Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3133382e302e39322e302f32322d3332203d3e20323632343037.roa
File:                     3133382e302e39322e302f32322d3332203d3e20323632343037.roa (raw, json)
Hash identifier:          Tuo2Gz0Z4FW3Rz8obmFvJnNUUbzJ9aY9iIJRkD+NWR0=
Subject key identifier:   08:28:0A:35:2D:2E:0D:CD:5C:B2:05:B9:5B:95:5B:2A:90:E7:8B:11
Certificate issuer:       /CN=53BEC138BA48B09E02E2418EF43492F43DCC039D
Certificate serial:       27E2BA4EEFF3FF9083C67DC694421C69A12383C2
Authority key identifier: 53:BE:C1:38:BA:48:B0:9E:02:E2:41:8E:F4:34:92:F4:3D:CC:03:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53BEC138BA48B09E02E2418EF43492F43DCC039D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3133382e302e39322e302f32322d3332203d3e20323632343037.roa
Signing time:             Wed 19 Feb 2025 16:28:20 +0000
ROA not before:           Wed 19 Feb 2025 16:23:20 +0000
ROA not after:            Wed 18 Feb 2026 16:28:20 +0000
asID:                     262407
IP address blocks:        138.0.92.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/53BEC138BA48B09E02E2418EF43492F43DCC039D.crl
                          rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/53BEC138BA48B09E02E2418EF43492F43DCC039D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53BEC138BA48B09E02E2418EF43492F43DCC039D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e2:ba:4e:ef:f3:ff:90:83:c6:7d:c6:94:42:1c:69:a1:23:83:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53BEC138BA48B09E02E2418EF43492F43DCC039D
        Validity
            Not Before: Feb 19 16:23:20 2025 GMT
            Not After : Feb 18 16:28:20 2026 GMT
        Subject: CN=08280A352D2E0DCD5CB205B95B955B2A90E78B11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0d:25:09:05:7b:53:d1:1b:86:23:2d:5a:cd:
                    c1:6e:5a:c2:42:41:26:24:1c:fd:49:e1:1e:4f:b9:
                    55:27:99:8a:5a:1a:14:a1:a0:32:9f:94:70:22:d8:
                    67:ab:be:d9:ae:eb:94:a0:8e:33:0f:1d:ed:45:8f:
                    0c:d7:87:87:a2:95:8c:96:92:5d:10:ba:14:ff:d7:
                    ae:54:0e:b7:76:25:ce:9b:0d:83:8d:ae:a4:cb:d6:
                    78:5a:82:c0:42:a3:23:28:05:79:9c:0d:21:bb:2a:
                    0b:f1:98:8c:0f:df:1a:b9:14:4a:32:f9:17:0b:6a:
                    ac:82:ed:da:f5:55:a4:88:1f:3a:09:a6:2b:72:04:
                    fd:90:68:d8:fd:b4:92:6d:17:1c:51:b7:a1:4d:0c:
                    96:dd:86:13:62:34:0c:48:06:c9:22:31:92:9b:01:
                    cd:a5:f5:4c:75:a6:5d:91:19:78:ab:c2:7f:a0:6d:
                    9d:33:f2:bc:31:d4:90:ba:d6:91:89:9d:0b:32:74:
                    d5:23:fb:ea:03:71:f1:ae:fa:39:6d:c0:ae:5e:f2:
                    5c:0c:11:ed:18:3c:38:28:fc:77:82:1d:b0:ed:ed:
                    42:a2:6b:68:56:d6:8b:02:1b:19:05:0f:c4:e9:af:
                    51:a0:62:b6:46:bc:b4:9e:42:ca:03:40:9a:c3:67:
                    e6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:28:0A:35:2D:2E:0D:CD:5C:B2:05:B9:5B:95:5B:2A:90:E7:8B:11
            X509v3 Authority Key Identifier:
                keyid:53:BE:C1:38:BA:48:B0:9E:02:E2:41:8E:F4:34:92:F4:3D:CC:03:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/53BEC138BA48B09E02E2418EF43492F43DCC039D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53BEC138BA48B09E02E2418EF43492F43DCC039D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3133382e302e39322e302f32322d3332203d3e20323632343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:6d:45:bd:e6:35:2a:9e:4a:e4:a2:9b:85:81:e8:e7:fe:3e:
         ef:c2:2f:f2:69:e0:08:87:8f:2c:53:43:08:ea:5c:0d:f5:e0:
         73:df:17:4d:06:8c:51:5e:92:22:20:7c:af:e7:a6:04:eb:1b:
         52:93:fb:e7:9b:0d:2f:c2:01:2f:27:a6:77:e0:5b:09:83:dd:
         a4:c7:2a:7e:30:11:29:ff:c3:d5:2c:e4:17:78:ba:fc:49:78:
         8b:e7:50:f3:33:ad:4d:dc:cf:eb:83:03:72:4f:26:8a:d1:d7:
         3a:7e:85:8a:c5:ed:6a:fc:a6:89:6c:d5:73:91:1b:11:a8:90:
         e3:36:46:da:76:50:81:92:8a:ce:15:28:ff:5d:11:de:c7:ce:
         66:4c:a6:0c:6e:0a:55:2e:bd:d8:6d:91:83:97:a8:53:ed:f5:
         7d:75:cb:f1:1f:30:a0:71:4a:2a:72:89:20:f5:b9:c9:ee:a6:
         bd:c4:7c:88:29:55:4d:56:50:b5:67:cf:e9:fa:67:56:0e:af:
         58:38:24:3a:2d:a1:57:bc:a0:27:e3:a3:7b:2d:e8:17:40:d0:
         25:a6:31:4f:33:14:32:b2:f5:85:2d:ac:ca:64:1d:43:6b:b3:
         3f:53:07:c9:e7:d7:59:c9:ff:eb:c8:63:8e:07:28:06:b8:3d:
         6c:b9:e7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:26:34 2025 by rpki-client