Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/3133382e33362e3230302e302f32322d3234203d3e20323634353931.roa
File:                     3133382e33362e3230302e302f32322d3234203d3e20323634353931.roa (raw, json)
Hash identifier:          HvjR2d2trJ5LWnuobRmMJncz1ARxND/q/9gbw8Is3K0=
Subject key identifier:   75:2F:AE:47:16:7B:B2:CF:01:B1:87:FB:23:F2:37:12:A4:54:C8:AD
Certificate issuer:       /CN=F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF
Certificate serial:       1B88E0CCADFD46C08862EB14C543C270E36B40C2
Authority key identifier: F3:AE:CC:A1:DA:CF:7A:DB:0F:3C:DD:C2:E4:82:6B:18:F3:6A:78:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/3133382e33362e3230302e302f32322d3234203d3e20323634353931.roa
Signing time:             Fri 02 May 2025 19:58:31 +0000
ROA not before:           Fri 02 May 2025 19:53:31 +0000
ROA not after:            Fri 01 May 2026 19:58:31 +0000
asID:                     264591
IP address blocks:        138.36.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.crl
                          rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 02:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:88:e0:cc:ad:fd:46:c0:88:62:eb:14:c5:43:c2:70:e3:6b:40:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF
        Validity
            Not Before: May  2 19:53:31 2025 GMT
            Not After : May  1 19:58:31 2026 GMT
        Subject: CN=752FAE47167BB2CF01B187FB23F23712A454C8AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:42:bc:e9:86:13:37:df:aa:08:a9:2d:e3:b3:
                    bb:2e:d8:08:0c:26:38:b5:3b:3c:a8:ae:ca:16:73:
                    e2:3d:f0:20:3b:3a:12:2f:53:c3:04:65:56:ab:c8:
                    61:18:45:fd:73:5b:68:96:92:97:cb:30:ed:f4:43:
                    68:d2:f4:99:ad:5b:4a:51:43:8d:a0:13:b3:73:bf:
                    b7:d4:11:9c:66:e1:d3:4f:e0:21:56:5b:9f:85:b8:
                    44:43:d9:59:f2:90:44:20:4e:03:a8:57:4f:01:48:
                    db:16:5c:60:ac:13:5e:d7:3d:77:23:87:11:93:c7:
                    52:f9:c2:43:0c:af:09:26:f7:e0:58:9f:72:86:d3:
                    1b:8d:ba:3f:4f:50:0b:f0:f0:20:31:5e:fb:43:37:
                    f3:57:2a:83:25:41:89:45:82:e9:e0:73:ab:29:a8:
                    38:79:ae:b9:84:9f:7c:6f:d0:db:fb:d6:89:f1:3a:
                    3e:83:6d:89:4d:23:77:14:c7:3d:d7:fc:ac:96:b7:
                    b9:3f:93:de:c2:fc:e0:ae:5e:87:3e:7a:de:6f:57:
                    b0:d7:57:a5:ba:90:df:05:89:3a:ed:51:96:ce:4e:
                    0d:26:dd:80:bc:80:3c:47:79:4c:6c:01:29:74:10:
                    ff:fe:fa:f9:ab:a6:35:07:a3:e1:13:51:5d:0f:e0:
                    d7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2F:AE:47:16:7B:B2:CF:01:B1:87:FB:23:F2:37:12:A4:54:C8:AD
            X509v3 Authority Key Identifier:
                keyid:F3:AE:CC:A1:DA:CF:7A:DB:0F:3C:DD:C2:E4:82:6B:18:F3:6A:78:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/3133382e33362e3230302e302f32322d3234203d3e20323634353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:53:7a:8d:c5:91:c1:b0:59:42:97:a0:f6:4c:ad:7d:c1:f2:
         ba:7a:63:6d:41:8f:7c:56:c2:22:fb:0d:1a:02:75:48:f6:21:
         16:cb:6a:3e:03:ec:53:c5:49:4b:fd:5b:b3:e3:f0:59:6e:bb:
         71:16:50:6b:64:e1:10:ef:5c:b8:c9:2f:9c:f6:12:54:7e:86:
         b0:89:ba:86:3b:74:90:4d:c0:61:d0:0c:ad:f5:b0:30:4e:bc:
         bd:0b:19:ee:23:27:90:86:54:04:ae:33:77:d0:ea:53:5f:b3:
         e7:1e:68:a1:09:4b:48:8f:4b:12:c6:ac:91:3a:4c:64:14:d2:
         a6:3e:0b:e3:e3:64:d2:fe:df:b2:a1:4b:02:58:16:d4:ee:f8:
         56:ac:48:a8:59:1d:ee:57:39:f4:96:58:9f:59:cb:30:cd:c5:
         66:5d:82:61:21:1e:7b:9a:2e:29:1c:2d:e6:5c:91:81:e1:f8:
         f4:74:14:4f:07:ef:bd:be:6d:74:f1:2e:e6:6f:38:95:09:90:
         78:41:80:06:2e:b4:85:54:f1:df:23:14:3d:a2:b4:68:a0:3c:
         fb:52:53:cd:8a:07:38:a4:ef:ca:2a:9c:b9:72:61:f0:80:82:
         e0:f0:28:45:d2:25:a2:a4:8e:a3:08:a4:49:a7:39:66:64:73:
         2c:94:22:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:00:44 2025 by rpki-client