Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133382e3231392e3136352e302f32342d3234203d3e203631363339.roa
File:                     3133382e3231392e3136352e302f32342d3234203d3e203631363339.roa (raw, json)
Hash identifier:          3giDU3fLflyhKGNbZqik4Ts+o5PYFTeDYCsKnGXGTx0=
Subject key identifier:   56:A7:D3:46:38:D3:0C:F1:1D:1C:73:08:2B:8E:87:4E:56:3E:04:F1
Certificate issuer:       /CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Certificate serial:       1605EC82598B52EF0BB2493F3096AC3E1D058659
Authority key identifier: 0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133382e3231392e3136352e302f32342d3234203d3e203631363339.roa
Signing time:             Wed 05 Mar 2025 19:00:20 +0000
ROA not before:           Wed 05 Mar 2025 18:55:20 +0000
ROA not after:            Wed 04 Mar 2026 19:00:20 +0000
asID:                     61639
IP address blocks:        138.219.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl
                          rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 02:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:05:ec:82:59:8b:52:ef:0b:b2:49:3f:30:96:ac:3e:1d:05:86:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
        Validity
            Not Before: Mar  5 18:55:20 2025 GMT
            Not After : Mar  4 19:00:20 2026 GMT
        Subject: CN=56A7D34638D30CF11D1C73082B8E874E563E04F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d3:60:45:8a:f5:ec:ec:9b:c0:c5:5b:6a:61:
                    6d:c5:7a:70:be:89:61:50:64:3c:ee:48:42:47:b5:
                    3c:af:a8:b8:8c:f4:01:84:e5:96:fc:e3:b1:ac:99:
                    c5:57:41:eb:6f:65:44:ef:16:28:93:18:57:81:53:
                    6a:80:04:a0:6c:9d:46:18:5c:5f:41:83:ee:cb:43:
                    1e:c7:58:7a:64:a6:2e:f3:9e:91:f8:2f:9a:45:67:
                    a9:b4:a3:38:85:8e:9f:4d:b4:45:df:df:2f:b3:dc:
                    59:08:05:8f:9f:53:3f:62:c9:f6:80:ab:93:6c:55:
                    bd:15:52:c5:51:cb:e1:15:56:70:31:7a:18:3f:60:
                    e6:0a:16:dc:a9:d8:da:d3:d1:5c:15:5f:af:fc:85:
                    94:93:f7:fb:9e:1f:cd:c9:12:c7:98:b9:a8:97:14:
                    20:6b:b8:0c:db:d8:fe:b4:50:e4:0d:fc:6d:3d:95:
                    1e:f0:e8:f3:f0:12:b2:8e:be:dd:93:49:1e:90:8e:
                    b0:f5:ff:d8:7e:f0:ca:b3:23:66:4e:8d:7a:cf:94:
                    fc:ef:a9:71:b9:5a:6d:2a:7e:40:be:75:ff:15:bd:
                    30:6c:f8:8e:ab:5a:c0:1c:7d:17:6d:23:68:a8:78:
                    99:fb:41:c2:e4:42:c7:93:a9:f1:89:c7:3e:37:ae:
                    0f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A7:D3:46:38:D3:0C:F1:1D:1C:73:08:2B:8E:87:4E:56:3E:04:F1
            X509v3 Authority Key Identifier:
                keyid:0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133382e3231392e3136352e302f32342d3234203d3e203631363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:8b:d3:4c:7d:ff:c6:54:82:86:85:02:f6:c4:b1:66:8d:ed:
         02:d8:a0:90:2b:72:15:22:e0:6c:4e:e6:93:da:84:f6:fd:ea:
         1b:cd:57:7e:a5:7b:8a:57:6b:19:1a:ed:bb:d0:92:54:ac:65:
         47:0c:7a:66:c3:15:a3:00:89:bc:82:0c:11:e6:bc:36:46:ae:
         bb:ed:ed:fb:c0:5e:62:e9:56:bd:7b:a7:25:f1:83:de:8c:b0:
         33:c3:67:93:38:05:5b:21:f8:12:1d:e3:b0:b9:f9:e2:1d:c2:
         8c:43:82:cd:a3:b9:b9:ad:5f:ed:3c:68:f9:60:80:0d:58:75:
         e3:67:ae:49:b2:42:75:fa:55:e2:16:93:9c:72:5a:e3:2b:8b:
         48:c4:11:24:8a:03:d4:f7:50:43:35:91:56:1a:39:9a:e8:f8:
         41:e3:d7:ce:21:fd:4b:ab:6d:c0:86:3f:7d:1d:72:bf:d0:2c:
         5c:da:22:6b:54:3d:e0:41:e6:55:06:0e:45:6c:5d:06:15:32:
         48:40:50:f5:fa:6a:23:e7:3d:d5:d2:d7:33:6e:f0:9b:34:33:
         83:20:c0:94:dd:92:dd:f8:04:35:50:b7:99:ff:2f:e0:8a:74:
         e0:ed:0b:68:6b:8c:63:87:70:8d:d1:1e:d2:88:69:8e:19:86:
         3a:ce:e6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:43:18 2025 by rpki-client