Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32332d3233203d3e203532373231.roa
File:                     3133382e3138352e3130382e302f32332d3233203d3e203532373231.roa (raw, json)
Hash identifier:          fpaSJNDaY/ciQgZ8kx3hCYKi9lOfU+pbBrZTf27VeHk=
Subject key identifier:   EF:73:B8:0E:B9:4C:C2:D9:A0:21:6F:ED:02:45:3F:6F:15:64:F3:2A
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       2F1979F75561700707FF1DD60A87B79D118A4594
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32332d3233203d3e203532373231.roa
Signing time:             Fri 25 Apr 2025 14:50:33 +0000
ROA not before:           Fri 25 Apr 2025 14:45:33 +0000
ROA not after:            Fri 24 Apr 2026 14:50:33 +0000
asID:                     52721
IP address blocks:        138.185.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 06:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:19:79:f7:55:61:70:07:07:ff:1d:d6:0a:87:b7:9d:11:8a:45:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:33 2025 GMT
            Not After : Apr 24 14:50:33 2026 GMT
        Subject: CN=EF73B80EB94CC2D9A0216FED02453F6F1564F32A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ec:e6:01:03:ab:22:8f:f4:e7:ac:91:99:6b:
                    d3:a6:5a:2d:37:b1:47:51:e7:35:99:73:cc:3f:77:
                    9c:c3:b8:3a:dd:7b:b1:1d:fb:6b:96:47:9f:cf:a8:
                    90:b6:0b:56:ae:a1:bb:07:22:cf:06:c8:8a:40:bb:
                    06:b9:95:26:f5:e3:74:4b:94:1c:6a:8b:16:13:95:
                    30:26:da:43:c5:1d:1b:ff:b0:54:d6:65:3f:29:d0:
                    2e:17:69:d7:96:46:c4:e7:94:c6:8a:6f:a4:7e:08:
                    63:ea:34:90:e1:b9:97:e7:3a:fc:28:5d:9a:b0:73:
                    df:1c:30:54:68:53:16:2b:70:2c:df:57:6c:07:e8:
                    46:0e:11:e8:14:f0:8e:e9:04:81:9c:a5:a2:09:30:
                    d9:e8:a2:78:e9:c4:28:43:60:a5:85:61:19:f0:41:
                    cf:2f:36:ea:40:a6:6e:a9:e1:fc:30:e5:9f:c0:4a:
                    19:80:ad:b3:8c:ee:ac:34:88:74:36:45:32:44:a6:
                    31:aa:ba:d0:b6:68:3b:5c:b8:40:d7:16:d8:2f:9c:
                    5b:05:85:39:7d:f4:d7:68:5c:87:8f:0e:9d:2c:58:
                    6f:36:29:db:12:76:41:a1:26:10:ff:17:dc:dd:3f:
                    f9:66:b2:26:9d:9b:81:07:b0:d6:d4:8c:e6:45:36:
                    f3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:73:B8:0E:B9:4C:C2:D9:A0:21:6F:ED:02:45:3F:6F:15:64:F3:2A
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32332d3233203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:64:af:d7:b3:4a:56:02:af:a0:f0:f9:6e:ee:50:a9:1a:dc:
         4a:e7:3e:d8:b7:f7:bc:2e:b3:af:7e:3f:6f:39:e3:a3:2c:7d:
         cb:a4:eb:dd:69:49:1c:b2:87:21:e1:15:99:8a:03:9d:0f:73:
         27:93:74:2f:be:26:5b:ec:de:55:b1:e2:bd:c8:93:e3:5b:d1:
         bc:3a:19:85:e3:a2:b8:8c:d7:d3:0f:dc:8e:40:16:c4:b8:d7:
         73:92:57:19:3a:d0:9a:14:a8:cd:8b:5c:73:02:0e:93:86:11:
         c2:4f:04:04:42:e4:39:66:d2:07:2c:91:26:0d:6e:18:ec:c1:
         25:06:de:02:f4:a0:48:48:bc:13:64:a0:ed:7b:a2:41:66:85:
         a9:ad:bb:8c:37:7b:f9:2c:33:36:d6:90:5d:67:6a:a4:ee:d4:
         08:32:f8:51:07:ce:7d:59:b9:eb:0a:5c:6d:59:9f:8a:24:5f:
         68:e7:6c:49:b1:fc:a3:cd:2d:a0:4f:dc:15:42:5c:20:06:bb:
         60:6b:cd:e9:84:6c:36:07:16:a0:bb:a6:27:25:17:ef:88:7c:
         c0:06:50:7b:62:ab:fb:2a:45:8b:29:6f:47:a4:65:d8:f8:9c:
         1f:ec:42:ae:f9:69:73:aa:85:fe:36:eb:59:a7:81:13:fd:79:
         2d:05:50:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:04:53 2025 by rpki-client