Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/3133382e3132312e3131362e302f32322d3234203d3e20323634323935.roa
File:                     3133382e3132312e3131362e302f32322d3234203d3e20323634323935.roa (raw, json)
Hash identifier:          IBC5za+OEWAn+9RPw/Eb26n+ZknyENVQZJKGt+88wRY=
Subject key identifier:   FF:79:62:5B:80:EF:2F:4B:C8:CB:95:8C:F6:67:F7:59:1D:C1:4D:50
Certificate issuer:       /CN=FF378FCED112801045DB136F6CA069344BA08F50
Certificate serial:       13A820F0742FDC9604642C7C2A677768C41B449B
Authority key identifier: FF:37:8F:CE:D1:12:80:10:45:DB:13:6F:6C:A0:69:34:4B:A0:8F:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF378FCED112801045DB136F6CA069344BA08F50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/3133382e3132312e3131362e302f32322d3234203d3e20323634323935.roa
Signing time:             Tue 03 Jun 2025 18:12:17 +0000
ROA not before:           Tue 03 Jun 2025 18:07:17 +0000
ROA not after:            Tue 02 Jun 2026 18:12:17 +0000
asID:                     264295
IP address blocks:        138.121.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/FF378FCED112801045DB136F6CA069344BA08F50.crl
                          rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/FF378FCED112801045DB136F6CA069344BA08F50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF378FCED112801045DB136F6CA069344BA08F50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a8:20:f0:74:2f:dc:96:04:64:2c:7c:2a:67:77:68:c4:1b:44:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF378FCED112801045DB136F6CA069344BA08F50
        Validity
            Not Before: Jun  3 18:07:17 2025 GMT
            Not After : Jun  2 18:12:17 2026 GMT
        Subject: CN=FF79625B80EF2F4BC8CB958CF667F7591DC14D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1f:30:41:83:8c:c8:1b:11:2d:38:78:79:5b:
                    43:59:c5:e9:bb:f6:05:d0:ef:7c:ad:4b:1a:52:83:
                    d9:84:1b:9f:3b:7b:55:f7:a9:52:88:94:6e:e0:77:
                    22:d9:40:e9:03:a9:62:8f:86:a1:11:6c:7f:f0:23:
                    64:42:0f:26:24:01:9f:0f:a7:55:2b:e4:74:d6:bf:
                    26:25:5b:94:e7:5e:64:b5:00:6f:2a:ad:7f:a5:b5:
                    b1:96:ca:c7:75:cc:3c:b2:80:c3:1d:ad:04:02:ad:
                    4d:45:e7:32:91:63:5c:09:19:85:a4:90:dc:6c:be:
                    8d:56:44:1f:52:44:f4:0f:51:e2:91:3c:6a:24:ed:
                    34:ad:73:50:fb:01:1a:29:0d:e6:37:0f:c7:4f:42:
                    c1:60:42:71:5b:16:e5:0c:b6:87:01:6c:5f:67:70:
                    c6:a1:02:48:07:b5:00:9f:77:4d:78:68:98:10:72:
                    18:89:1c:e1:7f:37:95:89:f4:b8:7f:86:01:ef:ec:
                    57:b6:b3:39:2c:9e:11:70:0b:1f:10:be:c6:f6:ee:
                    0c:42:71:a7:fb:b1:2f:13:c8:70:c7:ab:e2:7c:d6:
                    c7:85:4e:4c:61:2b:43:26:5c:d6:9d:33:d7:b3:c4:
                    62:3a:09:05:34:52:f4:7c:e0:e3:bd:53:f2:db:51:
                    3c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:79:62:5B:80:EF:2F:4B:C8:CB:95:8C:F6:67:F7:59:1D:C1:4D:50
            X509v3 Authority Key Identifier:
                keyid:FF:37:8F:CE:D1:12:80:10:45:DB:13:6F:6C:A0:69:34:4B:A0:8F:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/FF378FCED112801045DB136F6CA069344BA08F50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF378FCED112801045DB136F6CA069344BA08F50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/3133382e3132312e3131362e302f32322d3234203d3e20323634323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:07:fa:8f:2d:cf:8f:52:53:b1:b7:31:3e:c7:40:08:1e:42:
         c4:30:3e:c3:02:b7:9b:2e:4f:ab:df:d0:5d:05:bd:60:08:f9:
         a8:b0:94:e1:c8:a5:a7:47:e0:91:3b:f4:c4:6a:91:e6:b4:44:
         29:9c:e0:fb:40:a4:05:0b:26:f0:03:f0:59:41:0e:9d:53:3a:
         0d:4b:93:61:20:21:97:d7:1c:15:3a:28:2e:f8:04:50:eb:36:
         4c:95:59:65:fb:49:95:df:e8:4d:57:be:1d:1e:42:5d:bb:99:
         6e:73:9c:d5:19:ce:e1:7a:a3:7b:ac:7c:cb:9b:fd:0c:60:07:
         b5:21:c8:0f:5b:96:86:43:06:34:88:fe:16:aa:2b:e7:df:a4:
         75:4a:ca:eb:12:7e:b6:9c:c2:bb:42:72:40:32:ea:35:c1:a4:
         b3:2f:1f:ae:0e:6e:30:76:51:9a:a1:3d:c9:39:22:57:4d:80:
         2a:3b:c9:14:4a:ea:f0:d9:aa:62:a2:cb:da:11:ab:da:b1:78:
         c3:47:d8:95:ce:34:c4:8f:cc:aa:32:8d:ef:e3:5b:d5:06:09:
         2b:44:dd:d8:39:b9:a5:3a:96:06:7b:5b:f7:b0:44:8b:30:c5:
         20:ee:09:a5:6f:00:2c:5a:d1:cd:e3:2b:9f:e5:e7:2b:11:a1:
         4f:c1:d6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:20:49 2025 by rpki-client