Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e35302e302f32332d3233203d3e20323633383931.roa
File:                     3133382e3230342e35302e302f32332d3233203d3e20323633383931.roa (raw, json)
Hash identifier:          87P4ZthL45ryd5ao/4BROx3S+QtsOjAMhagAkYjLUrs=
Subject key identifier:   F7:2B:97:B2:09:5B:9F:26:65:FB:7A:4D:CA:6B:5A:D9:BB:72:78:CA
Certificate issuer:       /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial:       6ADF67331FC2F83CA275E6245680716699E79F0F
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e35302e302f32332d3233203d3e20323633383931.roa
Signing time:             Thu 20 Feb 2025 11:43:49 +0000
ROA not before:           Thu 20 Feb 2025 11:38:49 +0000
ROA not after:            Thu 19 Feb 2026 11:43:49 +0000
asID:                     263891
IP address blocks:        138.204.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
                          rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:df:67:33:1f:c2:f8:3c:a2:75:e6:24:56:80:71:66:99:e7:9f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
        Validity
            Not Before: Feb 20 11:38:49 2025 GMT
            Not After : Feb 19 11:43:49 2026 GMT
        Subject: CN=F72B97B2095B9F2665FB7A4DCA6B5AD9BB7278CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:c7:a6:a0:53:5a:52:01:62:fd:9c:83:27:
                    72:60:92:af:74:4a:58:fa:8d:19:db:86:a2:b4:8c:
                    e6:53:56:b1:89:db:81:42:8b:c2:ae:db:f7:4d:94:
                    c7:8e:76:61:21:7a:50:5e:e9:0d:a6:77:e6:10:07:
                    72:03:f9:af:fc:2c:6f:b1:27:38:24:bc:0b:68:db:
                    be:95:d3:9f:14:a4:9a:d8:39:e8:0a:ca:79:87:f1:
                    ef:78:0f:a3:72:7b:3f:06:91:95:a5:b8:26:cd:3b:
                    8d:21:a9:2c:19:a3:cf:f4:b4:78:c3:dc:cd:36:43:
                    69:45:18:d0:2e:a9:dc:4e:36:11:24:e7:8e:91:30:
                    6f:90:f4:a7:7e:d8:92:c4:ab:be:af:c5:98:99:6f:
                    d3:f3:ce:70:6b:37:08:32:c4:1e:ed:18:54:24:85:
                    b2:3b:c5:4d:f8:62:36:25:9e:fe:7e:11:1c:dc:dc:
                    a0:7f:b1:d5:17:80:64:13:18:03:c1:ca:81:d7:34:
                    d2:b2:82:ed:a5:fd:83:5c:ac:87:8a:ca:b1:87:4b:
                    a6:2a:09:48:b3:3d:3f:6f:11:a5:a3:d1:1a:8a:15:
                    39:24:73:92:9b:af:e5:d6:f4:f0:52:78:9a:a4:15:
                    0e:43:86:05:49:a3:c3:65:9f:47:c3:17:0e:18:47:
                    5a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2B:97:B2:09:5B:9F:26:65:FB:7A:4D:CA:6B:5A:D9:BB:72:78:CA
            X509v3 Authority Key Identifier:
                keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e35302e302f32332d3233203d3e20323633383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:47:10:91:a1:67:79:f4:bb:fc:95:19:05:6e:c1:9b:39:a3:
         68:49:37:11:de:cd:f9:89:4f:fe:63:06:a8:c2:8b:48:25:5b:
         ae:73:2d:bb:e6:cc:14:45:7e:5c:43:94:bc:f7:d9:86:2d:3b:
         4f:9b:aa:5b:55:cf:a0:56:ed:f5:38:e9:0e:64:7f:8e:83:04:
         be:0f:e5:cf:73:ad:4e:83:c3:6e:48:99:7a:e5:97:cf:e0:fe:
         04:c6:6b:77:70:d5:ce:3d:89:8c:d5:df:df:e5:8b:6b:41:d2:
         06:4b:6b:1b:fd:64:1d:61:52:3c:7c:ea:a4:f7:04:07:0a:fd:
         63:1d:9d:13:12:0e:48:68:c9:38:4e:22:0f:3b:c4:c7:62:7a:
         15:44:fa:52:53:33:65:00:68:82:bc:56:c0:b7:9a:e4:49:09:
         ec:30:6b:f8:ec:cd:32:ba:48:64:d1:8a:e7:10:a0:34:47:7f:
         f3:88:a8:c3:c5:9c:91:f5:7c:5a:9a:1b:b2:9c:04:86:5a:d2:
         51:ec:a7:92:9c:e1:15:c5:6e:fa:03:f0:ea:0a:2e:92:27:91:
         09:ee:6d:87:54:7b:79:71:37:26:27:47:e5:a9:7f:74:b0:14:
         e7:58:03:51:51:a8:e7:5e:e9:4d:e5:13:84:c7:92:bf:4b:57:
         55:f8:e1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:00:57 2025 by rpki-client