Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/3133382e39372e32342e302f32322d3234203d3e20323634313138.roa
File:                     3133382e39372e32342e302f32322d3234203d3e20323634313138.roa (raw, json)
Hash identifier:          WD7M6wU3eaRd4QLn0BTsaWspALy2joQNSK7F8VMXY7o=
Subject key identifier:   3C:FB:AB:22:5E:10:75:AB:C0:51:2D:B8:81:F7:23:E3:B0:C3:7C:6B
Certificate issuer:       /CN=0B31CCC1E89F4389597737BE4B57373331925A2F
Certificate serial:       3468F3C3F8757E3D777A51DA6C5ED86B7052BEAA
Authority key identifier: 0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/3133382e39372e32342e302f32322d3234203d3e20323634313138.roa
Signing time:             Thu 06 Mar 2025 21:46:05 +0000
ROA not before:           Thu 06 Mar 2025 21:41:05 +0000
ROA not after:            Thu 05 Mar 2026 21:46:05 +0000
asID:                     264118
IP address blocks:        138.97.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl
                          rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 14:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:68:f3:c3:f8:75:7e:3d:77:7a:51:da:6c:5e:d8:6b:70:52:be:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B31CCC1E89F4389597737BE4B57373331925A2F
        Validity
            Not Before: Mar  6 21:41:05 2025 GMT
            Not After : Mar  5 21:46:05 2026 GMT
        Subject: CN=3CFBAB225E1075ABC0512DB881F723E3B0C37C6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:20:5b:3a:ff:3e:2e:e2:2c:27:b4:3f:34:
                    ba:6a:a4:0c:8b:76:a8:b7:3b:ae:d9:bb:24:37:ba:
                    0f:d3:2a:39:1f:31:52:01:02:e6:e5:5a:57:db:0a:
                    ab:a0:98:4b:5f:5a:19:a1:96:6d:1b:e0:6d:fd:19:
                    d6:b2:1b:ba:8c:3d:6b:98:bc:ad:fd:5d:dc:ab:2f:
                    cb:4a:d8:9b:47:f0:04:a1:4e:55:92:e1:08:6b:bc:
                    08:9e:e1:76:df:eb:f4:fb:30:0c:ce:19:ee:22:f5:
                    61:73:ee:28:f1:ed:f8:8b:e7:a0:a7:46:84:35:61:
                    38:9c:9f:71:2b:af:ab:1e:2b:d9:57:55:60:1c:c3:
                    e5:dc:c0:ad:81:f5:34:04:6e:32:c7:04:9f:4f:1a:
                    45:04:48:4b:b5:09:0c:44:22:25:9d:d9:0e:04:cc:
                    b6:a7:ea:3b:08:77:1c:90:4f:4c:be:9d:30:ef:a8:
                    93:19:7e:51:be:42:31:10:64:3f:5f:df:0b:66:59:
                    53:d8:2a:1b:22:bb:b4:a3:d4:46:06:2f:87:bb:87:
                    93:30:e4:2a:6c:35:9c:2c:ab:7a:8b:29:c6:1c:2e:
                    a5:4f:21:73:9c:f5:7d:50:b9:62:e7:db:38:be:0b:
                    eb:d4:a1:c0:91:9a:77:1c:76:9e:ef:31:cf:4e:21:
                    1a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FB:AB:22:5E:10:75:AB:C0:51:2D:B8:81:F7:23:E3:B0:C3:7C:6B
            X509v3 Authority Key Identifier:
                keyid:0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/3133382e39372e32342e302f32322d3234203d3e20323634313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:8c:5b:c1:8a:b4:41:8f:e2:6d:76:4a:b7:f0:f7:cf:cc:8d:
         1b:b1:a7:81:bc:de:91:8e:ee:24:9c:f8:6b:1d:f7:98:65:58:
         3b:d9:4c:a4:db:2a:88:44:22:5e:e2:6b:75:f9:55:db:70:59:
         a8:2b:b0:e3:20:32:e3:e4:bd:d3:da:b5:21:43:11:a9:0a:ae:
         8f:32:7c:a4:65:f9:e8:32:69:4a:8e:d8:9d:54:70:a7:b8:7e:
         a2:b4:5d:81:a3:9e:1e:36:fc:e1:fc:62:3e:c3:31:5f:ff:30:
         8d:aa:84:ae:78:d5:50:cc:af:d5:88:91:39:f6:a6:a1:67:72:
         d7:02:18:6e:ab:fc:ca:71:33:94:04:39:01:70:62:2d:e9:20:
         c6:ca:ae:76:75:b4:89:dc:4d:c3:11:33:6e:74:91:18:8e:38:
         e7:d5:17:9d:5a:40:fd:f5:02:c1:92:6b:ce:17:2a:d3:ab:1a:
         88:86:7e:f7:bb:82:c6:0b:6a:91:67:b9:71:a6:d9:eb:8e:26:
         6e:59:47:0d:bb:5f:32:bf:ff:ad:5f:40:89:b9:2b:c8:89:ff:
         46:0a:6d:5e:c0:12:d2:05:1e:7c:c2:f9:d4:24:36:11:1d:cf:
         94:a5:38:74:b7:91:4e:e6:04:c6:1e:85:21:00:9e:0f:1e:af:
         7a:a6:75:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:38:33 2025 by rpki-client