Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137342e302f32342d3234203d3e20323632353138.roa
File:                     3133382e3132322e3137342e302f32342d3234203d3e20323632353138.roa (raw, json)
Hash identifier:          DSlfFnw7Ot63Py70X8eqaZ3HJMdPG6zhqAMYaO698rI=
Subject key identifier:   09:CE:2A:68:B4:D6:D2:B5:4E:76:70:D8:CE:28:83:C1:C8:2E:9B:D5
Certificate issuer:       /CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
Certificate serial:       408FF4A0FC60C6BA1970AD22940229CCDA8F1616
Authority key identifier: DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137342e302f32342d3234203d3e20323632353138.roa
Signing time:             Thu 06 Mar 2025 05:07:23 +0000
ROA not before:           Thu 06 Mar 2025 05:02:23 +0000
ROA not after:            Thu 05 Mar 2026 05:07:23 +0000
asID:                     262518
IP address blocks:        138.122.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl
                          rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 05:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8f:f4:a0:fc:60:c6:ba:19:70:ad:22:94:02:29:cc:da:8f:16:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
        Validity
            Not Before: Mar  6 05:02:23 2025 GMT
            Not After : Mar  5 05:07:23 2026 GMT
        Subject: CN=09CE2A68B4D6D2B54E7670D8CE2883C1C82E9BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6f:5d:65:cb:b7:f6:5c:56:92:5f:3d:bd:0a:
                    75:e9:79:54:43:b7:a6:55:02:07:33:3d:64:a5:ea:
                    e4:b4:49:47:36:1c:6f:4f:5d:23:99:44:90:96:9e:
                    aa:29:f7:7f:22:73:1a:09:69:48:0b:85:c3:a5:5e:
                    67:bf:ea:3c:06:b4:02:98:7c:e9:fb:f5:01:39:14:
                    e1:b3:a5:46:52:0a:e8:cf:d8:98:82:ce:c4:5c:b0:
                    1d:6b:92:92:92:58:a3:cf:5b:2e:45:43:ed:d0:e9:
                    15:f8:8a:2a:15:b9:45:bd:12:e2:88:1d:63:90:01:
                    cc:90:e4:c9:75:71:83:c4:50:35:ac:bf:50:d0:91:
                    74:95:db:ce:3d:0f:0f:b2:80:46:ea:3c:d8:e3:ff:
                    86:81:a3:e6:4d:d7:40:fa:62:8b:ae:7a:1e:97:0c:
                    68:2b:c6:d2:a6:54:85:52:cb:8d:ac:f7:11:30:d7:
                    e2:cc:e4:80:82:5a:e3:90:6a:2d:b2:f7:66:3f:69:
                    b1:b1:64:44:e9:9a:4e:9c:bb:37:76:9b:10:2b:a5:
                    4e:ea:ed:25:6d:79:31:86:7d:9a:84:04:41:2e:f7:
                    f6:62:a1:9e:e7:a6:59:d6:e5:62:af:8a:f1:a7:5e:
                    05:f8:4a:2f:94:e4:05:16:c1:53:10:ad:81:8e:9b:
                    87:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CE:2A:68:B4:D6:D2:B5:4E:76:70:D8:CE:28:83:C1:C8:2E:9B:D5
            X509v3 Authority Key Identifier:
                keyid:DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137342e302f32342d3234203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:b4:23:be:c5:46:17:a1:8c:f3:a0:a7:81:17:8f:09:8c:ba:
         77:2d:ce:f6:a8:de:6c:99:19:cf:0f:41:1e:bc:5a:ac:d4:1c:
         a5:f2:87:0f:89:e3:07:00:97:5a:03:d2:c1:dc:38:2e:f9:1f:
         71:4f:63:a9:85:34:57:49:61:2e:c0:d5:ac:d2:42:78:b3:0e:
         b7:6b:13:7d:b2:12:41:3d:03:97:b2:27:45:b1:47:c4:37:5f:
         b4:b2:91:6f:b5:fe:72:58:82:f2:b2:e3:8e:ed:2b:7c:ba:2e:
         42:c1:e9:c9:b5:a8:a8:6f:d1:b7:92:14:e0:a7:80:dc:60:4c:
         9c:4a:6a:9e:71:8e:8f:45:00:44:a0:f3:a0:ed:35:43:4c:db:
         c8:08:08:74:58:4d:00:d8:74:3c:1e:02:3f:6a:55:f0:f3:4c:
         d4:d7:81:7d:95:db:17:7e:1b:36:c3:99:34:18:46:80:8e:57:
         6d:06:00:05:ec:e2:07:98:6a:47:a8:3c:5a:1d:dd:c9:e3:85:
         22:68:e2:2c:fb:2d:4f:c5:64:f2:10:3e:d8:e7:91:f0:eb:03:
         24:c4:98:82:a2:44:6d:47:48:64:82:46:92:49:01:0e:75:21:
         71:3a:3e:93:f3:97:22:6b:b4:4a:3c:89:fe:cc:c4:d3:2b:43:
         27:c7:e8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:43 2025 by rpki-client