Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoRVcMkj77p9V4fgsFBZzoz8FhQGbrQnnK4MkKiKGtSD/0/3133382e3138362e34382e302f32322d3234203d3e20323633383538.roa
File:                     3133382e3138362e34382e302f32322d3234203d3e20323633383538.roa (raw, json)
Hash identifier:          cAlR2utkJxT9g3YfDs+EY014SjUpxYRtjX6m2BYkdqw=
Subject key identifier:   53:27:0E:FE:99:94:9B:81:27:58:7C:42:87:69:74:CA:43:89:DD:6B
Certificate issuer:       /CN=53BF4224C1DAB932B987D0CF66C65662A8B5020F
Certificate serial:       7E42727A1171B772251B1FB95312081E1D97F78F
Authority key identifier: 53:BF:42:24:C1:DA:B9:32:B9:87:D0:CF:66:C6:56:62:A8:B5:02:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53BF4224C1DAB932B987D0CF66C65662A8B5020F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoRVcMkj77p9V4fgsFBZzoz8FhQGbrQnnK4MkKiKGtSD/0/3133382e3138362e34382e302f32322d3234203d3e20323633383538.roa
Signing time:             Tue 21 Jan 2025 18:27:51 +0000
ROA not before:           Tue 21 Jan 2025 18:22:51 +0000
ROA not after:            Tue 20 Jan 2026 18:27:51 +0000
asID:                     263858
IP address blocks:        138.186.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoRVcMkj77p9V4fgsFBZzoz8FhQGbrQnnK4MkKiKGtSD/0/53BF4224C1DAB932B987D0CF66C65662A8B5020F.crl
                          rsync://rpki-repo.registro.br/repo/GoRVcMkj77p9V4fgsFBZzoz8FhQGbrQnnK4MkKiKGtSD/0/53BF4224C1DAB932B987D0CF66C65662A8B5020F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53BF4224C1DAB932B987D0CF66C65662A8B5020F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 02:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:42:72:7a:11:71:b7:72:25:1b:1f:b9:53:12:08:1e:1d:97:f7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53BF4224C1DAB932B987D0CF66C65662A8B5020F
        Validity
            Not Before: Jan 21 18:22:51 2025 GMT
            Not After : Jan 20 18:27:51 2026 GMT
        Subject: CN=53270EFE99949B8127587C42876974CA4389DD6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c6:1f:80:e4:4a:c3:59:28:13:85:20:10:d4:
                    e8:84:09:0f:26:4c:65:df:11:7b:46:73:f2:a3:d6:
                    f5:6b:e8:cd:27:31:c1:56:08:2b:4a:0a:2b:4a:61:
                    a9:19:7f:71:5a:3c:0d:94:f6:cd:6f:e6:2a:12:b8:
                    2a:76:d4:da:b2:0c:c3:e8:ab:85:bd:9a:f4:7f:61:
                    8b:aa:a8:2c:dc:cf:cd:cc:46:ee:18:8a:86:ae:43:
                    90:4e:04:d4:f2:dc:32:12:2e:11:68:84:98:43:c0:
                    aa:86:79:5f:70:1e:99:82:d1:83:5f:39:37:40:b0:
                    37:84:6a:e7:a0:77:96:2f:ce:a3:9a:e6:f3:90:07:
                    d9:c1:7c:01:a7:c3:4b:a5:ef:ea:27:9e:15:a3:da:
                    4b:30:d9:1c:6f:f4:56:cb:37:38:3c:3e:62:9c:be:
                    47:fe:38:60:c5:35:fa:20:22:98:6b:20:e5:a4:ca:
                    bd:7e:f1:e6:44:50:46:7b:29:ee:0f:5d:0a:44:cc:
                    79:e9:8b:ed:7c:2f:46:00:1b:ea:95:36:3b:e6:b6:
                    01:1d:27:b5:0a:d2:91:7c:8b:b6:ba:c8:bb:82:5d:
                    4c:f9:62:cc:b0:3e:23:dd:a1:b0:39:9c:61:ec:6e:
                    8e:bf:8c:70:6c:a0:69:8d:a1:8b:c4:8f:d4:ea:41:
                    bb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:27:0E:FE:99:94:9B:81:27:58:7C:42:87:69:74:CA:43:89:DD:6B
            X509v3 Authority Key Identifier:
                keyid:53:BF:42:24:C1:DA:B9:32:B9:87:D0:CF:66:C6:56:62:A8:B5:02:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoRVcMkj77p9V4fgsFBZzoz8FhQGbrQnnK4MkKiKGtSD/0/53BF4224C1DAB932B987D0CF66C65662A8B5020F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53BF4224C1DAB932B987D0CF66C65662A8B5020F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoRVcMkj77p9V4fgsFBZzoz8FhQGbrQnnK4MkKiKGtSD/0/3133382e3138362e34382e302f32322d3234203d3e20323633383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:1e:31:14:79:6f:10:11:b8:7c:8f:81:5f:aa:2e:93:7c:76:
         ef:30:b2:1d:a1:11:28:7c:3e:6d:64:f1:95:c7:a9:4d:81:ba:
         5d:80:46:c7:e7:e8:5a:4b:f0:a2:8b:d2:fe:3f:03:be:57:33:
         c4:b3:23:3f:01:76:19:82:de:9b:60:0a:3a:d8:00:b6:4f:40:
         35:e9:da:a3:26:2d:d7:29:91:4d:80:45:25:33:55:17:f0:3d:
         49:02:3c:a2:0d:c7:cd:f8:24:71:fd:f5:ed:92:65:f4:33:14:
         26:a9:f9:ba:a3:85:98:16:01:91:fe:2a:26:c4:9f:e4:8e:f1:
         41:9e:d1:44:63:60:a3:82:8d:5d:36:07:30:88:3e:8e:a3:21:
         aa:38:81:55:c5:26:cb:ed:73:24:f5:44:ad:34:54:ab:66:be:
         4e:c2:af:75:e7:79:c1:ad:5a:21:5b:12:9f:e8:dd:a5:b4:4f:
         67:34:87:80:21:13:f6:0e:05:cd:65:4d:f1:c3:11:6e:a0:55:
         b7:18:61:b8:9c:41:52:24:d5:d5:d3:27:2c:79:3c:cf:49:1b:
         6f:58:8e:cc:ab:19:ee:31:50:81:88:d8:00:88:ad:12:2d:1e:
         80:a1:de:00:02:65:16:a1:b8:72:19:47:c5:a8:8a:b3:f6:04:
         66:52:9d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:53:20 2025 by rpki-client