Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/3133382e3138352e3133302e302f32332d3234203d3e20323633393134.roa
File:                     3133382e3138352e3133302e302f32332d3234203d3e20323633393134.roa (raw, json)
Hash identifier:          PLLPqD8VvCNsr4UcJhGrUaUdLmH74WeNd2pv1jnl53M=
Subject key identifier:   BB:E4:5E:E4:DD:A2:23:0C:ED:BD:D4:E5:B9:86:0E:1E:B3:1A:7A:4C
Certificate issuer:       /CN=32F59A098BBE3BAFB45736B5DA4B6211B4E55561
Certificate serial:       360858827595A4DDBF9C132832164BB0C45E65B3
Authority key identifier: 32:F5:9A:09:8B:BE:3B:AF:B4:57:36:B5:DA:4B:62:11:B4:E5:55:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/3133382e3138352e3133302e302f32332d3234203d3e20323633393134.roa
Signing time:             Fri 07 Mar 2025 01:00:33 +0000
ROA not before:           Fri 07 Mar 2025 00:55:33 +0000
ROA not after:            Fri 06 Mar 2026 01:00:33 +0000
asID:                     263914
IP address blocks:        138.185.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.crl
                          rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 17:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:08:58:82:75:95:a4:dd:bf:9c:13:28:32:16:4b:b0:c4:5e:65:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F59A098BBE3BAFB45736B5DA4B6211B4E55561
        Validity
            Not Before: Mar  7 00:55:33 2025 GMT
            Not After : Mar  6 01:00:33 2026 GMT
        Subject: CN=BBE45EE4DDA2230CEDBDD4E5B9860E1EB31A7A4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:68:d1:c1:6e:ba:8c:6d:bb:dc:f1:2d:9d:99:
                    46:dd:f7:55:d3:eb:42:68:69:ca:97:97:6a:ea:d9:
                    9c:14:ca:47:08:87:bc:aa:cf:6f:d2:a1:fb:16:62:
                    27:e6:32:c2:ad:bf:04:39:75:42:28:d6:a7:9f:a3:
                    04:40:74:42:82:b3:d3:23:4d:6a:21:26:2d:1c:ac:
                    8a:60:a1:d0:b5:3c:09:74:8f:9a:c2:3c:41:4e:d3:
                    29:2a:f0:cb:f8:73:f2:7e:a6:13:ed:25:84:d7:bc:
                    ec:77:9b:b9:a2:4c:5c:20:d7:b8:c6:4b:02:19:f4:
                    ed:5d:b8:96:ca:42:5b:b3:98:d9:48:3f:78:2a:54:
                    2c:ce:31:60:b0:e9:e5:fe:24:d7:d2:54:49:22:e4:
                    c8:3d:07:25:91:7a:44:ec:d9:12:93:67:0f:22:17:
                    26:bd:ee:cd:52:38:a7:2b:d9:89:70:78:04:18:70:
                    ee:d0:c3:d0:2a:44:de:7c:db:5f:88:39:b2:ec:30:
                    bd:09:61:a0:9e:ef:fc:a8:37:94:a2:d7:50:2f:dc:
                    1a:85:65:5e:f8:1b:c8:db:44:6a:9a:88:be:ad:4a:
                    04:1c:33:6d:16:69:5d:71:dd:21:57:9f:12:f4:2b:
                    c1:a6:38:5b:9c:91:18:be:35:25:1d:80:10:96:36:
                    6d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E4:5E:E4:DD:A2:23:0C:ED:BD:D4:E5:B9:86:0E:1E:B3:1A:7A:4C
            X509v3 Authority Key Identifier:
                keyid:32:F5:9A:09:8B:BE:3B:AF:B4:57:36:B5:DA:4B:62:11:B4:E5:55:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/3133382e3138352e3133302e302f32332d3234203d3e20323633393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:f9:f9:ae:2a:ea:59:c6:46:34:f8:9e:8c:fc:e6:06:a9:cd:
         aa:de:03:1f:35:20:bd:27:a7:66:d0:93:0b:79:56:2d:2d:f8:
         19:f1:40:ff:01:22:8c:fa:db:6d:43:88:dc:b6:eb:73:1b:fa:
         9c:30:67:45:c8:22:68:23:0a:f5:6e:ba:66:50:cb:62:e4:e5:
         d2:29:a7:03:9d:19:dc:ba:32:ab:1d:2b:88:38:f0:99:c0:fd:
         7c:3d:7d:60:96:50:93:9a:ad:49:50:d6:22:dc:32:15:80:d0:
         82:30:08:f6:0a:f5:ea:a0:30:a5:9a:11:28:b0:26:2c:dd:62:
         f0:43:25:ac:13:bc:5e:0f:50:6d:ba:32:4f:7a:13:19:db:5e:
         80:63:9b:dd:c1:f5:fd:b4:2c:dd:a0:08:13:6b:9c:ec:0f:5c:
         3c:37:d6:55:1f:fa:05:96:3f:39:7d:48:24:1a:63:87:9b:e1:
         37:c2:9d:6a:e3:f1:b8:c8:f8:48:e6:e6:09:a1:bc:31:8c:38:
         2c:4f:b5:86:f9:fd:db:16:86:37:56:3b:f6:ca:44:28:80:44:
         21:f0:49:e3:6e:0b:e6:a7:70:ac:d4:5b:e6:3f:1b:08:9b:57:
         5c:2e:e2:eb:7c:e0:7a:97:b0:aa:20:a5:f1:f1:24:28:be:0c:
         bd:72:77:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:19:18 2025 by rpki-client