Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/3133382e3131382e34342e302f32322d3332203d3e20323635333639.roa
File:                     3133382e3131382e34342e302f32322d3332203d3e20323635333639.roa (raw, json)
Hash identifier:          9T2MESV+/3n5nYVmruOtn4+UHrzjD7dDrraJfcrZQok=
Subject key identifier:   19:06:C4:C5:F6:0A:D3:9A:13:E9:1F:B1:AE:54:81:1A:75:83:6A:BD
Certificate issuer:       /CN=56B0D4522C382D2528E989DFA8E7662C852D4861
Certificate serial:       0805ED8F0AA67AEA7AD93B2D05403D7C4C5AD405
Authority key identifier: 56:B0:D4:52:2C:38:2D:25:28:E9:89:DF:A8:E7:66:2C:85:2D:48:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56B0D4522C382D2528E989DFA8E7662C852D4861.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/3133382e3131382e34342e302f32322d3332203d3e20323635333639.roa
Signing time:             Wed 02 Apr 2025 00:06:38 +0000
ROA not before:           Wed 02 Apr 2025 00:01:38 +0000
ROA not after:            Wed 01 Apr 2026 00:06:38 +0000
asID:                     265369
IP address blocks:        138.118.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/56B0D4522C382D2528E989DFA8E7662C852D4861.crl
                          rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/56B0D4522C382D2528E989DFA8E7662C852D4861.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56B0D4522C382D2528E989DFA8E7662C852D4861.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 23:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:05:ed:8f:0a:a6:7a:ea:7a:d9:3b:2d:05:40:3d:7c:4c:5a:d4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56B0D4522C382D2528E989DFA8E7662C852D4861
        Validity
            Not Before: Apr  2 00:01:38 2025 GMT
            Not After : Apr  1 00:06:38 2026 GMT
        Subject: CN=1906C4C5F60AD39A13E91FB1AE54811A75836ABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:49:ab:b8:4a:7e:cf:b6:b9:c9:d1:2a:05:1b:
                    c6:d8:bf:88:a9:d7:44:8d:fc:50:02:8a:eb:4c:81:
                    61:79:8e:fd:49:c7:32:f1:2c:cd:14:b7:43:be:66:
                    ff:3a:4d:32:05:27:6a:08:69:6f:63:7e:5e:cf:53:
                    cd:66:ea:c8:05:bd:cc:7c:80:ec:86:49:1e:91:04:
                    87:ff:f6:7b:5d:6f:2a:5c:04:69:5c:bf:1a:02:d4:
                    e9:8f:3b:89:49:64:2f:e1:fa:08:62:16:cc:a6:a9:
                    a4:37:58:1f:a2:14:9a:d7:6b:a0:9f:c3:b4:d5:a0:
                    b1:89:8f:43:bf:71:0a:3c:c0:12:a7:b1:a5:02:f3:
                    7c:6a:e5:4a:3b:0e:6d:f1:b7:d4:72:f8:f7:df:43:
                    6e:72:6c:92:cb:80:08:66:c5:40:96:25:22:33:79:
                    80:5f:e4:d5:13:5d:e1:1d:ab:00:73:29:12:69:c4:
                    af:ea:bc:14:24:20:e5:80:fa:0c:49:30:06:dc:1b:
                    7c:0a:2c:8a:78:31:37:46:e2:50:f4:fa:9e:b6:b2:
                    cc:a2:ff:35:e4:ed:ab:7a:43:53:4e:fd:7b:67:f0:
                    65:ab:1c:da:29:c7:ef:38:95:fc:b6:4d:3c:07:4b:
                    2e:f6:6a:a5:94:f2:cd:7b:cf:46:79:04:4a:84:c1:
                    02:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:06:C4:C5:F6:0A:D3:9A:13:E9:1F:B1:AE:54:81:1A:75:83:6A:BD
            X509v3 Authority Key Identifier:
                keyid:56:B0:D4:52:2C:38:2D:25:28:E9:89:DF:A8:E7:66:2C:85:2D:48:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/56B0D4522C382D2528E989DFA8E7662C852D4861.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56B0D4522C382D2528E989DFA8E7662C852D4861.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/3133382e3131382e34342e302f32322d3332203d3e20323635333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:c4:f8:f4:16:6c:c3:02:1a:7d:64:c1:66:3c:5c:97:cc:f8:
         10:4c:5e:16:76:65:de:66:2a:97:95:9e:65:77:f5:d7:ec:a3:
         1f:8f:09:5e:55:59:41:12:d4:08:72:d9:60:cd:31:31:ae:37:
         12:3a:84:79:c3:14:56:17:63:19:c1:38:11:e2:6c:27:af:0e:
         d6:53:06:6f:55:82:c1:0d:12:eb:06:e2:16:fe:d5:9b:7d:3c:
         51:d2:cc:cb:3d:da:2d:cb:c0:5f:78:5f:d1:81:2c:e7:f5:ff:
         31:bb:8b:fa:80:55:a5:c2:01:3d:c2:a0:89:24:b9:f8:c9:82:
         7e:0d:62:56:fe:f8:65:fd:56:14:ba:7c:9d:0b:41:ed:e9:0b:
         34:dd:a4:1e:8e:67:3c:dd:63:dd:00:b1:c8:69:2b:fc:54:db:
         78:ec:0e:ff:cf:f9:f3:98:aa:e6:e8:30:87:19:f4:0b:d2:5e:
         72:7a:fc:25:d6:bc:30:35:41:bf:97:c1:5b:17:a6:9f:ef:5c:
         55:46:87:80:20:ce:ac:6c:99:a9:17:33:b5:c7:82:31:a0:3e:
         d8:fb:9e:dc:67:c1:2f:05:b5:3a:66:7d:3a:bc:f5:1d:17:5d:
         5d:65:cd:d1:cc:5f:fa:f1:1d:1c:26:30:8a:76:3c:87:94:6a:
         6f:60:ce:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:30:00 2025 by rpki-client