Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3131302e302f32332d3233203d3e203532373231.roa
File:                     3133382e3138352e3131302e302f32332d3233203d3e203532373231.roa (raw, json)
Hash identifier:          gHrcUBCxYmfUxuqODXMPtMyJ+zH4zB7sqE2UPy6s1f4=
Subject key identifier:   F4:B0:A8:92:F7:3D:AE:19:0F:66:7B:F4:8A:04:7E:C6:18:9D:FC:88
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       23A50465A63B552EDC71E8B53ACB5BB650292670
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3131302e302f32332d3233203d3e203532373231.roa
Signing time:             Fri 25 Apr 2025 14:50:36 +0000
ROA not before:           Fri 25 Apr 2025 14:45:36 +0000
ROA not after:            Fri 24 Apr 2026 14:50:36 +0000
asID:                     52721
IP address blocks:        138.185.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 06:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a5:04:65:a6:3b:55:2e:dc:71:e8:b5:3a:cb:5b:b6:50:29:26:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:36 2025 GMT
            Not After : Apr 24 14:50:36 2026 GMT
        Subject: CN=F4B0A892F73DAE190F667BF48A047EC6189DFC88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0d:d0:21:e1:08:95:0e:16:cc:67:71:ab:29:
                    b3:60:1f:eb:d2:4c:94:e8:ab:1d:83:be:ed:00:ff:
                    6a:e8:50:bb:2a:ec:e6:44:e8:de:57:20:c3:21:fc:
                    86:1a:50:d1:c8:1e:99:91:ad:1d:71:50:7d:7a:e5:
                    20:aa:0d:c6:97:67:e2:bb:77:5c:55:1f:d6:6b:91:
                    d7:f1:48:ed:cf:41:58:7f:33:60:1a:2c:a7:f8:af:
                    4e:ed:1b:c4:be:42:d3:ee:52:61:07:52:94:ea:8e:
                    b5:8e:41:0d:62:11:d7:ac:f5:b8:8b:de:5a:18:e6:
                    5b:fb:e2:2e:b0:5d:09:6f:3f:2f:41:8e:fb:46:d8:
                    93:71:f9:4a:63:56:68:08:40:f1:d8:86:bc:8f:a9:
                    5e:c4:8f:9d:c5:a0:d9:06:dd:7c:82:76:fa:0b:f0:
                    11:04:28:5c:12:44:e6:77:5f:a2:89:cd:1d:13:d0:
                    ea:0b:28:0a:f2:82:38:5a:66:9f:9a:f8:7b:38:fb:
                    8f:c5:f4:ba:9a:33:bd:84:76:d8:be:3e:f2:77:61:
                    f6:f9:ec:be:8f:e5:5e:8d:76:0f:bb:2e:2f:60:c0:
                    5c:60:e4:47:d3:6f:23:df:c5:95:6b:ee:61:06:34:
                    25:c5:05:93:91:8c:33:1b:3a:54:2c:a6:8e:0a:32:
                    f5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B0:A8:92:F7:3D:AE:19:0F:66:7B:F4:8A:04:7E:C6:18:9D:FC:88
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3131302e302f32332d3233203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:5c:14:60:52:76:b9:ae:e5:dd:cd:45:8b:e7:af:0e:83:9a:
         4e:95:3a:2b:2c:5b:2e:a1:e5:48:4c:48:06:62:b3:c9:70:0d:
         ea:25:5a:3f:d2:2c:af:ce:84:b9:45:79:04:bf:3e:c6:da:d8:
         4d:e3:f1:fd:c6:55:71:90:ae:8b:04:85:34:59:e0:ce:e0:85:
         d0:a0:7c:a0:12:17:a1:4c:82:97:27:62:95:60:d4:2b:f9:19:
         5e:88:52:89:17:22:53:92:0a:e2:17:4c:20:4a:a6:de:61:8a:
         63:eb:fd:17:86:17:08:76:b9:2e:c3:2d:a6:11:88:67:51:89:
         37:df:2b:59:ae:8d:e1:d3:d2:61:86:09:0a:bb:f2:f6:dc:6f:
         d3:d1:1a:af:8e:bd:6c:c8:f2:23:dd:39:cd:e8:55:c7:81:8c:
         83:8e:64:b8:74:f2:0e:a4:f5:8e:89:69:a9:f2:d0:76:04:8f:
         8c:b0:56:c2:5c:4f:8b:16:df:d5:6b:aa:77:e1:52:23:8f:3a:
         8d:81:9a:34:ea:64:ae:be:d0:4f:19:7d:3f:62:92:b4:49:9a:
         ef:37:56:8c:b0:40:19:2f:83:c3:43:f1:80:69:c6:ba:8a:e1:
         70:27:89:5e:aa:d7:08:4f:d5:76:26:e6:96:fa:89:96:c7:67:
         db:a1:28:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:18:18 2025 by rpki-client