Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32322d3232203d3e20323633383636.roa
File:                     3133382e3138362e3131322e302f32322d3232203d3e20323633383636.roa (raw, json)
Hash identifier:          uOTCXcJUdwGtc94NsKtNIejlJ++NnNHAphQPM/+CB4A=
Subject key identifier:   A8:9C:1A:82:D2:22:EF:E1:15:69:63:15:5A:9A:DD:69:66:DC:3B:60
Certificate issuer:       /CN=0D3D646783321347829AF3DBE2CF61D9810C07DF
Certificate serial:       557FF2D5997CEFC0F53BC1030132D4EB3B0224FA
Authority key identifier: 0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32322d3232203d3e20323633383636.roa
Signing time:             Wed 22 Jan 2025 20:20:21 +0000
ROA not before:           Wed 22 Jan 2025 20:15:21 +0000
ROA not after:            Wed 21 Jan 2026 20:20:21 +0000
asID:                     263866
IP address blocks:        138.186.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.crl
                          rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 14:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:7f:f2:d5:99:7c:ef:c0:f5:3b:c1:03:01:32:d4:eb:3b:02:24:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D3D646783321347829AF3DBE2CF61D9810C07DF
        Validity
            Not Before: Jan 22 20:15:21 2025 GMT
            Not After : Jan 21 20:20:21 2026 GMT
        Subject: CN=A89C1A82D222EFE1156963155A9ADD6966DC3B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f1:0f:58:52:75:79:8f:da:9a:27:4b:7d:fd:
                    f8:75:a7:0f:57:83:25:10:63:22:37:3a:cb:7e:fb:
                    1e:cd:f9:72:85:40:53:45:19:24:9a:93:4b:66:a6:
                    e0:b1:50:46:d5:bb:28:1c:b2:80:da:9f:b5:68:93:
                    95:c5:85:e4:1d:52:5a:d2:6a:0e:9c:41:d9:fc:c0:
                    54:82:93:39:7a:9f:c0:93:91:eb:12:b1:5f:3f:d8:
                    d1:68:07:c4:40:84:54:35:78:20:f8:56:2c:34:c5:
                    09:7b:d0:0a:25:65:6d:9e:97:4c:8f:ab:19:c5:5f:
                    0e:d7:6f:4a:13:0b:39:46:3e:ab:84:ff:a5:af:30:
                    ae:fe:29:4a:c0:b4:14:6d:ad:c8:73:7f:92:08:31:
                    f3:4a:62:a8:57:37:26:c5:59:b6:84:85:f9:a4:a6:
                    49:80:da:09:20:7f:78:6c:9b:1b:d3:a1:f2:39:79:
                    d4:29:82:fc:ef:ec:2c:d1:e2:8e:61:34:40:bf:27:
                    4c:c4:93:d4:74:02:0c:be:00:ed:8b:0e:9c:33:2a:
                    a4:15:fe:19:41:56:59:22:7b:91:79:c8:db:cb:6c:
                    eb:6e:1d:8f:67:f1:34:6c:02:4e:17:9c:43:c3:33:
                    14:a2:fa:5a:1d:87:f3:e7:35:ed:7a:7f:97:a4:05:
                    bd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9C:1A:82:D2:22:EF:E1:15:69:63:15:5A:9A:DD:69:66:DC:3B:60
            X509v3 Authority Key Identifier:
                keyid:0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32322d3232203d3e20323633383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:d5:14:21:77:7d:7f:ef:88:ba:bb:f7:de:d6:16:f7:ca:64:
         bc:c6:7f:ba:8e:53:f6:ba:48:94:85:c9:ce:b3:26:bd:63:74:
         fb:aa:e8:56:44:71:b1:1e:77:75:de:15:8f:fb:42:0b:08:03:
         1e:ba:e1:ae:53:9f:25:82:a9:b1:5c:5a:7e:5b:05:a3:40:09:
         77:dd:d8:66:6d:91:9f:42:bb:97:6d:8c:a4:57:8e:c4:44:5c:
         dd:01:e0:9d:9e:f1:8c:63:c9:d3:00:77:de:26:00:c0:06:82:
         2b:6c:2a:f6:f8:1b:04:bf:f5:ef:0b:3b:83:a7:1b:24:3f:92:
         e7:39:4a:7d:fc:c0:3f:90:11:90:7d:5a:81:3f:34:e5:f5:d3:
         1c:79:c5:b2:af:37:a3:75:20:5a:7a:73:47:b2:88:49:12:5a:
         d9:52:07:ba:db:00:ce:29:8a:7a:65:50:dd:63:1b:b8:9d:f6:
         3f:d3:46:48:24:3a:08:39:b0:d8:5e:e0:9c:43:2b:77:f0:08:
         75:71:59:9f:8c:27:ed:93:9d:9c:df:ee:e2:23:22:dc:f2:76:
         52:ef:ed:3d:bd:f7:ca:d8:33:5e:71:7a:c7:83:92:54:db:c4:
         a8:cf:c1:c5:00:9b:3a:19:7f:bf:5b:40:2e:33:fe:51:c8:e0:
         7f:ea:7e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:52:04 2025 by rpki-client