Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa
File:                     3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa (raw, json)
Hash identifier:          liepcxCvkjbCDzQ0YMEWTI1bYmZJYvKkWRO32cJjMok=
Subject key identifier:   E9:EA:A2:A5:1D:18:10:52:00:83:1A:FE:F8:F8:98:82:20:BE:DE:EC
Certificate issuer:       /CN=E501E8B7D257D1E26AF1E28413D4F5DD19579534
Certificate serial:       21FC53E5CC685D2E95D40D2AF8CA250870AA383F
Authority key identifier: E5:01:E8:B7:D2:57:D1:E2:6A:F1:E2:84:13:D4:F5:DD:19:57:95:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E501E8B7D257D1E26AF1E28413D4F5DD19579534.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa
Signing time:             Fri 21 Mar 2025 15:57:10 +0000
ROA not before:           Fri 21 Mar 2025 15:52:10 +0000
ROA not after:            Fri 20 Mar 2026 15:57:10 +0000
asID:                     264278
IP address blocks:        138.121.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/E501E8B7D257D1E26AF1E28413D4F5DD19579534.crl
                          rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/E501E8B7D257D1E26AF1E28413D4F5DD19579534.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E501E8B7D257D1E26AF1E28413D4F5DD19579534.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 08:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fc:53:e5:cc:68:5d:2e:95:d4:0d:2a:f8:ca:25:08:70:aa:38:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E501E8B7D257D1E26AF1E28413D4F5DD19579534
        Validity
            Not Before: Mar 21 15:52:10 2025 GMT
            Not After : Mar 20 15:57:10 2026 GMT
        Subject: CN=E9EAA2A51D18105200831AFEF8F8988220BEDEEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:8b:7c:a3:db:0e:38:a3:32:d3:8f:f3:08:3f:
                    61:9c:b5:34:97:82:50:c5:36:f1:70:6e:6d:e3:2a:
                    52:51:c7:40:f3:5a:fa:c9:02:d3:d8:6a:82:bc:05:
                    32:e3:b9:ff:e8:da:c3:a6:3a:e4:5f:bc:c9:18:28:
                    ee:21:79:47:37:a8:3c:6b:72:90:de:3d:b5:2d:ea:
                    f2:ac:c0:98:ef:a9:c0:fe:78:34:de:60:9f:f6:85:
                    41:0e:ca:10:6c:f3:62:1d:3b:9b:df:92:d7:c4:4b:
                    b3:fa:3e:34:fe:4f:19:83:55:26:67:9e:33:63:02:
                    8c:3b:5b:1d:21:90:af:b9:43:28:fa:4d:28:ba:13:
                    c1:f0:7e:11:ad:5a:be:a9:9b:9f:34:f2:c3:39:3a:
                    a4:3d:42:3a:d0:96:09:ac:7c:77:80:e0:8c:59:a4:
                    43:31:6f:4e:97:0e:c2:fb:0c:3b:bd:9a:5a:1d:4f:
                    02:cd:a1:38:63:fd:4b:50:a7:63:47:0d:61:ea:a3:
                    9a:df:0f:67:7d:f1:a5:0d:6a:39:3b:d1:fb:4c:1b:
                    a8:9d:05:66:fe:e0:30:f6:f7:c1:ca:70:56:46:bb:
                    bf:ac:f0:b4:3f:c4:92:40:ca:0e:9e:5b:82:cd:22:
                    b8:e0:26:be:1f:6a:5c:88:91:50:a6:3d:e4:78:02:
                    92:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EA:A2:A5:1D:18:10:52:00:83:1A:FE:F8:F8:98:82:20:BE:DE:EC
            X509v3 Authority Key Identifier:
                keyid:E5:01:E8:B7:D2:57:D1:E2:6A:F1:E2:84:13:D4:F5:DD:19:57:95:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/E501E8B7D257D1E26AF1E28413D4F5DD19579534.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E501E8B7D257D1E26AF1E28413D4F5DD19579534.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:3e:bd:5a:ba:50:1c:68:12:12:05:ae:b1:e2:2a:5a:2f:2a:
         97:c4:8d:e2:12:e4:02:2b:45:4a:80:3f:04:c3:6d:54:33:a0:
         77:e1:bc:02:ea:2b:7f:c0:05:07:d2:07:c1:ca:2c:2e:72:39:
         a3:96:eb:f9:d1:43:8b:d8:3d:df:07:48:92:0f:3d:50:58:2b:
         ba:c1:f7:ec:53:c8:8b:fb:6e:d2:96:d2:95:cc:2b:b5:44:81:
         a3:35:8b:3c:b2:ee:1e:8a:a8:13:6f:f7:c4:8a:ca:28:2c:48:
         62:20:b3:75:fe:52:53:cb:ea:31:d7:41:1c:ca:bb:89:b0:a4:
         11:19:f8:34:9f:ec:6e:9f:a2:73:2b:83:41:e5:61:91:e9:41:
         8d:fa:1c:5e:20:6f:2e:3b:a5:d6:4b:c7:8f:d6:62:e0:ae:e0:
         cf:4a:25:57:08:59:2c:02:39:15:80:83:70:43:0f:84:82:d8:
         ea:c5:00:d5:0e:47:fc:7b:09:e8:3a:f6:b6:1c:6e:75:7e:31:
         f3:5a:0c:ac:39:1b:b9:90:66:78:f9:29:7f:8b:34:fa:b0:88:
         ed:36:0d:ba:be:99:6e:76:29:d0:83:b6:5b:ce:ab:66:57:2e:
         a3:e6:6f:ea:7a:0b:e7:08:92:8b:ce:1a:4d:6c:31:d5:85:76:
         2e:69:65:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:56:36 2025 by rpki-client