Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/3133382e3131372e3230382e302f32322d3234203d3e203631383536.roa
File:                     3133382e3131372e3230382e302f32322d3234203d3e203631383536.roa (raw, json)
Hash identifier:          g2ciLQp8xBSwqK2haNhsJtJGAmdHrWpaK24rfC6KMaM=
Subject key identifier:   DD:2C:F0:B4:C5:1A:C3:12:70:DE:87:8E:52:D1:6A:F9:97:8D:0B:2E
Certificate issuer:       /CN=9954871A58BD1D563C66245B157E43881A74A8D7
Certificate serial:       0E9BB6377E9D2F20605E42830984348DE432F0A6
Authority key identifier: 99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/3133382e3131372e3230382e302f32322d3234203d3e203631383536.roa
Signing time:             Thu 06 Mar 2025 06:51:55 +0000
ROA not before:           Thu 06 Mar 2025 06:46:55 +0000
ROA not after:            Thu 05 Mar 2026 06:51:55 +0000
asID:                     61856
IP address blocks:        138.117.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.crl
                          rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 20:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:9b:b6:37:7e:9d:2f:20:60:5e:42:83:09:84:34:8d:e4:32:f0:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9954871A58BD1D563C66245B157E43881A74A8D7
        Validity
            Not Before: Mar  6 06:46:55 2025 GMT
            Not After : Mar  5 06:51:55 2026 GMT
        Subject: CN=DD2CF0B4C51AC31270DE878E52D16AF9978D0B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:d4:73:42:ad:da:5e:d7:1b:cb:77:e0:58:
                    4e:8f:a2:f2:bf:59:b3:e3:ce:7d:0a:cf:c6:2f:92:
                    7b:6a:bf:45:17:70:bd:c4:57:c1:a5:60:d1:6c:e2:
                    4d:b8:b8:5f:0c:d7:7b:95:8c:0c:24:28:ca:01:61:
                    bd:8f:26:d2:3e:8a:a4:18:02:f5:e6:97:15:02:89:
                    df:21:52:84:ab:8e:24:c3:22:78:4a:5a:6d:27:49:
                    3d:bf:ee:37:bf:15:86:ae:d6:da:d2:1d:6d:37:fa:
                    a1:70:b0:42:7c:16:01:f7:c6:64:37:60:73:9b:7c:
                    10:9a:9f:0b:5c:23:34:8c:db:8b:32:6f:2e:2b:3a:
                    9d:10:e5:2f:20:ef:7e:33:58:3e:1e:e8:4d:bf:2a:
                    88:46:e2:2b:f6:d7:c8:91:f1:e0:4c:58:4d:a1:d6:
                    4c:36:8c:da:6b:b6:a8:09:10:e4:ba:4b:52:46:60:
                    55:a5:82:ab:0f:9f:3e:6e:8f:22:05:ea:fa:67:e1:
                    4d:ae:30:c3:d5:55:f0:05:f9:b6:7c:60:4d:c6:fd:
                    b0:f3:18:37:fe:7d:16:d4:51:40:da:f4:78:25:60:
                    72:bf:f8:f1:f1:00:20:3d:a9:34:c8:48:48:d4:82:
                    c8:56:c9:84:94:c2:3e:f9:c4:14:41:b3:3f:f0:12:
                    9f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2C:F0:B4:C5:1A:C3:12:70:DE:87:8E:52:D1:6A:F9:97:8D:0B:2E
            X509v3 Authority Key Identifier:
                keyid:99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/3133382e3131372e3230382e302f32322d3234203d3e203631383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:32:02:4d:70:c9:ab:89:59:93:26:20:7a:0c:80:11:b3:5c:
         c8:56:90:75:89:29:9d:97:98:1e:5f:a0:86:8a:cb:5c:94:01:
         a0:e0:5d:07:84:e6:06:4c:0e:0b:82:28:d2:c7:43:d4:b1:0f:
         89:e2:53:ff:f1:2f:f5:a6:de:11:71:86:6b:74:d4:91:d3:a1:
         ca:50:2e:1e:27:75:a3:65:f2:cc:df:50:ea:e1:e0:5f:99:f8:
         2f:f9:04:32:9e:23:93:ae:4a:3e:aa:70:07:63:cb:b2:b2:07:
         38:72:2c:b9:41:e6:8c:8d:b1:9f:2d:69:12:f6:ad:2e:ba:39:
         bb:d1:a7:0d:e8:72:b7:5b:97:45:25:2c:e2:81:b9:fe:e0:ed:
         de:1b:e1:0c:67:f5:f6:e9:d9:fb:d5:ba:a3:df:eb:af:41:b6:
         08:0b:c1:8e:f4:6a:01:ea:f0:35:24:e6:34:33:30:49:36:a3:
         b7:5c:14:87:78:27:8e:b6:3f:b7:8b:25:9b:d0:4f:ba:69:ef:
         46:57:f9:0d:de:22:58:dd:32:70:44:5b:23:c3:53:5d:e3:70:
         45:33:08:83:9e:33:48:5f:d3:72:62:a4:d8:7d:19:51:70:27:
         20:5f:48:d6:73:db:2c:d4:8b:9c:a8:09:a0:8d:d3:49:6c:11:
         96:1d:b8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:19:27 2025 by rpki-client