Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa
File:                     3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa (raw, json)
Hash identifier:          DgVu3s0od9WHlv/BIyISXca7xZWc0Mm0eZqmezWfwaQ=
Subject key identifier:   9B:39:7D:2B:FF:75:5C:A1:F4:70:A2:A5:FC:46:5F:74:F7:24:DA:E2
Certificate issuer:       /CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
Certificate serial:       08D9FCDC40AFA7BE705E899C6319CBA6B07763B1
Authority key identifier: E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     264440
IP address blocks:        138.121.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl
                          rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d9:fc:dc:40:af:a7:be:70:5e:89:9c:63:19:cb:a6:b0:77:63:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:ef:7b:d4:ff:fa:be:40:f2:fa:ac:ad:da:
                    98:79:84:dc:84:0b:5c:33:17:4e:e6:56:34:02:9a:
                    91:dd:ad:28:60:f5:bf:1a:64:b7:5b:6b:60:f9:a8:
                    c1:a4:30:a8:6a:b5:76:fb:bc:0d:c9:cc:78:55:7d:
                    c1:61:65:fc:53:95:5e:be:d1:16:35:71:d2:90:6e:
                    4d:a1:3d:bc:8b:c9:21:83:18:69:31:34:46:0a:f9:
                    b0:29:c8:ca:90:f8:97:42:6f:41:11:70:53:c0:3a:
                    a3:c9:f7:c8:82:be:e9:f3:80:e7:41:86:9c:2c:29:
                    a0:53:88:f6:d0:aa:45:95:43:72:a2:5f:05:17:24:
                    49:bd:48:ac:24:d6:9c:7c:28:4d:77:11:d6:9a:82:
                    5b:2b:38:e1:fb:54:b7:f7:33:8f:f9:39:6d:47:0c:
                    a7:5e:bb:07:ac:8a:c0:87:21:60:8b:97:b0:03:33:
                    cb:56:bb:fe:cb:ea:40:7a:f9:d0:97:c4:6a:b6:20:
                    ae:ac:64:28:94:19:2c:c3:9b:ce:4a:2e:ff:a0:7c:
                    9c:f2:b3:b6:b2:9e:8e:aa:ed:ce:a3:8d:f1:44:a4:
                    4e:eb:84:17:27:1e:36:7b:3a:2a:00:7a:5c:fa:94:
                    c3:33:63:ba:9e:35:db:29:da:ea:2c:be:53:6b:a4:
                    c4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:39:7D:2B:FF:75:5C:A1:F4:70:A2:A5:FC:46:5F:74:F7:24:DA:E2
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:96:11:85:12:0e:c5:64:ee:65:ea:d4:0b:11:e3:d2:55:43:
         26:04:fa:03:5b:51:f7:af:d5:e2:04:a9:5f:53:13:1c:f8:e4:
         2e:c8:a2:df:47:99:dc:4b:bf:3c:36:61:61:2b:22:27:1c:3f:
         e1:88:83:5c:94:73:12:36:45:73:a9:a0:ad:e2:dd:86:69:be:
         f9:b4:05:b8:60:49:97:41:b3:a5:8f:71:21:b4:e2:a7:ed:a5:
         df:e3:80:06:0b:c1:b3:ec:14:d9:e2:ce:23:fd:a4:88:32:e9:
         59:39:5b:37:4b:f7:ab:e2:cf:70:e7:90:d0:f7:aa:28:fe:34:
         c9:96:ac:13:3a:b9:07:2b:2c:b5:25:c0:ef:76:2a:77:5e:1b:
         ca:45:6e:bc:1e:bb:17:ea:6d:1f:20:3d:c2:94:5e:e0:78:9b:
         d2:d8:73:59:29:9c:d4:ce:c5:a2:1c:ba:87:89:95:f9:78:63:
         a9:d6:06:12:e2:92:ee:8b:c4:ec:79:d8:a8:0f:9f:f8:75:65:
         ef:5b:d0:59:ab:10:34:f8:60:46:3e:44:2e:fa:4c:62:19:e5:
         e5:3d:cd:3a:62:ff:7c:c5:fe:36:de:fe:90:e3:df:a5:94:b7:
         ce:78:a6:0b:fb:48:44:d6:59:5a:dc:a7:8c:a8:57:16:22:fa:
         d3:f0:56:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:28:49 2025 by rpki-client