Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3133382e39372e31362e302f32322d3234203d3e203532363034.roa
File:                     3133382e39372e31362e302f32322d3234203d3e203532363034.roa (raw, json)
Hash identifier:          ADJcyWrTUrSA2wIn1N23WaRSq+5BCusmLWHHlJv5llM=
Subject key identifier:   1D:7D:B9:2C:94:78:B4:AD:8B:5B:72:3D:48:66:26:CB:A3:CF:CB:2D
Certificate issuer:       /CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
Certificate serial:       29B1681BEE3BC7604CD7C4BC72D15F5E005CA3C0
Authority key identifier: 7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3133382e39372e31362e302f32322d3234203d3e203532363034.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     52604
IP address blocks:        138.97.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl
                          rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b1:68:1b:ee:3b:c7:60:4c:d7:c4:bc:72:d1:5f:5e:00:5c:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=1D7DB92C9478B4AD8B5B723D486626CBA3CFCB2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:af:0b:54:56:78:53:ff:71:e6:2c:42:ce:bd:
                    c7:86:d3:cc:ee:17:c9:81:34:a0:ea:f2:d0:eb:99:
                    e5:94:7c:9f:d3:55:33:2d:88:46:25:30:9f:0a:94:
                    b0:6f:31:95:b5:b9:bb:2e:bc:e6:e0:71:d0:fc:f0:
                    8e:af:6b:ef:f0:2e:4e:d0:3e:5b:c2:c8:80:6f:26:
                    5e:ae:25:f8:e8:5b:d8:26:ae:25:c1:16:f9:c2:00:
                    d5:b9:ee:7a:68:37:e7:bc:cf:3c:2c:b9:ba:e8:82:
                    25:46:14:51:c5:01:89:93:5e:3d:12:e0:72:8c:f0:
                    cf:6d:77:5d:17:ab:db:b9:98:2c:54:23:11:e6:0f:
                    e3:99:6f:9f:c7:f7:c0:af:05:90:9d:49:31:e0:ac:
                    d9:f8:94:13:47:35:0d:57:ff:21:82:71:99:bf:3a:
                    61:f8:c0:c3:8d:df:11:15:45:76:db:2b:10:f2:c8:
                    58:30:55:c1:8f:07:2d:54:26:f7:07:c8:40:be:8f:
                    a5:43:37:6c:10:56:64:f0:7d:ef:8b:6e:84:1e:5c:
                    e7:1f:ee:26:26:ea:e1:f9:79:96:56:17:a3:e4:5f:
                    84:b7:a5:b8:1e:ce:5e:07:5b:e2:eb:3d:1c:9d:ad:
                    37:7e:e9:98:f6:1d:38:a1:51:67:0f:e7:c9:7f:ff:
                    07:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7D:B9:2C:94:78:B4:AD:8B:5B:72:3D:48:66:26:CB:A3:CF:CB:2D
            X509v3 Authority Key Identifier:
                keyid:7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3133382e39372e31362e302f32322d3234203d3e203532363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:ab:6b:d6:0b:cb:d0:1e:9a:41:f6:d8:28:22:ba:22:df:17:
         86:a0:42:7f:ec:d8:68:29:bb:57:33:60:01:7d:a4:7b:bc:22:
         a0:cc:d5:d9:5b:88:08:c3:d6:22:9e:e1:fc:03:4f:14:28:cb:
         5f:ba:8e:b2:da:4a:7f:eb:1f:25:c4:69:65:33:55:6c:55:2a:
         6e:c0:54:b6:bc:cb:8a:69:81:43:0e:ab:12:86:56:d9:02:83:
         18:ce:22:c5:aa:2d:1c:85:fb:f0:71:8a:3b:7f:d1:bb:24:be:
         54:cb:de:1c:e4:99:32:5c:f3:d7:e5:42:f5:d8:19:4f:51:f2:
         91:ed:33:d3:65:80:d5:b2:d0:ab:56:1b:57:63:c8:97:19:3c:
         55:1d:b1:79:f4:e3:e7:c2:f9:5e:21:cc:6e:c2:b9:74:00:35:
         7a:1c:da:ad:60:34:21:15:b4:98:70:07:fa:e1:89:f1:6b:5a:
         6c:35:45:f7:9f:53:f1:6e:82:ee:db:2d:82:dc:39:11:cf:7c:
         94:1d:f3:85:f8:8a:fe:ed:31:16:c7:5a:8b:39:8a:b5:90:26:
         b2:c8:09:95:9f:9d:77:d1:df:30:66:a1:a0:4e:15:ec:02:39:
         d5:40:19:83:5d:c7:71:b2:6e:62:9e:50:c5:56:65:57:a0:01:
         f2:ee:fe:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:34:30 2025 by rpki-client