Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/3133382e302e302e302f32322d3232203d3e20323634353234.roa
File:                     3133382e302e302e302f32322d3232203d3e20323634353234.roa (raw, json)
Hash identifier:          r/lm8WKinPk7XpFZRNeQs51HqmepQUhQG/DLrXMDtd0=
Subject key identifier:   5B:CE:33:60:59:7B:86:3C:6E:13:AB:C1:44:1C:23:C6:4F:2D:84:32
Certificate issuer:       /CN=26FA74E0D62EEDA20044D86ED870C4AC8AF90B99
Certificate serial:       5FBABEF2106101A3904E571833B028B295B9633A
Authority key identifier: 26:FA:74:E0:D6:2E:ED:A2:00:44:D8:6E:D8:70:C4:AC:8A:F9:0B:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/3133382e302e302e302f32322d3232203d3e20323634353234.roa
Signing time:             Thu 06 Mar 2025 03:42:07 +0000
ROA not before:           Thu 06 Mar 2025 03:37:07 +0000
ROA not after:            Thu 05 Mar 2026 03:42:07 +0000
asID:                     264524
IP address blocks:        138.0.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.crl
                          rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ba:be:f2:10:61:01:a3:90:4e:57:18:33:b0:28:b2:95:b9:63:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26FA74E0D62EEDA20044D86ED870C4AC8AF90B99
        Validity
            Not Before: Mar  6 03:37:07 2025 GMT
            Not After : Mar  5 03:42:07 2026 GMT
        Subject: CN=5BCE3360597B863C6E13ABC1441C23C64F2D8432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2e:f7:b1:1b:d8:c3:69:28:39:e2:e8:52:e0:
                    43:a1:20:9d:01:26:24:4c:0e:44:b1:eb:67:48:60:
                    6d:48:e2:6f:33:f9:b7:de:fc:00:53:4a:6c:38:6f:
                    ca:0e:e2:2b:d1:5f:c0:b7:d6:75:fd:f1:59:d6:64:
                    a5:4c:45:42:8a:e2:e6:38:b1:c1:16:ae:22:5d:48:
                    ac:5f:64:b7:63:d9:c4:9c:96:36:21:f1:dd:95:8f:
                    f4:7c:32:2a:ac:be:b4:e1:8f:4e:0d:17:96:cb:58:
                    a7:c6:83:ba:89:ae:09:aa:80:1a:8e:3d:63:66:b4:
                    60:07:56:80:2a:c4:3c:da:af:94:5f:9e:c6:d0:af:
                    ee:86:63:ae:c9:ed:1b:b0:21:53:d9:93:0a:73:b2:
                    6d:94:a6:17:19:53:f6:11:1a:bb:8e:56:cb:e6:5c:
                    49:5f:fa:29:5f:45:83:8a:48:8e:5a:2a:f9:ca:a0:
                    94:9b:d1:79:e1:d3:30:f2:b4:5c:b3:e5:a7:bb:27:
                    23:af:c7:33:55:87:9f:fc:2b:6e:6e:44:77:f4:45:
                    f4:30:c7:82:33:0d:fa:ea:bc:c7:a4:2e:bc:fa:e5:
                    c6:17:da:3b:39:cd:01:24:9a:95:b9:f8:00:9c:e8:
                    84:e8:a6:67:7a:ec:48:81:7f:39:99:6f:9d:f1:5e:
                    47:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CE:33:60:59:7B:86:3C:6E:13:AB:C1:44:1C:23:C6:4F:2D:84:32
            X509v3 Authority Key Identifier:
                keyid:26:FA:74:E0:D6:2E:ED:A2:00:44:D8:6E:D8:70:C4:AC:8A:F9:0B:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/3133382e302e302e302f32322d3232203d3e20323634353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:2a:a3:6e:cc:dc:92:d5:66:4c:81:0d:ba:98:e6:7a:c1:28:
         42:ec:25:e5:bc:04:4b:b4:fa:f7:20:33:ea:f5:a5:b5:2b:24:
         46:07:86:f9:b7:2c:49:c7:50:d8:93:4b:60:2e:9c:f1:0d:c7:
         fd:17:0d:44:6a:5e:2d:9a:15:fe:b5:08:7f:b8:64:c5:d2:94:
         b0:b0:2d:be:34:74:59:f0:98:50:0d:b7:43:d0:13:1b:56:6e:
         27:e8:c1:1b:5e:11:77:cc:d6:f7:f5:e5:13:98:c9:66:a9:d0:
         e7:77:09:34:dd:83:88:ff:c4:36:29:fd:63:58:af:10:da:be:
         ce:d5:94:23:d4:e0:ec:d3:68:e2:93:d0:bb:9b:32:af:1c:a1:
         65:a7:ec:40:4d:ea:33:f3:74:8a:ea:8f:8f:63:48:65:79:cf:
         ad:5d:1c:40:ac:83:e0:27:29:f9:ea:a8:58:e9:57:a4:5f:84:
         6a:1b:18:16:02:5d:1b:61:52:e9:43:bb:ab:e8:a0:4e:05:8b:
         a2:2f:8b:ba:a9:02:aa:db:0c:96:97:b3:22:b0:99:7f:6e:31:
         d5:59:5b:da:1a:0f:48:27:ea:e7:e3:48:dc:c4:57:f8:1f:f2:
         b4:68:7d:53:36:b3:98:10:23:2c:19:2b:dd:de:c0:d7:cc:70:
         d5:f3:f5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:51:26 2025 by rpki-client