Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136372e302f32342d3234203d3e20323730393130.roa
File:                     3133382e3132312e3136372e302f32342d3234203d3e20323730393130.roa (raw, json)
Hash identifier:          smaUHbT25OXhUmvU+Kn4HyZtcLPSslJSZIjbPHYe0vU=
Subject key identifier:   9B:F6:FB:B2:48:AA:A6:E6:1A:D0:DF:9E:03:3C:E8:BF:79:34:CC:94
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       7CD4A467ED28F6B76305A33BB809A363BA2D1AA1
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136372e302f32342d3234203d3e20323730393130.roa
Signing time:             Thu 06 Mar 2025 07:44:37 +0000
ROA not before:           Thu 06 Mar 2025 07:39:37 +0000
ROA not after:            Thu 05 Mar 2026 07:44:37 +0000
asID:                     270910
IP address blocks:        138.121.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
                          rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 15:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d4:a4:67:ed:28:f6:b7:63:05:a3:3b:b8:09:a3:63:ba:2d:1a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Mar  6 07:39:37 2025 GMT
            Not After : Mar  5 07:44:37 2026 GMT
        Subject: CN=9BF6FBB248AAA6E61AD0DF9E033CE8BF7934CC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:01:90:e8:6f:9a:58:0a:70:5d:a4:81:b1:69:
                    94:c5:76:4c:96:bc:79:db:79:8b:59:5e:02:ef:35:
                    62:e5:00:74:c5:9a:2f:28:1a:05:08:9a:76:26:8a:
                    c9:8f:33:bf:75:0c:c9:44:5c:30:46:0b:36:a1:b3:
                    a2:07:1c:81:d2:8c:2f:e9:7a:0e:04:ea:12:6f:18:
                    e0:bc:11:7c:ca:56:27:0d:da:41:27:cf:cf:9c:95:
                    e4:d7:d1:ec:31:36:70:a7:a3:d6:de:de:d1:97:1a:
                    02:0a:82:ec:5d:9c:31:0b:d2:06:64:59:6d:96:7a:
                    ba:fb:57:84:53:79:48:a0:8b:9d:4b:9e:f1:7f:3f:
                    d8:21:79:a7:0d:67:06:1d:73:4d:0f:3c:5e:28:59:
                    3a:04:9f:54:58:fe:c8:b1:7e:8d:6c:1a:0a:81:67:
                    2c:68:0f:68:88:f8:2c:62:67:bd:5b:c4:77:ca:bf:
                    24:db:89:73:f8:84:1f:04:c9:0d:e4:5e:4d:03:84:
                    ff:8e:48:11:42:ca:d2:3a:6e:fc:fd:48:34:fd:fd:
                    04:8f:71:6b:eb:e3:35:6a:33:38:2b:e9:7e:25:8d:
                    87:49:19:28:af:7e:97:51:97:9c:59:f1:e0:36:e9:
                    01:26:4a:8c:20:dd:df:72:e9:3a:4d:88:20:65:fc:
                    89:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F6:FB:B2:48:AA:A6:E6:1A:D0:DF:9E:03:3C:E8:BF:79:34:CC:94
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136372e302f32342d3234203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:9f:10:e6:85:dd:31:ca:2a:39:dc:39:6b:f7:6e:8d:2c:ba:
         d2:fe:63:9a:5e:a9:00:34:3f:91:fe:d7:86:7f:48:03:97:b5:
         c6:90:4c:29:cb:cb:ba:2b:c2:58:48:d3:2b:4e:6a:f8:25:69:
         be:8f:32:2b:af:13:42:90:da:b1:a3:13:75:79:b1:f8:1c:67:
         a3:7a:9d:03:3d:b4:32:35:40:bb:d1:fe:60:7c:4d:d6:56:8f:
         bf:72:48:08:54:45:bf:8d:48:53:68:12:43:bc:2d:e6:c9:a4:
         f5:09:08:3d:9a:69:c5:46:d9:56:df:65:24:08:54:37:98:a1:
         4c:16:e7:e3:4a:0e:81:9c:ad:00:88:cf:3b:b1:96:a9:d9:39:
         7b:47:b5:e3:95:20:4e:1d:39:fa:9a:ad:92:42:b3:0b:01:3e:
         de:ca:3a:0c:72:5e:b1:fb:4f:18:f0:73:a2:d3:9e:33:8b:62:
         0e:36:50:e4:cb:3b:80:c2:d7:f8:32:b0:8f:86:3a:b0:6b:8a:
         c6:d1:4e:03:9a:4f:b2:f4:35:1d:91:cf:e4:ee:07:79:ec:1c:
         6d:9f:60:63:86:fb:d1:5f:7f:99:37:28:ec:37:8f:91:52:14:
         09:51:cf:89:8b:86:5a:8e:c9:b0:63:0d:83:16:c1:fd:f7:80:
         aa:b2:f9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:03:30 2025 by rpki-client