Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3133382e3138352e38382e302f32342d3234203d3e20323730383737.roa
File:                     3133382e3138352e38382e302f32342d3234203d3e20323730383737.roa (raw, json)
Hash identifier:          ioVUkvkzzC9iDdiPU/PtBssAeixfet+nB6cAtl7hWkA=
Subject key identifier:   09:2E:F1:0E:7E:4C:9F:85:8D:6A:70:86:FF:E1:D6:DF:32:56:45:95
Certificate issuer:       /CN=3E268A146165B7580B59E044B59D275B5F824225
Certificate serial:       69AD71205F64FC8D417CA5D79DA9E4449177418E
Authority key identifier: 3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3133382e3138352e38382e302f32342d3234203d3e20323730383737.roa
Signing time:             Thu 06 Mar 2025 02:05:13 +0000
ROA not before:           Thu 06 Mar 2025 02:00:13 +0000
ROA not after:            Thu 05 Mar 2026 02:05:13 +0000
asID:                     270877
IP address blocks:        138.185.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl
                          rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 00:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ad:71:20:5f:64:fc:8d:41:7c:a5:d7:9d:a9:e4:44:91:77:41:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E268A146165B7580B59E044B59D275B5F824225
        Validity
            Not Before: Mar  6 02:00:13 2025 GMT
            Not After : Mar  5 02:05:13 2026 GMT
        Subject: CN=092EF10E7E4C9F858D6A7086FFE1D6DF32564595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:60:7b:d1:2c:b8:f0:3c:0e:15:95:92:e3:a0:
                    11:a0:bc:ca:ec:1c:8f:b7:96:cf:56:f0:a4:28:40:
                    dd:dc:46:69:3a:52:31:0d:2a:ea:3b:3f:6b:e8:20:
                    38:40:2a:b3:fb:15:ab:45:51:d2:89:79:00:d0:b9:
                    19:af:06:1f:b5:3e:05:ff:6a:5a:3e:a6:a2:03:8a:
                    33:41:01:a5:fd:05:5b:34:e8:1a:ca:bc:4a:7d:13:
                    b3:e8:d2:b6:61:07:9b:d3:38:2f:19:6c:09:2f:d9:
                    c4:bb:b0:48:f9:82:a3:21:30:ee:a9:6c:4a:e7:96:
                    10:7e:f7:c2:48:81:da:69:c0:1d:04:59:5d:35:cc:
                    74:8c:22:9c:46:ca:4f:d1:9c:e1:1a:a7:e3:bc:a7:
                    99:88:7d:f8:16:77:4a:3d:2e:70:d3:2a:bf:f1:a4:
                    1e:05:aa:3b:92:73:31:05:88:1d:96:d4:92:74:3d:
                    4c:4a:e5:e7:fe:02:e5:3c:d2:69:db:e8:3c:80:1f:
                    18:e7:b6:7e:d8:0d:35:4a:23:fd:a1:0f:86:c5:37:
                    6b:ba:bc:84:94:a5:9b:50:08:84:ae:c0:18:26:22:
                    d1:1d:5c:d4:a2:d9:9f:c7:c1:0a:db:d0:73:be:40:
                    02:8c:36:d8:06:0a:b1:9c:50:11:bf:06:f1:11:98:
                    a3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2E:F1:0E:7E:4C:9F:85:8D:6A:70:86:FF:E1:D6:DF:32:56:45:95
            X509v3 Authority Key Identifier:
                keyid:3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3133382e3138352e38382e302f32342d3234203d3e20323730383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:11:60:f7:59:a9:60:ea:64:e5:a1:3d:36:14:b6:d8:ae:7a:
         f4:de:25:71:c2:6f:1b:44:4c:95:28:1f:f7:bd:19:0b:54:79:
         44:02:37:bb:5f:5a:9b:b9:31:da:46:3b:30:ae:e9:6f:03:e1:
         81:2f:12:a8:bb:46:39:70:ff:2b:fd:b6:cf:6b:b4:cd:79:aa:
         ad:12:9e:af:3f:d0:99:43:ad:cc:6f:b9:0a:18:29:1f:b4:f9:
         e7:08:e7:77:7d:d4:7c:8c:e5:c0:69:c5:05:04:7d:92:e2:ae:
         a5:25:66:6a:54:2d:79:98:32:37:64:95:b6:09:b0:36:8c:40:
         64:47:da:76:1b:59:79:c5:34:09:9e:2e:a2:7b:69:19:9a:51:
         9c:af:28:43:44:ec:a9:41:56:14:1c:61:9e:06:c5:d3:f3:80:
         4c:ce:75:22:86:07:5f:53:3a:d4:00:b0:76:4f:95:93:3e:8a:
         fd:fb:3f:91:e8:70:47:c9:c7:16:d3:63:f2:37:53:95:0a:03:
         05:71:cb:b8:06:d6:77:60:9a:04:02:4b:a8:76:ac:2b:b4:d7:
         3c:e5:ff:a3:c9:2f:94:05:6f:38:a5:6f:64:19:b1:70:12:2a:
         cd:b1:13:fd:d5:fb:3e:24:a4:3c:4b:b9:3c:c7:1a:12:35:57:
         bd:7b:66:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:11 2025 by rpki-client