Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3233312e302f32342d3234203d3e20323633393935.roa
File:                     3133382e3235352e3233312e302f32342d3234203d3e20323633393935.roa (raw, json)
Hash identifier:          jjJjT28GywBLjygGVXWL4ZlLuMuD46UXs8EBIkhnFL8=
Subject key identifier:   55:8B:B4:4F:12:8C:ED:19:41:DD:FB:1A:B5:B8:D4:E3:5A:78:2A:F5
Certificate issuer:       /CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
Certificate serial:       310FF9A3C69237782283486319E04703F6250D53
Authority key identifier: D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3233312e302f32342d3234203d3e20323633393935.roa
Signing time:             Tue 25 Mar 2025 19:55:16 +0000
ROA not before:           Tue 25 Mar 2025 19:50:16 +0000
ROA not after:            Tue 24 Mar 2026 19:55:16 +0000
asID:                     263995
IP address blocks:        138.255.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 21:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0f:f9:a3:c6:92:37:78:22:83:48:63:19:e0:47:03:f6:25:0d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
        Validity
            Not Before: Mar 25 19:50:16 2025 GMT
            Not After : Mar 24 19:55:16 2026 GMT
        Subject: CN=558BB44F128CED1941DDFB1AB5B8D4E35A782AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:84:3d:2d:14:f8:8a:02:86:e3:ad:a1:34:c4:
                    fa:26:07:bf:09:a0:f3:48:fe:da:54:d6:05:cf:06:
                    db:44:ff:d9:f8:08:e3:62:0b:4a:38:75:b9:ae:2a:
                    ec:99:e8:21:bf:ca:5e:2b:f3:47:79:38:ef:aa:4b:
                    87:9f:99:5c:a1:e1:c3:2a:4b:52:a8:87:7c:b4:22:
                    5b:cf:8b:13:0b:69:0b:4d:58:13:2e:9a:7d:d4:6b:
                    a4:6f:0f:21:f8:28:cc:32:57:09:a3:d9:77:95:74:
                    4e:99:66:1a:a7:05:a9:ff:f7:de:ed:4a:e6:1c:9e:
                    b9:ff:ef:96:f9:48:ef:2c:77:8a:23:76:7c:96:8f:
                    99:45:49:5e:78:87:3b:32:ff:cb:1f:39:ba:89:b0:
                    75:4a:f3:71:d5:18:16:88:ab:94:d6:a3:6d:ea:49:
                    24:f6:ac:4a:2e:c0:d1:5a:b6:8c:27:6e:f6:42:3d:
                    a9:ed:70:b9:8f:55:6d:78:f8:28:63:1b:3a:81:1e:
                    4d:22:71:04:57:ba:71:76:31:09:ba:d2:32:e9:3d:
                    0b:99:da:17:98:21:13:a5:cf:f3:9b:f1:e6:58:d7:
                    a1:41:03:0f:23:a5:42:2b:09:73:36:f1:df:59:b4:
                    65:cf:19:dd:35:c6:0a:34:13:7c:c7:9c:3a:06:28:
                    59:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8B:B4:4F:12:8C:ED:19:41:DD:FB:1A:B5:B8:D4:E3:5A:78:2A:F5
            X509v3 Authority Key Identifier:
                keyid:D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3233312e302f32342d3234203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:9a:b7:be:c2:f8:18:a1:e9:a7:17:ac:ee:7e:87:02:5a:11:
         ce:39:2e:76:50:85:d3:e5:c7:2f:12:e2:8c:ad:7b:7f:2d:fc:
         ac:4e:c1:3a:3e:0d:54:1c:34:6d:b2:d1:96:e8:a0:8c:15:b6:
         a0:6f:01:3a:91:15:6b:0b:e2:50:f3:e5:20:94:60:1c:6b:b1:
         17:78:d3:39:ca:42:3b:04:57:bb:6d:d0:9f:11:c7:dd:c2:61:
         85:0b:96:5f:b5:63:64:6b:bb:75:66:e2:94:f8:01:d6:1b:54:
         99:f8:73:07:53:fd:3d:38:69:a8:f2:50:52:e4:a6:5e:70:eb:
         2c:3b:c2:5b:26:ed:62:54:40:7b:88:7f:65:5d:eb:50:76:f3:
         ac:4f:82:5b:0a:95:cf:86:86:aa:75:7f:60:99:6c:2c:30:c3:
         30:41:74:12:46:5a:de:31:0d:a3:2c:78:3a:44:b2:31:26:f1:
         84:22:11:3d:ed:b8:49:d5:63:78:a7:fc:5f:3f:82:46:ca:ae:
         ef:e7:67:32:c9:b5:bd:56:6e:3a:bb:68:b0:67:d9:39:cd:52:
         11:1a:e5:2b:31:bb:bb:3b:44:a6:99:11:43:50:a9:43:29:c7:
         f8:1f:4f:dd:8a:10:37:84:9a:7b:dc:ef:ad:9d:cf:7c:81:70:
         9c:36:a6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:55:18 2025 by rpki-client