Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3133382e3132322e3136382e302f32322d3332203d3e20323632393532.roa
File:                     3133382e3132322e3136382e302f32322d3332203d3e20323632393532.roa (raw, json)
Hash identifier:          d1rdYw+WohHTeJoQmV+Wst0zHDJ4n0we8oJb4iuXRyQ=
Subject key identifier:   14:7F:01:32:15:52:B9:FC:84:8A:35:1F:02:73:17:5A:C3:99:5E:6C
Certificate issuer:       /CN=4F91864780E3C640327E24B527D2248C0C5CAD25
Certificate serial:       13CF6122A37C8DDED80530A8F49AF8CE8E6B99ED
Authority key identifier: 4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3133382e3132322e3136382e302f32322d3332203d3e20323632393532.roa
Signing time:             Tue 10 Sep 2024 12:09:57 +0000
ROA not before:           Tue 10 Sep 2024 12:04:57 +0000
ROA not after:            Tue 09 Sep 2025 12:09:57 +0000
asID:                     262952
IP address blocks:        138.122.168.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl
                          rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:cf:61:22:a3:7c:8d:de:d8:05:30:a8:f4:9a:f8:ce:8e:6b:99:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F91864780E3C640327E24B527D2248C0C5CAD25
        Validity
            Not Before: Sep 10 12:04:57 2024 GMT
            Not After : Sep  9 12:09:57 2025 GMT
        Subject: CN=147F01321552B9FC848A351F0273175AC3995E6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cb:84:79:8b:ba:83:a4:98:01:54:d4:48:8a:
                    e7:0f:1a:09:f1:02:a7:b1:1a:02:56:bd:16:7b:3c:
                    a5:4f:11:29:f2:e6:5a:81:07:d0:bc:d4:57:c4:7f:
                    17:a6:d3:da:40:aa:97:a1:b8:d8:be:be:f9:76:23:
                    c9:cb:c1:0d:6c:ff:a3:e4:f6:7b:ba:ac:f9:f0:83:
                    53:a1:7e:1b:b5:88:f2:4a:91:28:66:e5:25:fa:b6:
                    4c:2b:6e:05:e9:36:63:3a:03:22:de:ac:47:40:e9:
                    ba:74:28:d1:c6:37:cc:ad:2c:7d:fe:de:c6:9f:fd:
                    1f:dd:ea:4d:c3:75:ca:16:ae:48:85:fb:68:6c:80:
                    09:fa:75:51:15:43:8b:8c:78:90:f5:0c:97:42:f6:
                    96:ee:8f:e4:05:4e:8c:40:8c:86:e0:97:94:48:c6:
                    45:61:c1:e2:04:44:c2:c9:c4:72:01:9f:42:92:04:
                    d4:61:a4:b9:2e:6b:ae:2e:6f:55:9b:9b:2c:8a:1d:
                    c6:1c:98:34:de:c6:46:c9:27:56:7e:65:84:fa:45:
                    f3:15:03:a5:43:d7:80:ce:19:a2:09:2c:f8:10:b7:
                    57:de:d5:6c:32:ca:25:b7:d1:de:05:3a:3e:71:87:
                    0d:89:89:e6:4b:7a:67:59:68:fe:f7:26:a8:5a:24:
                    b3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7F:01:32:15:52:B9:FC:84:8A:35:1F:02:73:17:5A:C3:99:5E:6C
            X509v3 Authority Key Identifier:
                keyid:4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3133382e3132322e3136382e302f32322d3332203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:ad:7f:e5:23:d6:73:34:cb:21:6e:4f:b4:b6:c7:14:c7:54:
         7d:f5:7d:34:8a:f0:89:d5:a6:ce:4d:97:68:89:2e:d6:c4:2f:
         96:6f:49:45:e5:c6:f3:bd:cd:f4:50:1c:11:96:00:03:a8:64:
         d9:ba:06:0f:75:2c:10:2e:10:c4:9f:97:9e:5b:53:8a:63:83:
         9a:40:75:65:c1:fd:07:d8:4c:54:66:bd:45:47:2e:ef:79:c3:
         cd:ef:eb:ad:1a:be:4e:b6:75:d0:74:9a:76:c9:01:91:c1:9d:
         7c:a8:97:6f:44:73:3f:b4:fd:93:57:a5:b8:28:86:11:5a:42:
         f0:28:26:9a:23:d3:a4:b2:65:47:9a:36:8e:e0:64:cd:83:fa:
         9d:c8:16:4e:87:fd:50:ad:8f:06:e1:f1:7d:21:7a:9e:14:fa:
         87:18:ff:d8:73:0d:6a:c8:43:18:8e:da:ba:9c:c5:aa:9f:f5:
         88:10:fa:c7:10:0e:87:c6:1c:8a:8f:9e:a3:e0:a5:1c:de:c5:
         16:25:96:55:7e:df:5b:05:aa:c2:b2:4c:c8:73:c5:07:03:1b:
         66:77:3e:ce:c2:10:68:d0:87:a5:57:4b:c9:3b:be:7d:a4:8a:
         94:34:8d:24:8c:73:09:21:b5:c8:67:c4:9e:1f:a3:6d:9f:e8:
         3e:79:e5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:46 2025 by rpki-client