Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/3133382e39372e3139322e302f32322d3232203d3e20323634323030.roa
File:                     3133382e39372e3139322e302f32322d3232203d3e20323634323030.roa (raw, json)
Hash identifier:          AM1IbXcRNg3OpWG2pWNopokl8PLXxa6CLgKavSR2kZ0=
Subject key identifier:   AB:4A:80:50:2B:56:55:66:F3:D2:F7:01:76:F0:95:15:E7:A2:73:0E
Certificate issuer:       /CN=BA19CE12E965E20D169A9F9481AC6C8F31644D3E
Certificate serial:       26864829ABD3E59C58744DB945083DE3A39A98D5
Authority key identifier: BA:19:CE:12:E9:65:E2:0D:16:9A:9F:94:81:AC:6C:8F:31:64:4D:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/3133382e39372e3139322e302f32322d3232203d3e20323634323030.roa
Signing time:             Sat 19 Oct 2024 00:29:28 +0000
ROA not before:           Sat 19 Oct 2024 00:24:28 +0000
ROA not after:            Sat 18 Oct 2025 00:29:28 +0000
asID:                     264200
IP address blocks:        138.97.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.crl
                          rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 13:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:86:48:29:ab:d3:e5:9c:58:74:4d:b9:45:08:3d:e3:a3:9a:98:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA19CE12E965E20D169A9F9481AC6C8F31644D3E
        Validity
            Not Before: Oct 19 00:24:28 2024 GMT
            Not After : Oct 18 00:29:28 2025 GMT
        Subject: CN=AB4A80502B565566F3D2F70176F09515E7A2730E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:69:57:f7:26:c2:b4:94:b2:4e:a4:03:e3:c9:
                    91:5e:43:d6:b0:89:5a:3d:59:96:b8:0b:ec:da:bc:
                    15:c2:1f:1b:28:bc:48:b9:19:b9:5d:38:60:cc:09:
                    44:f0:30:95:5b:27:c9:39:ac:9b:2e:7b:ba:e0:f3:
                    36:20:93:50:81:15:1e:87:a6:57:89:21:27:e7:9f:
                    25:6d:10:6a:99:46:bb:b6:e2:64:8c:9b:e6:be:57:
                    e8:14:53:cf:30:38:06:69:19:d3:46:4e:c5:9c:a8:
                    1f:d2:32:a6:37:92:2f:5b:5f:07:69:e5:0c:bd:ea:
                    23:52:8b:79:c5:b9:c1:91:f1:4a:78:5b:10:1c:36:
                    ad:df:84:6f:27:8e:d3:1e:7d:fd:ac:67:f1:a5:0d:
                    e7:08:a9:fb:cd:77:9a:7b:7e:7c:a8:b5:c3:22:41:
                    c0:af:a4:62:05:01:35:8b:59:f4:89:f3:42:a1:8e:
                    2d:81:8a:9c:b5:f1:c3:b8:87:4e:ed:00:66:6d:12:
                    9b:6b:39:96:2d:64:05:2d:15:f5:e9:c0:37:b0:39:
                    2c:9d:28:bf:cc:a4:9d:30:33:98:e8:dc:90:ce:a2:
                    85:cb:9d:9a:22:aa:9d:3e:3b:fd:a3:7d:7a:6b:81:
                    35:31:51:f8:43:37:69:81:9d:55:4e:c2:fc:d8:00:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4A:80:50:2B:56:55:66:F3:D2:F7:01:76:F0:95:15:E7:A2:73:0E
            X509v3 Authority Key Identifier:
                keyid:BA:19:CE:12:E9:65:E2:0D:16:9A:9F:94:81:AC:6C:8F:31:64:4D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/3133382e39372e3139322e302f32322d3232203d3e20323634323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:79:6a:d5:9d:0b:32:81:e3:3e:cd:cc:45:c3:44:44:c1:d5:
         f1:66:9b:74:14:04:ea:65:99:a5:3f:92:ba:02:5c:e4:9e:87:
         0b:10:4f:d9:d6:57:6d:1f:8e:b7:fa:6e:97:ee:37:ea:cd:34:
         b1:74:5d:fb:07:52:c7:bf:50:bb:9e:21:98:77:bb:b4:53:92:
         2b:d6:5f:d2:60:61:65:af:22:ea:60:6b:49:6c:a6:ea:9e:ee:
         3a:f1:e6:2b:4c:02:e1:f4:c7:d3:66:cb:12:94:7c:24:c6:29:
         9c:ac:2b:61:35:7a:66:56:df:ee:8a:b9:db:5a:a8:2d:01:44:
         86:d5:30:86:09:a5:1c:fd:74:4e:c9:32:d7:a3:18:a2:5b:8c:
         ca:89:89:81:14:01:52:b5:16:ef:a7:f4:24:f9:7c:d5:bb:57:
         1b:c5:b8:eb:9b:d4:6b:88:f4:cf:4a:15:2b:48:9c:f3:da:45:
         a5:d3:05:61:11:08:34:82:f3:d4:9a:cb:49:45:47:57:4d:1d:
         71:9c:e7:33:23:9e:59:23:76:b4:82:a1:a2:66:79:be:7b:3c:
         34:1e:7e:22:db:9b:2f:90:6b:ff:e5:eb:38:7d:d1:5f:fe:f7:
         05:49:d2:74:34:ec:da:bb:be:d9:1f:9e:fc:f0:fb:3a:fc:1f:
         41:62:09:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:29 2025 by rpki-client