Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/3133382e3231392e3138342e302f32322d3234203d3e20323637323230.roa
File:                     3133382e3231392e3138342e302f32322d3234203d3e20323637323230.roa (raw, json)
Hash identifier:          b5u6wlPF7EShO6uaC7na2EIB4MoLrsSCJEwgBshg2Ws=
Subject key identifier:   EC:52:15:3C:76:F8:EC:B4:C8:B0:E2:F1:A9:92:4B:93:A8:CA:DE:DA
Certificate issuer:       /CN=4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B
Certificate serial:       20BDB7459CDA7A6E1F14E2A07BC9914B51D109A3
Authority key identifier: 4D:9B:A8:D9:03:F5:A0:A3:D6:92:C9:F2:DC:D1:EE:5C:C0:8A:21:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/3133382e3231392e3138342e302f32322d3234203d3e20323637323230.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     267220
IP address blocks:        138.219.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl
                          rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:bd:b7:45:9c:da:7a:6e:1f:14:e2:a0:7b:c9:91:4b:51:d1:09:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:9f:6b:78:80:12:26:e1:bd:28:b9:f5:0c:
                    6a:2c:66:1d:6e:ae:f7:12:fb:a6:b6:65:53:ee:0b:
                    e1:e0:4c:6c:0f:c3:4c:9d:f8:2f:60:98:e0:39:cb:
                    30:9a:c8:5d:2b:30:77:6a:c5:dc:cc:fa:da:64:44:
                    eb:24:2e:03:b0:6a:40:78:df:68:75:11:8e:b7:a1:
                    03:47:5f:a4:45:09:08:dd:05:40:03:49:95:e5:d3:
                    a0:3b:21:d2:57:54:58:12:b9:64:ce:a0:70:9c:ec:
                    76:4e:85:3a:84:be:c4:f6:03:44:08:ae:62:a6:4a:
                    82:f9:37:55:8e:b4:7e:ed:ea:d7:79:4f:10:02:31:
                    e4:b4:ee:5a:c2:95:d0:34:99:89:d5:06:19:76:a1:
                    a6:b4:e6:14:cd:df:e1:48:28:93:1b:7c:fb:35:31:
                    3d:05:aa:62:64:55:18:48:86:16:21:36:55:0b:c0:
                    7a:10:8d:ec:d7:1f:8b:d0:63:7f:21:1e:f1:4f:b5:
                    b8:3c:57:ce:b0:da:42:90:8f:0f:ed:cc:c0:fa:58:
                    e3:0c:f1:7c:eb:9f:8a:07:d7:af:dc:df:0d:9f:c6:
                    f5:ed:0a:67:8b:ef:cb:01:47:4f:34:37:05:7d:3f:
                    07:33:0c:7e:0d:51:d2:01:dd:9d:da:7d:68:f3:b6:
                    cd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:52:15:3C:76:F8:EC:B4:C8:B0:E2:F1:A9:92:4B:93:A8:CA:DE:DA
            X509v3 Authority Key Identifier:
                keyid:4D:9B:A8:D9:03:F5:A0:A3:D6:92:C9:F2:DC:D1:EE:5C:C0:8A:21:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/3133382e3231392e3138342e302f32322d3234203d3e20323637323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:05:5f:41:03:b1:1b:de:57:b9:eb:6d:2f:f1:80:0e:b5:80:
         04:3a:40:ec:98:c7:15:01:04:de:ba:f1:fa:15:5f:1a:fe:9a:
         fb:d6:d4:bf:4e:8f:d8:18:49:a5:96:04:4c:e6:df:6e:a1:3d:
         1e:36:83:3e:09:fb:df:d7:1b:b3:cb:b0:5c:62:d2:ab:f8:b6:
         b6:8a:73:a8:fc:7a:61:8a:8a:f3:34:78:b6:8a:45:66:6a:f7:
         01:87:cc:54:f0:2a:80:0c:0b:f0:2f:e5:42:fc:9b:62:a2:4d:
         48:ba:ac:74:fd:98:d7:d2:85:ab:2e:28:50:17:a2:62:d9:b7:
         f8:f7:25:f7:3f:97:c2:bf:8b:e0:93:01:d0:76:96:2f:00:df:
         0d:1a:76:e8:46:f3:2d:3e:dc:01:51:8f:b6:f4:ab:df:6a:7c:
         bf:55:78:32:98:39:5b:f9:9d:77:09:1e:13:3c:29:24:f0:e4:
         fc:24:62:3c:64:02:c1:13:0d:f4:71:99:95:6e:c0:9c:e1:2b:
         37:c7:f8:f9:45:7d:22:55:0a:bd:6b:e2:c2:47:2b:d2:aa:70:
         79:ae:e9:81:47:09:8f:c2:5c:54:e0:1d:6d:0d:c1:69:0a:be:
         12:7a:e9:4a:f0:87:c5:86:74:4f:c6:4b:5e:ca:5e:03:59:fa:
         8b:85:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:12:37 2025 by rpki-client