Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e39372e3138362e302f32342d3234203d3e20323634313933.roa
File:                     3133382e39372e3138362e302f32342d3234203d3e20323634313933.roa (raw, json)
Hash identifier:          sY9kg71+TYduV5tyCgGf0u7O3O/u/6nu9V7LWt58dBM=
Subject key identifier:   A6:21:27:D9:B3:3A:31:0A:35:BE:1D:1C:A2:C2:6A:C8:E6:60:14:C4
Certificate issuer:       /CN=19070C100CE160EA1A2AA743323AC5B5B152D553
Certificate serial:       5C5E44B21C1ADDB1728F1D675F4910C58B03114F
Authority key identifier: 19:07:0C:10:0C:E1:60:EA:1A:2A:A7:43:32:3A:C5:B5:B1:52:D5:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19070C100CE160EA1A2AA743323AC5B5B152D553.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e39372e3138362e302f32342d3234203d3e20323634313933.roa
Signing time:             Sun 26 Jan 2025 20:11:46 +0000
ROA not before:           Sun 26 Jan 2025 20:06:46 +0000
ROA not after:            Sun 25 Jan 2026 20:11:46 +0000
asID:                     264193
IP address blocks:        138.97.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/19070C100CE160EA1A2AA743323AC5B5B152D553.crl
                          rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/19070C100CE160EA1A2AA743323AC5B5B152D553.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19070C100CE160EA1A2AA743323AC5B5B152D553.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 20:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5e:44:b2:1c:1a:dd:b1:72:8f:1d:67:5f:49:10:c5:8b:03:11:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19070C100CE160EA1A2AA743323AC5B5B152D553
        Validity
            Not Before: Jan 26 20:06:46 2025 GMT
            Not After : Jan 25 20:11:46 2026 GMT
        Subject: CN=A62127D9B33A310A35BE1D1CA2C26AC8E66014C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:fd:71:46:1c:e4:6f:4d:82:a5:6e:07:b5:
                    de:bf:2d:33:74:89:c6:08:cc:72:b2:5a:c5:6a:25:
                    db:56:6c:7b:0e:87:ff:5e:06:9a:2b:c1:af:a3:29:
                    4a:63:ee:bd:6a:54:03:57:9f:45:8f:5a:68:b1:a1:
                    05:b8:ce:24:19:0f:7d:99:ae:0d:eb:2b:ad:d2:96:
                    cd:bf:56:39:29:6e:32:ef:22:f5:61:7b:e9:b7:c2:
                    b2:71:30:08:fb:31:62:5a:fb:8c:db:e9:49:26:c7:
                    75:a6:29:89:01:34:bc:1b:41:6e:4b:1f:3e:55:72:
                    d5:65:5b:71:3b:52:ea:31:4d:e4:27:7b:46:d2:59:
                    9f:a5:a3:cb:1b:7c:bd:69:1d:26:b7:52:6d:77:30:
                    1c:eb:9b:ff:50:2f:b2:b0:b9:77:fb:ab:b1:4b:16:
                    b6:c3:2a:4f:cb:8d:5c:38:f4:45:e3:e5:bb:30:26:
                    62:64:c2:82:4d:f8:20:1b:a8:6a:8c:b5:58:50:4d:
                    89:0f:89:0c:bc:79:77:f7:32:e5:72:d8:c6:3a:0e:
                    9e:81:ce:4d:6d:d3:11:41:fb:6a:89:5c:f3:18:6a:
                    d7:ec:eb:f1:e0:3a:d5:cf:63:c6:15:4e:5e:d6:49:
                    f1:53:bb:1f:f5:bd:40:72:c3:cc:fa:e5:01:87:91:
                    a7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:21:27:D9:B3:3A:31:0A:35:BE:1D:1C:A2:C2:6A:C8:E6:60:14:C4
            X509v3 Authority Key Identifier:
                keyid:19:07:0C:10:0C:E1:60:EA:1A:2A:A7:43:32:3A:C5:B5:B1:52:D5:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/19070C100CE160EA1A2AA743323AC5B5B152D553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19070C100CE160EA1A2AA743323AC5B5B152D553.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e39372e3138362e302f32342d3234203d3e20323634313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:b3:66:93:78:38:20:29:8a:6e:62:cf:96:09:9a:8a:11:44:
         88:fc:31:e4:44:30:93:cc:a5:53:98:e0:7b:54:2a:e0:e0:e2:
         af:46:f1:0d:e9:a1:d3:5a:79:70:c4:46:8b:d6:3f:5d:56:4f:
         66:ba:0c:ef:ea:e4:2c:e2:f6:9d:74:d1:b0:06:5a:44:88:66:
         06:af:f7:99:0f:3a:c5:8e:ad:24:66:0c:74:49:b6:cd:f6:e8:
         59:b6:3c:c8:12:fc:90:42:33:35:7c:78:c9:db:ec:8b:a5:8e:
         f4:7f:00:76:3d:33:fd:1a:8a:78:68:36:3d:17:83:ec:dc:f4:
         d0:cd:a4:de:e8:b4:c5:71:37:ed:73:e3:e3:18:06:c7:2f:91:
         56:c2:be:3e:b7:49:d8:12:3d:74:1b:83:01:5d:45:23:11:d8:
         41:61:34:fb:ce:0e:f4:e0:91:e6:b8:a1:a5:dc:1e:12:09:ed:
         b9:e3:49:d9:4d:10:73:0a:7a:b6:30:c7:0d:83:b2:df:9d:20:
         ea:70:b1:a4:16:1a:48:00:48:dc:6c:65:0f:fc:d4:c2:01:1f:
         b2:f8:57:8e:01:b2:c3:7f:15:61:f7:e5:94:d9:4a:e3:59:48:
         d3:f5:0f:52:70:49:4c:e3:f4:b9:4e:ef:2d:8e:e0:09:94:45:
         18:dc:87:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:50:56 2025 by rpki-client