Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132322e302f32332d3233203d3e20323634333230.roa
File:                     3133382e3132322e3132322e302f32332d3233203d3e20323634333230.roa (raw, json)
Hash identifier:          p81QGwFItti3N9bn0LSBRu2enhjobsSHsV74iPXUyEU=
Subject key identifier:   91:78:23:42:80:BB:8F:5A:50:38:70:7A:46:F3:6C:85:06:2D:C4:B6
Certificate issuer:       /CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
Certificate serial:       358093533FFBD91B51C858B694199496CA5933C7
Authority key identifier: 4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132322e302f32332d3233203d3e20323634333230.roa
Signing time:             Tue 03 Dec 2024 18:24:28 +0000
ROA not before:           Tue 03 Dec 2024 18:19:28 +0000
ROA not after:            Tue 02 Dec 2025 18:24:28 +0000
asID:                     264320
IP address blocks:        138.122.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/4EEF1755CA1280766B487C66444CFF2032B2AE77.crl
                          rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/4EEF1755CA1280766B487C66444CFF2032B2AE77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 22:11:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:80:93:53:3f:fb:d9:1b:51:c8:58:b6:94:19:94:96:ca:59:33:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
        Validity
            Not Before: Dec  3 18:19:28 2024 GMT
            Not After : Dec  2 18:24:28 2025 GMT
        Subject: CN=9178234280BB8F5A5038707A46F36C85062DC4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:26:60:f2:2b:3d:51:18:cd:dc:fd:a2:b5:4d:
                    bd:74:ad:2f:25:dd:c0:b9:9b:2a:9c:6f:c6:87:df:
                    ed:62:c5:80:9a:c6:8f:11:74:4c:ba:24:2d:7a:6f:
                    ae:08:92:42:24:1f:2b:cb:3e:44:63:13:c9:35:52:
                    45:34:09:ab:47:1f:d5:67:e8:e9:9e:e7:9d:3f:38:
                    7b:5a:f7:10:6f:81:65:53:a9:53:2d:1a:40:cc:67:
                    3d:58:3b:c5:17:43:ef:b3:4a:d3:63:02:7b:17:88:
                    9a:22:93:b1:8e:3f:64:0f:e8:54:5a:54:f6:66:78:
                    c6:a4:1f:0f:f2:6f:26:3d:8f:66:96:b3:1d:2a:f4:
                    26:ea:07:71:3d:b9:fa:24:3c:ff:6f:d4:02:65:36:
                    09:70:cf:d6:43:82:f1:5a:7e:21:50:3f:a4:12:3b:
                    8c:d0:f3:c1:a2:95:50:f9:93:7e:9d:9c:35:18:1a:
                    4a:00:6b:95:bc:a9:1c:e3:5a:07:fd:82:a0:d5:9e:
                    ef:c6:fd:0b:8f:cd:78:4f:0e:23:8a:15:65:e6:e4:
                    ec:95:99:9a:c3:dd:02:a2:1e:17:2e:86:3a:70:a6:
                    84:12:94:1b:b5:41:06:f5:aa:1e:8e:14:0e:7c:7c:
                    ed:a3:cd:06:48:d2:3c:11:03:eb:10:0d:5f:a4:bf:
                    6e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:78:23:42:80:BB:8F:5A:50:38:70:7A:46:F3:6C:85:06:2D:C4:B6
            X509v3 Authority Key Identifier:
                keyid:4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/4EEF1755CA1280766B487C66444CFF2032B2AE77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132322e302f32332d3233203d3e20323634333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:5c:b8:09:b0:58:0b:6b:43:df:06:43:8c:e1:a1:ce:8b:a3:
         06:97:d8:d3:b6:43:25:1a:9a:3c:78:9c:6f:0b:c8:7d:dd:7b:
         10:d1:7c:84:4a:62:bc:32:55:05:cd:ce:18:17:8c:4d:d2:3e:
         23:40:29:d9:5e:9a:14:3b:ca:a9:b0:ae:1c:43:40:3b:5d:34:
         db:1a:ea:5e:8f:b3:72:6f:88:2c:34:fb:be:a6:83:7f:be:e0:
         39:08:85:0d:50:a4:66:ef:c3:55:99:67:59:ad:9c:8b:00:5d:
         c1:b0:66:f8:88:31:c6:76:d8:4d:fc:60:c8:d2:aa:73:e7:f7:
         e0:05:8c:14:05:84:85:46:18:eb:bc:3d:02:0a:59:5d:51:40:
         0b:ad:1a:b9:4e:b7:00:2c:7f:31:4e:d1:93:e2:a8:cb:f6:0c:
         fc:93:4e:2f:8e:cd:79:c9:61:ac:2b:6b:70:6e:bd:1f:2e:fd:
         49:f2:49:2c:f2:8f:fc:93:8c:4f:e6:52:5b:60:17:a7:f6:59:
         dd:54:92:6c:20:b6:ba:77:7a:cd:f1:84:01:4b:ca:d2:0d:e1:
         05:c2:a6:9a:2c:71:e5:9c:82:c0:5f:04:82:aa:0d:15:d9:eb:
         3e:b8:07:9b:c1:8e:0e:7b:36:96:2a:72:88:2b:c5:d1:6c:38:
         fa:11:81:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:17:31 2025 by rpki-client