:5c:12:3a:09:
                    c1:2f:f8:84:46:72:de:7e:8c:d4:dc:c2:74:e1:a4:
                    5c:c9:12:20:e5:3b:76:5d:df:7c:49:b7:11:1f:96:
                    83:91:91:4a:fa:3f:dc:ee:fa:02:99:2d:d6:62:06:
                    52:97:9f:66:e8:fd:d4:f2:1c:d5:9c:dd:54:94:0f:
                    80:cc:e4:8b:b4:27:5d:35:ee:30:c5:6c:17:54:97:
                    ac:38:6e:9c:ec:d8:43:9b:d6:39:a1:e6:6e:22:73:
                    9c:18:6e:bc:82:80:cd:4d:fc:84:33:be:88:1b:ac:
                    c5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:12:C7:4E:39:71:5E:87:7B:14:63:EE:C9:6B:26:D2:45:77:FA:BE
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133382e3138352e32342e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:2e:9a:5a:a5:ad:40:30:52:6e:be:40:e6:21:30:31:f6:cb:
         4c:21:66:27:07:c8:b9:83:86:b8:d5:45:c2:cd:4d:5c:af:0c:
         0d:7e:01:e7:d9:38:49:f2:9a:40:b8:b6:57:4d:eb:df:af:db:
         f6:c8:2f:e4:b4:3b:d4:b0:b7:ff:5b:ea:a9:cf:a6:3b:52:d8:
         5e:76:62:30:30:c4:c7:68:e0:9a:e4:ca:2c:09:89:ce:b7:86:
         ad:9f:9b:a5:90:f3:0f:6a:36:1e:c8:7c:80:e9:26:fa:36:28:
         1a:53:62:91:32:20:e3:20:ab:e6:2a:03:80:4a:21:90:47:8d:
         72:45:a6:d9:75:d5:98:52:7c:43:6a:6d:e8:dc:a6:34:e5:75:
         f2:66:61:ec:33:6a:98:7c:61:05:55:ae:9a:e4:ee:37:fc:c0:
         f3:8d:a4:d2:6c:1f:c3:58:cc:f4:76:39:34:99:f6:b3:90:71:
         97:e3:8b:17:ae:9a:6f:b6:bf:b0:59:63:70:fc:72:9f:7e:4a:
         81:bc:df:db:74:10:fd:cb:59:37:be:bc:97:2b:ff:2e:02:41:
         69:9c:47:07:bf:8b:a4:c2:05:fc:3d:08:28:a1:c5:03:a2:9e:
         4e:18:7e:77:3d:aa:90:91:8b:eb:b5:f6:56:9c:12:2f:39:79:
         ea:6a:fb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:07:54 2025 by rpki-client