Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134382e302f32322d3332203d3e20323634313937.roa
File:                     3133382e39372e3134382e302f32322d3332203d3e20323634313937.roa (raw, json)
Hash identifier:          0fjUNidFm7BTlV1+oalJDhBOmBcKhkFlWCYsHfmdOOw=
Subject key identifier:   1C:20:C7:B2:5E:97:71:2D:87:4D:0C:DA:57:05:14:68:41:F0:87:26
Certificate issuer:       /CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Certificate serial:       3A2E5FA16DD3DC96D3F10FA9F5E0715B14A64D55
Authority key identifier: AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134382e302f32322d3332203d3e20323634313937.roa
Signing time:             Tue 15 Apr 2025 18:55:44 +0000
ROA not before:           Tue 15 Apr 2025 18:50:44 +0000
ROA not after:            Tue 14 Apr 2026 18:55:44 +0000
asID:                     264197
IP address blocks:        138.97.148.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl
                          rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 09:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2e:5f:a1:6d:d3:dc:96:d3:f1:0f:a9:f5:e0:71:5b:14:a6:4d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
        Validity
            Not Before: Apr 15 18:50:44 2025 GMT
            Not After : Apr 14 18:55:44 2026 GMT
        Subject: CN=1C20C7B25E97712D874D0CDA5705146841F08726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d4:19:4d:21:24:2f:c2:91:03:14:cb:7d:c9:
                    02:64:70:2d:7c:4a:60:cd:d7:5d:bd:f9:82:c1:33:
                    a5:9e:02:52:a1:f2:69:eb:dd:c2:4a:80:31:79:f0:
                    a4:06:59:2e:b7:84:1c:1e:ec:ca:a6:02:cc:29:3a:
                    f1:b7:9e:63:79:0e:96:b1:a0:60:48:a1:1e:4e:2f:
                    be:be:64:b6:49:e7:4f:94:e6:fd:a5:3b:09:66:24:
                    c1:00:00:33:c0:6c:6f:9a:88:83:98:96:21:b4:94:
                    fa:ea:d8:41:4c:4b:aa:c5:40:9b:a8:8d:57:46:62:
                    e4:13:ef:1e:3e:ad:df:1d:37:8d:0f:7f:90:39:20:
                    a9:e5:2e:c1:75:f7:4c:84:31:19:f4:56:fb:9c:6d:
                    8d:36:fa:0f:fd:e2:c8:90:8f:4e:3b:b2:fd:5b:70:
                    f4:53:95:58:d3:f9:ba:79:62:d2:03:fd:f5:ca:77:
                    17:7c:49:44:02:ff:f7:88:41:9f:52:db:4b:8a:26:
                    19:6a:23:51:bb:2b:b8:64:d1:e9:96:2a:60:29:94:
                    d0:9c:f0:4c:85:8b:5a:0b:8f:7c:42:95:8c:f3:b7:
                    8f:13:74:95:d4:ae:d6:af:f9:ae:a1:84:99:35:26:
                    ee:39:39:ed:b1:4f:b4:be:bb:d3:65:29:b7:8f:b1:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:20:C7:B2:5E:97:71:2D:87:4D:0C:DA:57:05:14:68:41:F0:87:26
            X509v3 Authority Key Identifier:
                keyid:AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134382e302f32322d3332203d3e20323634313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:1a:a1:a5:ff:a4:19:73:c7:11:05:c0:bf:0d:a7:72:5d:3e:
         01:6d:61:ad:c7:38:b9:dc:cf:11:96:8f:9e:58:93:21:15:1e:
         31:10:06:2a:1e:7d:54:0d:fd:ec:10:1f:85:24:54:c3:a7:a3:
         7e:5e:b6:4c:17:1e:4e:f6:b4:cd:3c:fb:61:3c:e9:a6:60:4e:
         8d:c9:48:67:46:19:90:9b:b5:6b:58:ff:1d:0d:af:90:0f:48:
         b8:6b:ec:23:f1:8f:73:45:fa:fd:ec:66:80:0e:6a:27:2c:fb:
         32:f4:9d:95:02:16:0d:07:a9:82:8a:25:bf:02:4e:44:2f:32:
         01:cf:dc:21:f6:25:37:71:d8:13:a7:39:63:2e:cf:0c:0d:cc:
         3a:77:de:75:44:25:08:5a:4b:5a:40:88:eb:c8:bb:0b:42:07:
         47:76:a6:84:5d:60:1d:2e:bb:7c:88:34:fe:e7:71:7c:cb:1b:
         da:a9:39:41:41:c5:6e:0d:b5:98:7d:28:fe:9a:98:5a:70:d2:
         6d:a3:71:44:f2:72:3d:4a:72:19:ce:1e:03:d2:72:8d:4a:08:
         81:db:24:4b:0f:29:32:27:83:46:9f:75:cc:6b:b4:96:06:d9:
         97:cb:59:96:a4:f2:b5:3d:a1:ea:7b:1e:ce:ae:93:ab:a6:30:
         1c:9e:48:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:41 2025 by rpki-client