Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB2edonhc5qiWRpZZbNGzXLGwwcUzZ3oZv1QrsnvqeXv/0/3133382e3138352e37322e302f32322d3233203d3e20323634333433.roa
File:                     3133382e3138352e37322e302f32322d3233203d3e20323634333433.roa (raw, json)
Hash identifier:          xekanWvfAxeUXcD9L33ThHQblfEZ5eh8b7hKeJk5H3c=
Subject key identifier:   79:4C:3F:34:07:7A:0E:BE:77:E7:4E:12:55:60:CC:31:99:7B:62:AB
Certificate issuer:       /CN=F344F76594361FCA1022F5214E37E6A29BAC2DA8
Certificate serial:       1D651BEAD3E8D524571EAA27E757F1A198F590BA
Authority key identifier: F3:44:F7:65:94:36:1F:CA:10:22:F5:21:4E:37:E6:A2:9B:AC:2D:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F344F76594361FCA1022F5214E37E6A29BAC2DA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB2edonhc5qiWRpZZbNGzXLGwwcUzZ3oZv1QrsnvqeXv/0/3133382e3138352e37322e302f32322d3233203d3e20323634333433.roa
Signing time:             Thu 17 Apr 2025 20:59:31 +0000
ROA not before:           Thu 17 Apr 2025 20:54:31 +0000
ROA not after:            Thu 16 Apr 2026 20:59:31 +0000
asID:                     264343
IP address blocks:        138.185.72.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CB2edonhc5qiWRpZZbNGzXLGwwcUzZ3oZv1QrsnvqeXv/0/F344F76594361FCA1022F5214E37E6A29BAC2DA8.crl
                          rsync://rpki-repo.registro.br/repo/CB2edonhc5qiWRpZZbNGzXLGwwcUzZ3oZv1QrsnvqeXv/0/F344F76594361FCA1022F5214E37E6A29BAC2DA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F344F76594361FCA1022F5214E37E6A29BAC2DA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 22:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:65:1b:ea:d3:e8:d5:24:57:1e:aa:27:e7:57:f1:a1:98:f5:90:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F344F76594361FCA1022F5214E37E6A29BAC2DA8
        Validity
            Not Before: Apr 17 20:54:31 2025 GMT
            Not After : Apr 16 20:59:31 2026 GMT
        Subject: CN=794C3F34077A0EBE77E74E125560CC31997B62AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:75:49:56:80:ef:04:c8:87:76:ab:71:41:a7:
                    6e:09:45:88:01:ad:f2:1f:bd:e4:ba:17:40:1c:b7:
                    c3:eb:0f:fd:f2:94:5c:4b:2b:df:50:4d:73:f0:cb:
                    c4:a3:e2:a2:7c:8e:56:23:08:61:64:25:c0:67:7c:
                    4e:36:bf:76:de:5b:a3:27:95:0c:ce:40:a2:bd:61:
                    d8:36:02:0e:17:56:dd:00:02:ec:d8:66:e3:1a:d0:
                    25:55:ed:44:33:ed:91:bc:a8:00:bc:0b:22:57:d8:
                    8f:d1:52:b6:7d:2e:0b:39:a5:52:79:e7:20:be:98:
                    9d:57:c6:2b:09:61:dd:a2:e8:58:7e:eb:18:56:0d:
                    a9:08:d1:5b:38:98:83:b0:2d:ed:34:f0:4c:3e:b0:
                    7b:76:8c:ae:cd:34:8c:a8:48:e8:22:2f:cf:8d:06:
                    7e:82:7e:8f:b5:43:ea:6d:fb:ba:ce:f6:33:96:af:
                    87:e6:a8:c9:5c:1c:b1:83:93:90:22:2b:54:22:55:
                    b0:fb:75:39:90:48:97:8b:93:08:0d:30:38:1c:cc:
                    dd:38:64:06:b1:53:86:5b:69:b6:62:ee:fb:a7:64:
                    03:3f:36:da:df:df:64:5e:2b:77:79:42:e3:22:b7:
                    da:20:90:cc:c4:73:74:87:ce:c9:8c:1a:aa:5f:fe:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4C:3F:34:07:7A:0E:BE:77:E7:4E:12:55:60:CC:31:99:7B:62:AB
            X509v3 Authority Key Identifier:
                keyid:F3:44:F7:65:94:36:1F:CA:10:22:F5:21:4E:37:E6:A2:9B:AC:2D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB2edonhc5qiWRpZZbNGzXLGwwcUzZ3oZv1QrsnvqeXv/0/F344F76594361FCA1022F5214E37E6A29BAC2DA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F344F76594361FCA1022F5214E37E6A29BAC2DA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB2edonhc5qiWRpZZbNGzXLGwwcUzZ3oZv1QrsnvqeXv/0/3133382e3138352e37322e302f32322d3233203d3e20323634333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:5a:99:66:bd:48:ed:67:b3:fc:9b:df:0f:72:08:3d:84:9d:
         07:f5:97:e3:ac:fb:1f:9b:c1:e1:d2:a3:de:4d:02:9c:9f:8f:
         b5:ac:3a:ef:80:11:8d:0b:ef:70:a9:11:85:f9:d4:b5:c2:85:
         53:b6:1b:4b:48:60:32:f1:9f:de:65:1b:d4:70:bc:7e:81:db:
         1d:6f:41:e8:1c:7b:96:65:cc:09:56:c9:66:3a:f3:0d:8f:83:
         cc:72:32:4f:91:0a:a7:92:2f:37:60:fd:eb:e3:cc:91:35:c8:
         15:d7:ad:b9:39:d2:4a:18:03:23:4d:37:6f:3f:64:81:2e:23:
         10:91:dc:14:9c:47:cf:11:26:fd:91:c9:44:3f:60:cf:09:44:
         e5:f8:bd:64:8b:aa:45:a8:de:21:e1:f3:64:25:1e:49:32:e5:
         60:34:88:2d:ff:92:25:21:c9:43:78:28:61:c1:34:41:09:68:
         ad:a4:a4:e2:4c:51:be:14:1e:ab:8e:c2:4e:78:0b:b3:7a:4b:
         57:8c:8a:fd:f2:69:d1:82:bb:36:fe:8a:23:8a:10:af:d7:12:
         78:b6:5f:67:c7:ee:71:82:92:71:44:c1:b0:ce:f8:1c:a5:73:
         fa:a6:d1:f6:ad:07:3d:40:ac:d6:74:3b:e3:82:24:17:b7:3a:
         e9:b6:94:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:10:11 2025 by rpki-client