Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/3133382e39342e36382e302f32322d3234203d3e20323633343731.roa
File:                     3133382e39342e36382e302f32322d3234203d3e20323633343731.roa (raw, json)
Hash identifier:          MMRtFIKpcInpUljfmiJJoj8yUG31yHydflZjPZDBbuM=
Subject key identifier:   32:9A:E2:B4:97:73:E9:BD:22:0B:30:33:24:AA:1E:E2:4B:8F:8E:B8
Certificate issuer:       /CN=EA745FF35657420CF2CD31D74379F929ADDD10FE
Certificate serial:       53722D6DCA264041389DDE25A01E83B168972D09
Authority key identifier: EA:74:5F:F3:56:57:42:0C:F2:CD:31:D7:43:79:F9:29:AD:DD:10:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA745FF35657420CF2CD31D74379F929ADDD10FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/3133382e39342e36382e302f32322d3234203d3e20323633343731.roa
Signing time:             Wed 05 Jun 2024 19:04:42 +0000
ROA not before:           Wed 05 Jun 2024 18:59:42 +0000
ROA not after:            Wed 04 Jun 2025 19:04:42 +0000
asID:                     263471
IP address blocks:        138.94.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/EA745FF35657420CF2CD31D74379F929ADDD10FE.crl
                          rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/EA745FF35657420CF2CD31D74379F929ADDD10FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA745FF35657420CF2CD31D74379F929ADDD10FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 18:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:72:2d:6d:ca:26:40:41:38:9d:de:25:a0:1e:83:b1:68:97:2d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA745FF35657420CF2CD31D74379F929ADDD10FE
        Validity
            Not Before: Jun  5 18:59:42 2024 GMT
            Not After : Jun  4 19:04:42 2025 GMT
        Subject: CN=329AE2B49773E9BD220B303324AA1EE24B8F8EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:29:d8:7b:57:9f:61:17:39:9b:13:0d:70:
                    8c:32:a6:42:10:7b:a4:6f:34:68:b5:39:56:67:2c:
                    ef:ed:05:6b:06:84:78:bf:f4:d8:03:66:4d:33:5f:
                    14:8f:7a:97:b6:83:04:b6:e5:7e:3a:4d:f0:ec:58:
                    b2:b1:e0:3b:32:30:0c:2c:2b:d5:d2:19:7c:f5:11:
                    2d:b8:e5:08:f4:e4:62:fc:02:07:6a:ca:92:6d:94:
                    4a:41:d6:09:fd:6b:15:c7:c8:30:c9:0a:43:71:17:
                    25:d5:1e:8b:7d:80:88:08:a7:c3:df:b5:25:5e:0c:
                    94:54:28:14:16:eb:1d:6c:89:96:e2:0d:d5:ef:50:
                    de:cd:b2:f6:4b:c3:c1:a4:ee:fc:a6:fb:c0:b9:ed:
                    de:36:78:8e:7a:58:89:e5:d9:90:ec:d5:c2:e2:f8:
                    1a:61:56:cc:f4:84:2d:fb:39:a3:01:1f:fe:43:c1:
                    ce:ee:3d:a4:13:04:80:65:db:45:d8:be:a5:f4:d1:
                    24:45:fc:c6:47:de:80:c4:84:2d:df:83:98:da:27:
                    04:c1:2f:d1:6f:0e:a7:e9:5a:4f:84:11:bc:82:2b:
                    98:3e:66:f6:00:32:0e:5a:88:db:bb:ba:89:20:0b:
                    4f:d9:a3:e9:aa:21:3a:11:10:8f:9c:5b:04:57:6d:
                    a5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9A:E2:B4:97:73:E9:BD:22:0B:30:33:24:AA:1E:E2:4B:8F:8E:B8
            X509v3 Authority Key Identifier:
                keyid:EA:74:5F:F3:56:57:42:0C:F2:CD:31:D7:43:79:F9:29:AD:DD:10:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/EA745FF35657420CF2CD31D74379F929ADDD10FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA745FF35657420CF2CD31D74379F929ADDD10FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/3133382e39342e36382e302f32322d3234203d3e20323633343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:c7:c9:21:94:19:24:c9:2e:0d:13:11:32:88:0e:16:cc:5c:
         f2:c9:30:42:0a:01:01:10:05:99:2f:37:c2:e5:ad:83:f2:85:
         5b:3b:8d:71:df:ed:f1:37:c1:68:7a:d0:8e:6f:9d:af:3f:5b:
         76:eb:3a:0b:a3:ff:63:80:20:8e:d9:2d:66:fd:a1:24:b0:1a:
         82:47:65:8f:e2:d8:4e:a5:8f:73:b1:2e:50:f2:a7:79:86:ad:
         34:c5:cf:20:36:e8:8d:54:99:f7:ce:24:92:2f:b3:9e:76:1e:
         ae:18:b4:8d:c2:e9:ca:e1:96:2f:48:ca:ca:26:c0:7d:54:c9:
         09:62:11:18:53:e7:7e:22:c2:63:79:d4:f7:d9:c8:6a:73:03:
         0b:a3:7d:a5:ff:56:7f:b3:68:bc:22:e1:98:2c:36:b4:2f:9f:
         67:a3:a7:67:56:41:4c:7c:b5:ff:74:12:1b:51:6d:40:29:99:
         fc:95:5c:ea:44:a7:ac:a1:9a:a9:17:f1:a6:94:fa:9b:07:6a:
         e9:14:41:17:70:ac:7f:9d:8d:05:fd:d1:ed:70:e2:cd:e1:f1:
         e5:ba:5a:7b:c8:c3:8a:92:e7:bd:06:5d:ec:ac:48:9d:0e:4a:
         4a:72:cd:12:5b:de:51:98:64:c3:fa:88:75:d9:a0:35:12:3f:
         7b:71:a7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:58:05 2025 by rpki-client