Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32332d3233203d3e20323633383636.roa
File:                     3133382e3138362e3131322e302f32332d3233203d3e20323633383636.roa (raw, json)
Hash identifier:          YIKTebQ591d26o5lMq6zjNC+Rl5EiFbDG9Vs+KYFP6k=
Subject key identifier:   8C:B7:EF:C9:A1:36:C2:E8:EF:3D:8C:A1:11:22:6F:E2:0A:F0:6F:DF
Certificate issuer:       /CN=0D3D646783321347829AF3DBE2CF61D9810C07DF
Certificate serial:       0F8620F1D5C6D2E1070298BF5CA2611ED632E840
Authority key identifier: 0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32332d3233203d3e20323633383636.roa
Signing time:             Wed 22 Jan 2025 20:20:16 +0000
ROA not before:           Wed 22 Jan 2025 20:15:16 +0000
ROA not after:            Wed 21 Jan 2026 20:20:16 +0000
asID:                     263866
IP address blocks:        138.186.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.crl
                          rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 16:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:86:20:f1:d5:c6:d2:e1:07:02:98:bf:5c:a2:61:1e:d6:32:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D3D646783321347829AF3DBE2CF61D9810C07DF
        Validity
            Not Before: Jan 22 20:15:16 2025 GMT
            Not After : Jan 21 20:20:16 2026 GMT
        Subject: CN=8CB7EFC9A136C2E8EF3D8CA111226FE20AF06FDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:84:df:e8:70:d1:76:1f:39:75:0f:16:8c:
                    48:4e:57:99:99:58:51:bc:23:72:b5:fa:63:8c:fa:
                    16:0f:70:04:ee:65:37:01:b1:46:c4:5d:7a:d8:a5:
                    50:00:ed:b3:da:d7:82:1d:45:86:f5:77:4c:8b:f9:
                    01:fb:7e:9b:ae:c2:4b:72:71:37:bf:e2:24:ad:3c:
                    53:48:09:22:3c:c2:0d:0f:6e:bf:30:9a:79:e7:53:
                    55:9e:04:79:28:0b:e1:b4:ff:4f:8d:16:18:d4:9f:
                    de:bd:61:09:76:88:8b:41:6d:42:3d:91:c7:94:b6:
                    96:60:4c:67:bd:a8:50:4f:65:33:27:3a:4d:78:04:
                    35:62:74:80:43:06:0a:b1:56:2e:af:a6:7a:c8:ad:
                    ba:d3:f0:f5:99:09:78:61:49:9a:ef:f5:09:b8:95:
                    87:3c:de:3e:3d:15:52:94:47:ed:cb:76:40:6c:0f:
                    e2:fa:61:25:e8:13:15:fa:c6:23:f3:a9:be:79:c7:
                    69:1f:75:2a:81:d9:e4:47:25:6b:db:0d:75:f1:b5:
                    ba:a8:43:07:5b:8d:bf:95:24:e0:e7:49:da:3e:a4:
                    10:ed:6c:9a:8c:cb:de:87:4b:21:91:ee:9a:bd:e5:
                    e0:82:77:2f:31:0b:9d:39:a7:f3:21:83:81:b5:30:
                    f2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B7:EF:C9:A1:36:C2:E8:EF:3D:8C:A1:11:22:6F:E2:0A:F0:6F:DF
            X509v3 Authority Key Identifier:
                keyid:0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32332d3233203d3e20323633383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:8b:b1:31:9c:cc:2c:cc:d8:25:2d:a2:ba:72:23:7f:bc:fa:
         b2:97:13:a7:d6:d5:f6:92:f8:28:1a:ea:40:8c:29:56:07:f2:
         92:b2:89:f2:4c:9a:1b:60:44:bd:ce:3f:fc:0d:37:58:e0:c3:
         24:93:bf:ce:1d:d8:88:44:db:de:3e:20:b7:24:54:dd:d6:a8:
         ee:f5:92:8c:30:75:a9:fc:77:7c:89:68:58:a8:1a:02:a4:65:
         b3:bd:26:90:4c:91:68:bb:d1:57:18:5d:f6:59:c6:eb:88:3f:
         d4:40:7d:14:c1:54:d6:27:57:90:01:eb:be:51:0d:89:36:16:
         94:3a:b6:00:34:bc:e8:c4:31:5c:8a:29:2f:77:ab:ac:69:60:
         2c:6b:86:9c:4c:d7:0c:ae:e0:84:cb:bc:7e:15:b9:22:ae:f8:
         18:24:ed:15:78:bc:88:d3:f2:78:3f:f9:36:51:0c:aa:8d:4a:
         44:e7:31:a8:60:7d:9d:9f:78:5f:0d:d9:da:73:5d:f2:83:02:
         ac:c9:db:2c:b6:62:f3:6b:be:b8:3d:32:25:54:e6:e3:57:29:
         1f:65:4d:58:5d:4f:87:85:f5:25:32:7f:a2:90:0d:66:c5:74:
         3a:98:7b:07:04:37:11:48:db:96:b7:61:23:6f:16:86:02:08:
         e2:96:cd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:52 2025 by rpki-client