Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/3133382e3230342e382e302f32322d3234203d3e20323633393637.roa
File:                     3133382e3230342e382e302f32322d3234203d3e20323633393637.roa (raw, json)
Hash identifier:          yq4TuOWqJ18tMzILm6pqUFxTzWUj7VVa2aQu3fxoNso=
Subject key identifier:   54:2F:7A:A7:01:11:08:F3:7B:27:A9:36:17:4B:55:BC:84:FA:F0:DB
Certificate issuer:       /CN=B224D943E8065A18929A784B51D1633209C1CC91
Certificate serial:       2705475DEAA76D8D9C40C158FA10667001DCDB2A
Authority key identifier: B2:24:D9:43:E8:06:5A:18:92:9A:78:4B:51:D1:63:32:09:C1:CC:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/3133382e3230342e382e302f32322d3234203d3e20323633393637.roa
Signing time:             Thu 06 Mar 2025 05:13:45 +0000
ROA not before:           Thu 06 Mar 2025 05:08:45 +0000
ROA not after:            Thu 05 Mar 2026 05:13:45 +0000
asID:                     263967
IP address blocks:        138.204.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.crl
                          rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 00:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:05:47:5d:ea:a7:6d:8d:9c:40:c1:58:fa:10:66:70:01:dc:db:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B224D943E8065A18929A784B51D1633209C1CC91
        Validity
            Not Before: Mar  6 05:08:45 2025 GMT
            Not After : Mar  5 05:13:45 2026 GMT
        Subject: CN=542F7AA7011108F37B27A936174B55BC84FAF0DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ae:66:de:35:e2:3d:f5:d9:d2:c0:9c:ec:a9:
                    e6:8e:3f:df:e6:b6:0a:48:c5:70:3c:8d:2b:2c:e6:
                    14:95:3c:f8:7f:53:a7:e6:6a:0a:b4:8d:21:19:19:
                    fc:3c:3c:f2:15:70:ca:94:a8:a5:67:f5:56:dc:22:
                    a9:4c:45:3f:de:6f:76:d2:88:e9:93:0d:1a:e6:57:
                    79:ad:32:26:72:72:15:65:84:dc:0e:0d:dd:df:29:
                    34:25:01:2e:92:7b:dc:ba:95:d3:cf:e8:80:db:eb:
                    ae:b1:64:77:8d:07:d8:2c:a4:e3:3f:08:12:c3:76:
                    30:b8:64:31:3c:57:66:4e:95:5f:3a:e5:1a:ab:65:
                    21:7d:04:d5:1b:e6:da:9d:4d:ee:2e:89:08:f5:ce:
                    56:ca:d4:96:c8:16:0a:0a:86:72:6b:95:6d:98:67:
                    b0:91:fc:f2:7e:77:9c:3c:ea:b1:65:40:5b:53:fd:
                    29:23:f5:72:74:cf:96:8e:23:11:92:da:8c:53:c8:
                    35:8e:50:c6:de:ba:55:b0:c8:c1:92:6a:d4:77:75:
                    da:ef:56:cd:3d:8b:9a:6f:34:78:9a:25:6f:03:19:
                    f6:00:28:ce:ad:7f:e6:a3:e5:b3:0c:ff:df:0e:64:
                    68:b8:cf:aa:41:b7:bb:e0:43:c7:a2:f6:47:ba:d8:
                    b6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2F:7A:A7:01:11:08:F3:7B:27:A9:36:17:4B:55:BC:84:FA:F0:DB
            X509v3 Authority Key Identifier:
                keyid:B2:24:D9:43:E8:06:5A:18:92:9A:78:4B:51:D1:63:32:09:C1:CC:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/3133382e3230342e382e302f32322d3234203d3e20323633393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:09:45:7d:3a:7f:ca:08:f1:ce:c8:2e:c4:17:60:04:67:57:
         09:97:db:7c:ac:89:ae:f5:3e:3c:99:40:c9:9e:88:de:79:5e:
         f0:0a:48:8f:ec:cc:49:1b:ca:b7:23:d9:8c:f2:03:09:e5:13:
         8a:fd:5f:3d:3e:7c:88:00:42:ae:a1:ef:e8:90:3c:7f:0b:1d:
         78:03:6c:5a:e5:74:c8:00:53:8f:2c:d2:07:60:81:99:21:89:
         cb:82:c1:de:ad:be:64:90:e2:4c:60:d3:61:f4:89:20:5a:87:
         37:b0:9e:09:37:ae:84:71:a2:c9:55:72:d5:ee:49:ec:1d:5c:
         d6:0c:d9:3a:9b:cf:f2:ca:20:2d:41:80:33:f6:eb:40:61:74:
         df:f3:55:ff:d3:de:61:6b:02:14:5f:ef:0e:f9:07:2f:74:18:
         da:b3:82:3f:16:4c:53:1d:68:98:b9:17:f4:82:a6:87:f1:46:
         d7:8f:d2:6b:e4:5c:7d:47:76:16:b0:95:a0:dd:e4:ab:68:a8:
         22:2c:3d:93:86:f8:2c:a4:32:a3:1a:5e:42:13:83:74:ec:8c:
         28:cc:94:09:51:4e:d2:3f:30:9d:27:df:0a:08:a9:1a:40:99:
         b9:fa:29:25:06:90:92:fc:0d:3b:c8:72:b6:9c:09:a1:3f:33:
         09:8a:3e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:51:32 2025 by rpki-client