Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/3133382e35392e3230382e302f32322d3234203d3e20323634313136.roa
File:                     3133382e35392e3230382e302f32322d3234203d3e20323634313136.roa (raw, json)
Hash identifier:          1MwPaeg0yHOJ1Doa1McVeYrt+QEEf9HjVVdV42nDnc0=
Subject key identifier:   0D:9B:81:FE:AC:B7:9E:35:BF:F3:97:3A:F9:91:26:7F:93:4C:02:72
Certificate issuer:       /CN=22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB
Certificate serial:       722CD9F140EC9033468D0A8849A5C49660FE5643
Authority key identifier: 22:DE:B3:D2:A1:4F:98:97:27:53:CA:F8:B7:BC:5C:5E:20:27:F7:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/3133382e35392e3230382e302f32322d3234203d3e20323634313136.roa
Signing time:             Wed 29 May 2024 13:56:50 +0000
ROA not before:           Wed 29 May 2024 13:51:50 +0000
ROA not after:            Wed 28 May 2025 13:56:50 +0000
asID:                     264116
IP address blocks:        138.59.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.crl
                          rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 13:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2c:d9:f1:40:ec:90:33:46:8d:0a:88:49:a5:c4:96:60:fe:56:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB
        Validity
            Not Before: May 29 13:51:50 2024 GMT
            Not After : May 28 13:56:50 2025 GMT
        Subject: CN=0D9B81FEACB79E35BFF3973AF991267F934C0272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0e:c7:4e:81:81:5b:d2:a7:43:27:4e:83:5f:
                    0a:b9:97:12:ca:e0:5a:07:02:5e:58:a7:41:21:2b:
                    3e:fc:aa:68:df:41:48:c6:2e:bd:f6:86:b6:5d:79:
                    29:23:6e:99:9d:a8:7d:26:7d:86:5d:2c:4b:f3:a7:
                    3d:dd:53:f5:b4:63:f6:26:bc:39:aa:d2:7f:43:d0:
                    e8:70:0e:87:1f:31:e8:66:02:f3:77:af:25:17:eb:
                    a6:37:32:fd:a1:68:0a:92:5e:1d:c1:29:1a:20:a0:
                    62:75:48:d7:7c:ca:d2:54:77:8b:4b:52:45:dc:3f:
                    20:b2:db:b9:bb:95:82:4b:21:90:d3:09:62:6b:de:
                    3c:29:d2:97:a1:c4:88:76:65:cd:5d:52:f7:b0:ad:
                    7e:9f:fa:cd:a9:5e:94:00:83:d5:85:0c:24:52:7b:
                    ec:31:f4:d6:d2:62:eb:18:0a:2b:24:7a:bf:3f:98:
                    71:d0:bf:86:67:62:a5:9d:b9:45:8d:3a:53:ec:e1:
                    c3:41:f4:58:dd:5b:64:5a:1f:81:27:7b:f2:d2:07:
                    d9:d5:b1:df:aa:b1:8b:78:3f:50:b1:a0:75:ee:de:
                    ce:1e:d1:38:96:c0:b7:a6:49:31:15:a4:b5:ba:7c:
                    94:59:64:ce:bf:b0:62:ab:5d:0f:59:5f:9c:49:22:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9B:81:FE:AC:B7:9E:35:BF:F3:97:3A:F9:91:26:7F:93:4C:02:72
            X509v3 Authority Key Identifier:
                keyid:22:DE:B3:D2:A1:4F:98:97:27:53:CA:F8:B7:BC:5C:5E:20:27:F7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/3133382e35392e3230382e302f32322d3234203d3e20323634313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:fe:7e:d0:f8:37:4d:cc:41:1b:a1:0a:f1:c1:33:1f:27:ef:
         b1:05:13:8f:85:66:f6:ae:ba:6a:c5:da:61:07:67:15:5f:77:
         9e:4c:19:c1:e1:e1:0e:dd:fa:f4:a5:ff:ab:c0:b5:5b:37:c3:
         83:e3:bb:d8:4c:a5:13:49:3d:21:7b:46:c2:a2:f7:c6:0d:98:
         34:f0:54:05:c7:56:4d:cb:07:28:0e:b5:10:00:44:a7:0e:e9:
         0c:d1:db:a1:1b:d7:f0:75:6d:e8:09:84:f0:98:01:78:61:db:
         1f:4a:5e:45:aa:00:a4:25:4b:3c:30:d1:16:56:d6:a4:14:c6:
         6e:05:78:9b:37:c0:57:40:60:d7:bd:3d:71:d9:67:43:83:b9:
         3a:ba:68:7b:dc:85:32:05:bb:6b:42:62:cb:d7:bb:90:c7:37:
         8a:e4:db:cf:7a:db:9c:d1:4b:f9:c3:73:bd:bc:72:bd:70:54:
         04:ea:b5:10:fe:98:2d:aa:88:ca:52:49:c4:15:5c:9b:c8:a1:
         40:12:d9:97:e0:d4:66:08:4d:cb:d0:54:d6:cf:9e:99:41:16:
         ea:dc:f4:82:f7:29:a8:6e:c9:b4:e0:c5:05:71:ab:fe:c2:dd:
         df:de:72:b6:c0:70:7a:9d:b6:6f:dd:24:b9:5c:19:87:53:0a:
         c4:2f:62:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:21 2025 by rpki-client