Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33332e302f32342d3234203d3e20323634323437.roa
File:                     3133382e3131382e33332e302f32342d3234203d3e20323634323437.roa (raw, json)
Hash identifier:          EkdUBTRybeS4MvPS7pCPdEG0stlXZoG/OmAso7kZpnQ=
Subject key identifier:   14:78:A1:C7:EC:DE:86:8C:15:10:67:3A:E6:14:3B:80:10:EE:00:55
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       262958C37D497A987A979BE9F6E3CE292FF59842
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33332e302f32342d3234203d3e20323634323437.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     264247
IP address blocks:        138.118.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
                          rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 16:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:29:58:c3:7d:49:7a:98:7a:97:9b:e9:f6:e3:ce:29:2f:f5:98:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=1478A1C7ECDE868C1510673AE6143B8010EE0055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:41:18:41:f1:08:c3:66:00:38:9a:78:a1:e2:
                    a1:fe:ba:cd:2a:91:f3:5a:2f:4c:ff:5e:05:c5:66:
                    3c:61:1d:d4:77:fa:b3:18:64:b0:ab:2b:70:03:c3:
                    d4:32:0d:a2:66:8c:14:2c:22:0c:0e:59:c4:ad:75:
                    5e:c3:bf:56:b3:df:ef:e7:88:ca:74:a3:02:99:26:
                    73:5f:e0:6e:b4:3d:ed:58:65:9a:cd:b3:b7:1c:26:
                    c4:5a:f2:80:0a:ba:06:35:ae:6c:d1:ee:8b:a2:a0:
                    92:b5:95:51:0b:88:03:49:ec:c3:3d:2e:d9:63:da:
                    9e:5f:bd:a0:6b:a7:2f:a0:a3:fa:b3:9e:46:0a:ce:
                    cd:55:f2:56:b6:65:4f:74:66:16:6c:de:ce:1d:d3:
                    f0:83:b0:56:79:d6:0a:ce:ea:ed:65:c1:e2:82:68:
                    06:2f:f0:d5:76:d0:84:8c:f8:a3:9d:71:02:2c:c6:
                    6a:48:11:7d:e0:9b:99:d4:52:ac:bb:4b:3c:fc:af:
                    a7:9a:c4:87:b6:83:71:5c:8b:05:a5:b3:90:5e:30:
                    c0:e5:67:3c:a5:00:51:54:a6:89:27:25:bd:50:90:
                    a9:f9:34:cc:ad:d9:a8:9d:94:29:15:2f:eb:fc:e8:
                    ad:fb:80:6d:eb:ca:6b:50:01:66:ec:1e:79:fe:6c:
                    b8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:78:A1:C7:EC:DE:86:8C:15:10:67:3A:E6:14:3B:80:10:EE:00:55
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33332e302f32342d3234203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:57:17:c9:f7:e5:13:b6:b3:6a:54:51:de:fb:72:0f:f8:e3:
         d1:4d:fd:fc:0c:60:2e:c4:07:a9:05:ce:18:d4:5b:a6:8b:a3:
         4d:d9:ee:cd:93:c5:af:60:58:aa:67:ac:ad:69:0a:df:0a:6e:
         c8:c9:75:39:be:ca:6a:d0:f3:4a:e8:8b:fa:0c:1b:d5:d7:76:
         59:02:c8:b1:19:9f:46:27:d2:8a:69:fc:a7:d9:12:35:08:8a:
         46:49:4d:c9:ee:d4:10:af:f1:4b:98:00:a8:13:f2:45:30:6f:
         1f:9b:4a:fc:7b:85:34:ba:ce:ec:60:d7:59:55:e4:37:12:2d:
         51:db:0a:9d:f0:df:0c:9f:03:d2:be:c4:6e:e9:9d:51:b2:6e:
         0e:ae:c1:c0:dc:68:7f:af:43:3f:ca:77:db:2e:75:32:59:8f:
         53:ce:6f:78:22:18:e7:59:d5:e8:22:75:af:44:ae:ab:bd:8c:
         1d:04:86:07:57:00:08:08:bd:7f:3b:21:43:c3:6a:ee:ea:ff:
         23:2d:08:06:97:6f:b7:9c:5e:e4:b3:d5:cd:92:d3:69:04:18:
         4e:9f:2c:f8:c5:cf:ca:ed:d5:87:c4:9f:ab:c3:a3:c5:19:be:
         3c:09:ab:42:18:21:df:e1:ff:d4:f1:4f:17:74:29:24:39:13:
         b1:9b:8e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:12:50 2025 by rpki-client