Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33322e302f32342d3234203d3e20323634323437.roa
File:                     3133382e3131382e33322e302f32342d3234203d3e20323634323437.roa (raw, json)
Hash identifier:          qwc85KZmQFkRWm0Jf2vYrh9+e5dCKo3pBlg4i+Jspwk=
Subject key identifier:   98:01:67:EB:E3:05:11:BE:21:29:0D:07:6E:5B:26:58:E0:91:E7:4A
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       597DDC8E783FF0ED58C80F624897E45476644D94
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33322e302f32342d3234203d3e20323634323437.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     264247
IP address blocks:        138.118.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
                          rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 16:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7d:dc:8e:78:3f:f0:ed:58:c8:0f:62:48:97:e4:54:76:64:4d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=980167EBE30511BE21290D076E5B2658E091E74A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:13:0d:a9:01:02:2c:24:6a:1c:7b:4a:a8:52:
                    04:d5:cf:7d:34:5a:e9:82:1a:79:b7:32:be:9b:d3:
                    e3:d8:49:ff:23:bc:f2:c1:bf:bd:df:1c:ab:4d:96:
                    88:02:44:1a:b1:3c:90:c1:31:c1:44:9d:84:fa:45:
                    e0:1c:09:2a:24:cc:4e:c0:1a:3c:2c:47:84:ee:37:
                    c0:09:20:30:bf:7f:2c:a3:ba:34:e1:8f:c4:7e:1b:
                    91:5b:42:6c:aa:8c:10:23:ca:1a:6a:98:8f:b1:cc:
                    84:be:6f:f8:48:9b:66:f1:cd:f3:98:ca:6b:f1:c9:
                    0c:04:da:77:06:5e:a3:30:fa:d5:04:7a:3a:7b:71:
                    5b:b8:37:aa:2a:4a:27:9e:0d:37:15:fa:cc:d3:2c:
                    7c:13:a4:bc:0f:a0:7a:75:4f:ae:e9:24:6c:a1:ef:
                    ee:50:dc:24:36:97:67:0a:7e:37:c5:56:cc:69:41:
                    48:3b:01:cc:7e:65:66:10:21:25:e1:6d:2e:b0:8b:
                    7f:3a:ee:8d:e9:79:98:76:95:ab:ba:bd:58:b0:da:
                    7c:d9:ee:54:a5:7d:e8:30:ea:5c:aa:3d:c4:0f:13:
                    59:d0:44:70:0d:d4:c9:33:75:e6:7e:4b:fe:19:cb:
                    67:43:59:63:d6:0b:0c:23:d7:87:15:ae:a6:5b:fa:
                    52:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:01:67:EB:E3:05:11:BE:21:29:0D:07:6E:5B:26:58:E0:91:E7:4A
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33322e302f32342d3234203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:46:c1:73:f9:78:d2:03:27:bc:98:ce:0a:f2:27:8a:1f:49:
         dc:76:89:d8:91:c1:67:d3:5a:7f:7e:89:8d:38:66:0a:ba:de:
         d2:20:7d:49:16:5d:dc:4d:06:e4:1e:d0:37:73:95:8d:d6:42:
         09:63:e0:30:14:1b:2b:b4:e2:f3:48:bc:61:1c:ba:c4:a2:9b:
         43:25:78:13:fb:22:fa:13:ac:a8:4b:2a:e7:52:52:84:ef:72:
         4f:29:16:b9:bb:aa:99:98:55:23:7a:ff:88:8e:1f:3b:e4:ac:
         f2:b2:4e:85:81:ef:6f:90:a5:cd:89:ab:83:25:c5:3d:c6:d8:
         39:e3:49:ec:da:82:0f:ec:3a:17:1f:4f:05:7e:fc:2b:6e:f4:
         ee:bb:d6:73:a1:da:0d:05:4f:56:60:33:e2:05:ac:72:bb:29:
         5e:be:d8:b0:9f:bb:6d:67:f0:51:0e:e9:ec:5c:2d:e9:d4:4f:
         2b:ad:65:e1:7e:29:b4:a9:2d:d2:5e:c5:8a:4b:42:f0:ba:61:
         77:ec:13:75:63:0e:67:7c:b6:94:ae:f0:44:e9:57:c6:a9:bc:
         6a:e8:90:fd:5c:8f:c7:7f:51:b9:87:81:9d:8a:19:0e:f4:b5:
         4a:1a:8a:92:dd:fc:93:b3:57:5f:7f:ec:38:a1:da:68:31:1f:
         fb:5d:37:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:44:46 2025 by rpki-client