Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3133382e39342e3132342e302f32322d3232203d3e20323639303733.roa
File:                     3133382e39342e3132342e302f32322d3232203d3e20323639303733.roa (raw, json)
Hash identifier:          wOjC17/S/kyLiiFPh/us7vwX5Dv8/uJeUJdVGTbrpM8=
Subject key identifier:   78:F5:94:BB:5D:7F:0B:6A:2C:DF:CE:3B:90:1E:64:0D:22:C4:F3:91
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       69472F8FE4B1EBF749DC76E6E805EA7B690CBD37
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3133382e39342e3132342e302f32322d3232203d3e20323639303733.roa
Signing time:             Tue 22 Oct 2024 14:21:49 +0000
ROA not before:           Tue 22 Oct 2024 14:16:49 +0000
ROA not after:            Tue 21 Oct 2025 14:21:49 +0000
asID:                     269073
IP address blocks:        138.94.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 16:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:47:2f:8f:e4:b1:eb:f7:49:dc:76:e6:e8:05:ea:7b:69:0c:bd:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Oct 22 14:16:49 2024 GMT
            Not After : Oct 21 14:21:49 2025 GMT
        Subject: CN=78F594BB5D7F0B6A2CDFCE3B901E640D22C4F391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:04:cf:d4:ec:93:85:1a:b4:f4:15:98:3e:c5:
                    f6:c7:43:28:fa:ae:08:5f:ea:42:0c:65:c4:31:a8:
                    66:77:1a:db:84:73:b5:3a:c6:b2:ca:55:2b:b2:8a:
                    48:d1:fe:85:11:46:08:45:83:23:be:a8:f8:dc:3d:
                    e5:ea:bf:7e:1b:f6:54:3c:90:b4:98:09:58:fb:c7:
                    b9:dc:d5:70:6f:3b:bb:00:9a:1c:4e:12:23:83:f0:
                    ed:d2:b0:2f:eb:0d:7f:db:28:38:78:34:44:9b:d6:
                    0c:03:3c:b3:fa:6c:95:4d:46:3c:68:e8:26:6f:c2:
                    4f:3e:d1:9c:c6:83:9d:ce:f2:be:07:55:56:e0:e7:
                    39:56:8e:39:6f:1f:d4:de:79:9c:3e:1a:76:c8:17:
                    a4:47:55:49:33:87:25:46:f3:ac:4e:40:20:cd:75:
                    b6:18:30:7f:4d:0a:81:78:45:05:eb:50:07:d2:cb:
                    cb:46:c0:8b:c0:2f:fb:ec:05:1d:84:fa:0d:b4:fd:
                    a4:ea:df:1b:45:a7:e2:49:f4:1f:40:d7:05:40:eb:
                    2d:0a:0d:22:98:76:aa:09:32:3a:44:a3:2a:6f:e8:
                    48:46:23:e8:31:0e:1f:a3:0a:1b:1c:d6:27:eb:89:
                    91:9a:65:fa:1c:73:03:c8:91:9c:d4:15:13:ee:81:
                    df:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F5:94:BB:5D:7F:0B:6A:2C:DF:CE:3B:90:1E:64:0D:22:C4:F3:91
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3133382e39342e3132342e302f32322d3232203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:61:a1:51:c5:1c:25:35:aa:e4:fd:2c:aa:4d:96:66:3e:de:
         8b:f1:d2:7c:ee:51:df:f3:7f:b9:38:04:9c:a7:45:c7:ce:44:
         5b:3a:44:3a:9b:8c:60:95:ef:d0:ce:05:a8:6d:ad:ba:83:37:
         d9:86:ea:09:5d:2b:3a:91:38:3a:fe:49:8a:4c:7a:bd:d7:6d:
         0b:9c:d2:6f:97:77:ed:6f:34:c5:3d:a4:a9:c2:7c:33:93:54:
         67:34:8a:e5:34:a1:44:e7:d1:3a:8d:c5:77:34:87:56:a2:9d:
         72:af:45:ba:6f:23:f4:d5:cf:18:2e:66:70:c9:36:de:dd:67:
         33:87:a0:6d:87:ae:cc:21:5d:6e:4f:45:01:16:a6:87:b7:87:
         78:64:c2:ba:d4:12:4c:87:96:b9:c9:5b:e7:bb:9b:cd:97:09:
         a5:fe:28:3f:30:4c:59:6c:d6:6d:a8:88:02:ad:d3:2e:18:30:
         be:2b:24:94:9b:f8:40:c8:3e:c0:aa:62:73:f5:0b:6e:ca:22:
         71:cc:8b:4a:f6:da:0b:63:47:36:4d:bd:07:d9:e7:69:9c:58:
         87:82:e0:bd:03:a2:61:f7:39:1d:14:15:a7:8c:84:6c:0e:bf:
         6a:e4:30:25:f5:5f:21:00:fc:80:28:7c:05:df:34:34:5f:99:
         61:36:3c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:31 2025 by rpki-client