Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/3133382e302e3136382e302f32322d3234203d3e20323633353932.roa
File:                     3133382e302e3136382e302f32322d3234203d3e20323633353932.roa (raw, json)
Hash identifier:          ID8cCeGcwq3VegQt8tarONtQIlphn+e5OtPGMdCN9ZQ=
Subject key identifier:   41:52:C2:D3:F3:19:F9:CE:B9:8D:26:4C:CF:01:42:5F:2B:36:9B:F6
Certificate issuer:       /CN=922FBF2159E6A28EFC093AE51E0BFF8F351A6C53
Certificate serial:       6D8FC2408C4AC4771A9F8D97CA464AC380BFA0DB
Authority key identifier: 92:2F:BF:21:59:E6:A2:8E:FC:09:3A:E5:1E:0B:FF:8F:35:1A:6C:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/3133382e302e3136382e302f32322d3234203d3e20323633353932.roa
Signing time:             Thu 06 Mar 2025 11:07:25 +0000
ROA not before:           Thu 06 Mar 2025 11:02:25 +0000
ROA not after:            Thu 05 Mar 2026 11:07:25 +0000
asID:                     263592
IP address blocks:        138.0.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.crl
                          rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 06:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8f:c2:40:8c:4a:c4:77:1a:9f:8d:97:ca:46:4a:c3:80:bf:a0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922FBF2159E6A28EFC093AE51E0BFF8F351A6C53
        Validity
            Not Before: Mar  6 11:02:25 2025 GMT
            Not After : Mar  5 11:07:25 2026 GMT
        Subject: CN=4152C2D3F319F9CEB98D264CCF01425F2B369BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c5:77:59:a1:b3:55:6b:94:87:19:e3:53:4b:
                    d5:fd:71:46:72:2a:96:fa:6a:9b:d6:44:56:bf:f3:
                    d2:c3:f2:58:93:fb:fe:97:76:0e:bc:ba:10:de:23:
                    03:d6:a1:dd:70:81:a3:05:23:55:ad:29:24:fe:fc:
                    9a:f3:64:4f:69:8f:bb:92:43:69:52:6a:14:b7:ff:
                    68:5b:12:7f:27:b0:bc:d6:52:68:c2:a4:d5:b8:79:
                    2d:d5:a8:e5:33:95:69:b6:51:7a:4d:82:dd:96:8e:
                    35:a1:bc:b7:67:11:4d:f8:35:33:eb:61:6e:0f:db:
                    3b:46:94:3b:7f:13:43:2b:01:71:4b:c3:0d:66:a7:
                    de:25:fb:4f:95:89:61:85:b1:4e:5f:af:7b:70:5b:
                    3a:e7:a7:85:54:5f:bd:e0:30:ae:e0:f2:8c:97:4a:
                    fa:ee:4a:25:69:48:b1:e6:ae:c1:fa:10:0a:6b:eb:
                    97:d5:66:a6:2a:41:19:90:01:db:d1:a7:ff:22:a0:
                    a1:22:5d:c6:c0:b5:3c:e8:f9:f7:87:32:81:6e:2c:
                    25:f7:d0:86:43:46:e6:7a:a7:8f:0c:cb:e0:a9:67:
                    17:df:6a:23:e6:61:b8:04:7e:9f:07:0f:7a:3a:9c:
                    4b:37:cf:9f:9d:34:32:6f:2d:a9:80:6d:56:9f:c2:
                    ea:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:52:C2:D3:F3:19:F9:CE:B9:8D:26:4C:CF:01:42:5F:2B:36:9B:F6
            X509v3 Authority Key Identifier:
                keyid:92:2F:BF:21:59:E6:A2:8E:FC:09:3A:E5:1E:0B:FF:8F:35:1A:6C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/3133382e302e3136382e302f32322d3234203d3e20323633353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:1d:d9:12:f1:8a:88:a5:3f:2a:d1:4e:94:5e:d5:9e:a1:12:
         4b:20:4b:05:7e:39:72:a6:8c:82:9d:67:62:34:05:71:7d:47:
         9d:ef:e3:14:cd:75:cd:9b:7a:d1:44:c2:37:40:65:6d:70:07:
         83:7c:de:14:a5:f5:11:46:77:bb:6b:30:bd:52:5f:9a:d4:91:
         ba:7b:ab:69:a9:04:e1:3c:82:d2:97:54:fd:19:6c:7c:31:13:
         a4:e5:5a:c8:ce:31:86:79:37:ff:93:56:75:62:48:11:5b:df:
         1f:42:37:0c:d7:85:9a:78:4b:c5:40:45:e2:10:fb:83:01:8b:
         5a:3b:e8:3b:8d:be:cb:9e:7e:ca:27:f7:0c:b6:9b:3c:fd:57:
         37:9f:9c:22:29:55:b6:8f:ab:f9:e2:82:6a:11:fb:e3:53:b0:
         06:ce:d2:a1:4e:f1:fd:b1:4e:e5:7c:6c:db:f2:ab:7d:3e:35:
         71:7c:06:5c:e7:36:25:f7:fd:1f:9c:32:f3:b8:ef:10:87:07:
         7f:1b:a9:98:57:90:9f:12:82:6f:1f:ef:2e:9a:72:45:a7:7d:
         c5:db:e1:74:7b:fd:11:29:21:90:07:4b:8f:7d:66:f4:7e:b8:
         a8:1e:e2:05:6b:18:d6:58:a3:16:e0:35:55:0b:76:f2:72:df:
         2c:5e:cd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:53:54 2025 by rpki-client