Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131352e302f32342d3234203d3e20323633383937.roa
File:                     3133382e3230342e3131352e302f32342d3234203d3e20323633383937.roa (raw, json)
Hash identifier:          Gg6dIUSk1HkWOG9gsrRBbROrAZUBzUTa4JGZAtAdPF0=
Subject key identifier:   CD:80:2F:0C:B0:07:38:1E:7E:46:A4:4A:46:A1:44:6F:F4:1B:37:BA
Certificate issuer:       /CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
Certificate serial:       71F9C7E15523B07A483503FF2344FF419C4C159F
Authority key identifier: 73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131352e302f32342d3234203d3e20323633383937.roa
Signing time:             Thu 06 Mar 2025 21:59:15 +0000
ROA not before:           Thu 06 Mar 2025 21:54:15 +0000
ROA not after:            Thu 05 Mar 2026 21:59:15 +0000
asID:                     263897
IP address blocks:        138.204.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl
                          rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:17:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f9:c7:e1:55:23:b0:7a:48:35:03:ff:23:44:ff:41:9c:4c:15:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
        Validity
            Not Before: Mar  6 21:54:15 2025 GMT
            Not After : Mar  5 21:59:15 2026 GMT
        Subject: CN=CD802F0CB007381E7E46A44A46A1446FF41B37BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:94:cb:64:4f:97:7d:81:ac:9c:14:fe:ea:11:
                    5d:56:49:f8:44:6f:8d:de:cd:88:29:da:ec:78:91:
                    eb:66:d7:06:fe:35:cc:1d:b8:a6:5a:93:68:56:97:
                    a0:eb:cc:b9:c6:6d:5a:fc:c8:2d:65:4f:73:52:5f:
                    48:08:19:c4:aa:c4:a0:88:ff:e3:ad:99:6f:13:c5:
                    30:1e:6a:cc:94:74:70:77:c1:96:71:b7:ce:57:67:
                    7e:e6:af:05:09:28:1c:8e:cb:7e:fa:a6:98:3e:3c:
                    76:fa:a4:8c:54:ec:0a:7a:36:a1:4f:f0:9f:90:71:
                    cb:17:92:86:06:a8:35:c4:b1:96:02:c1:71:55:b3:
                    69:73:92:bd:17:30:45:ea:e2:9e:e7:02:54:c2:e3:
                    93:b5:27:72:14:be:e2:d7:27:af:4e:3d:36:5a:2e:
                    cd:89:84:45:d4:e6:a4:f3:be:46:b9:2e:19:f1:27:
                    fb:1e:5f:08:5e:fc:df:69:54:33:2f:90:6a:9e:00:
                    b3:d7:73:d7:98:85:21:7d:98:6f:e9:70:e8:81:69:
                    11:fa:e8:4a:7b:eb:d5:67:11:ed:e4:7e:57:aa:4f:
                    f3:25:22:f7:dc:fb:97:1d:0e:ad:d0:a9:56:2c:89:
                    6c:72:09:2e:f9:12:37:0b:17:a1:c2:03:85:a2:bf:
                    9d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:80:2F:0C:B0:07:38:1E:7E:46:A4:4A:46:A1:44:6F:F4:1B:37:BA
            X509v3 Authority Key Identifier:
                keyid:73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131352e302f32342d3234203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:0b:27:45:c0:18:03:04:23:96:20:cc:af:8d:01:98:a7:a9:
         0e:7b:f5:a3:8b:e6:21:41:78:07:ac:2c:17:a6:b6:a1:be:af:
         27:ea:3d:28:01:39:5f:be:56:f0:40:67:6e:52:30:67:a2:90:
         af:c9:42:40:f1:11:08:b2:40:33:a2:e4:c7:c2:91:c3:24:6c:
         0b:52:95:7e:8d:c6:d1:e0:25:3d:29:21:07:1b:de:7c:9b:70:
         f8:1b:6a:5a:97:ed:d2:c0:09:67:2e:10:68:f0:cf:85:a5:5e:
         d0:d0:d9:94:20:fc:26:44:e4:a4:4a:e1:6f:00:ab:a0:ed:5a:
         04:79:1c:91:e7:56:c8:c9:68:ca:86:2f:7e:2d:dd:95:0b:d6:
         c8:42:50:4b:8e:da:27:de:28:33:b6:dc:bb:8c:a6:42:b0:eb:
         13:b5:64:02:05:b8:9c:af:c4:a8:ce:be:06:2e:c7:ff:14:90:
         8a:20:12:5f:a3:2e:5b:33:a3:c6:ee:4b:28:ad:55:c9:04:6d:
         8d:ae:33:ba:fe:64:7a:a4:42:54:1c:4a:ae:74:12:7a:22:57:
         fe:19:4e:71:da:2e:e3:6d:55:e1:78:09:92:f0:fa:42:cc:db:
         13:70:83:9b:b4:60:8a:57:82:5b:2d:52:a7:c8:51:dd:5a:24:
         4e:93:a0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:56:39 2025 by rpki-client