Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134342e302f32342d3234203d3e20323636313738.roa
File:                     3133382e39372e3134342e302f32342d3234203d3e20323636313738.roa (raw, json)
Hash identifier:          /9OJ+mF4Wp8Oq0nYxSjBeVHNSoaZV9OizbRzZKYK+qA=
Subject key identifier:   B5:56:89:93:36:4A:17:4C:0E:B5:31:FF:61:ED:DF:4F:23:6D:A5:0C
Certificate issuer:       /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial:       22A50949B154F66469433BCFED6E88E4A60C2351
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134342e302f32342d3234203d3e20323636313738.roa
Signing time:             Fri 07 Feb 2025 06:07:30 +0000
ROA not before:           Fri 07 Feb 2025 06:02:30 +0000
ROA not after:            Fri 06 Feb 2026 06:07:30 +0000
asID:                     266178
IP address blocks:        138.97.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
                          rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 16:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a5:09:49:b1:54:f6:64:69:43:3b:cf:ed:6e:88:e4:a6:0c:23:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
        Validity
            Not Before: Feb  7 06:02:30 2025 GMT
            Not After : Feb  6 06:07:30 2026 GMT
        Subject: CN=B5568993364A174C0EB531FF61EDDF4F236DA50C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cb:50:b0:99:7f:03:49:de:2c:30:85:7c:f9:
                    60:6d:9f:73:42:6c:fc:d8:4d:d1:55:ca:0f:00:0f:
                    8c:1c:d5:1f:87:d5:13:55:a8:09:90:4b:57:49:de:
                    e7:c0:99:11:70:ae:55:95:7a:06:b9:ba:91:0c:f3:
                    99:59:c6:96:76:80:33:e1:44:27:fc:01:b5:49:16:
                    78:13:c2:63:f5:1c:0e:7e:10:6d:62:95:01:1d:32:
                    9f:1d:7a:fd:bd:3d:9c:f1:0d:2b:90:37:32:44:fa:
                    38:c0:9f:67:97:2e:9b:6d:f6:7e:48:06:6b:42:40:
                    55:ee:35:31:42:70:a9:ec:cf:69:3e:ca:d1:17:c5:
                    9c:f7:f4:56:10:d0:b8:0a:d2:ec:53:2a:2c:d4:1f:
                    f4:b0:8d:f3:b1:48:cc:46:68:3a:c8:b9:c8:8e:cd:
                    ed:ba:3e:50:1d:46:14:8f:89:68:6b:1a:34:91:9c:
                    49:26:f7:be:5e:3a:ae:13:7f:35:dc:c5:1f:71:ff:
                    d3:c7:d6:4d:15:2d:f0:a4:db:bf:41:11:eb:c4:91:
                    f1:c6:34:77:eb:73:a2:cb:87:c2:bf:70:85:63:a9:
                    2f:95:1b:c6:9a:90:62:49:41:de:b5:1d:e9:34:4b:
                    e0:2e:1d:34:53:de:a6:af:7a:b0:e6:5d:7c:a7:37:
                    f3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:56:89:93:36:4A:17:4C:0E:B5:31:FF:61:ED:DF:4F:23:6D:A5:0C
            X509v3 Authority Key Identifier:
                keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134342e302f32342d3234203d3e20323636313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:90:a2:11:02:87:95:fb:60:1f:70:45:79:00:d0:52:9f:a0:
         f1:65:11:73:c4:ba:1b:46:ba:60:68:67:e2:f1:72:b4:39:4a:
         5d:64:f3:85:d5:f0:99:1f:cf:c4:f0:2c:b5:d1:61:5e:2c:4a:
         de:f1:60:df:f9:ee:8f:e9:36:07:ef:21:e6:e1:27:0c:4c:e7:
         a4:1d:8d:f6:0f:54:83:7d:bd:fb:d8:61:5d:72:c0:5a:e5:7c:
         7d:07:31:58:71:05:7f:3e:9d:13:7f:8d:5b:9d:5e:03:ae:82:
         2f:9b:c7:e4:59:e5:78:d5:aa:9b:0e:e2:ff:78:10:dc:75:59:
         aa:3b:f8:8f:0e:e2:ff:36:db:40:28:89:ad:9a:73:c0:27:02:
         30:92:79:a4:e6:ee:02:9e:82:80:ca:06:49:db:ec:fb:ca:3a:
         17:dd:69:71:9a:bc:a1:89:08:5e:45:69:44:2e:50:61:dc:b0:
         66:c4:93:da:a1:4a:43:7e:c3:52:88:66:ff:6e:ba:e5:62:31:
         5f:a1:20:cc:4e:8a:74:f3:ec:ea:0d:7e:fc:65:ac:70:a6:6f:
         9a:c6:8f:bc:bb:23:47:32:c3:89:07:e6:3b:02:17:e2:f4:7b:
         95:54:9f:f4:c9:39:dd:5e:ad:8a:c6:f9:20:eb:31:2c:95:99:
         d9:50:05:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:52:33 2025 by rpki-client