Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/3133382e39342e3130302e302f32322d3332203d3e20323632383231.roa
File:                     3133382e39342e3130302e302f32322d3332203d3e20323632383231.roa (raw, json)
Hash identifier:          BSEKTx6LkB8n1n6bpS5tWH3N8ASwznn3leEPGLoSjx4=
Subject key identifier:   C3:6B:9A:B6:7A:30:FD:E2:B9:B0:7B:F8:33:19:40:4D:CF:26:8F:0C
Certificate issuer:       /CN=EB8181693A9CCB6DED5E600379193536AEE60C32
Certificate serial:       4743F1718AAA99B8FC863B582E0E6A749CC69498
Authority key identifier: EB:81:81:69:3A:9C:CB:6D:ED:5E:60:03:79:19:35:36:AE:E6:0C:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8181693A9CCB6DED5E600379193536AEE60C32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/3133382e39342e3130302e302f32322d3332203d3e20323632383231.roa
Signing time:             Wed 30 Apr 2025 13:15:29 +0000
ROA not before:           Wed 30 Apr 2025 13:10:29 +0000
ROA not after:            Wed 29 Apr 2026 13:15:29 +0000
asID:                     262821
IP address blocks:        138.94.100.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.crl
                          rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8181693A9CCB6DED5E600379193536AEE60C32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 07:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:43:f1:71:8a:aa:99:b8:fc:86:3b:58:2e:0e:6a:74:9c:c6:94:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB8181693A9CCB6DED5E600379193536AEE60C32
        Validity
            Not Before: Apr 30 13:10:29 2025 GMT
            Not After : Apr 29 13:15:29 2026 GMT
        Subject: CN=C36B9AB67A30FDE2B9B07BF83319404DCF268F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bb:75:b6:41:c9:d1:af:40:ab:41:99:b2:0e:
                    5a:69:b4:7a:0f:6c:cd:d0:fd:f2:d8:98:6f:ae:1b:
                    c3:59:eb:b3:d2:a8:ef:c4:de:55:88:1d:53:29:31:
                    fe:0a:eb:b5:ae:93:3c:34:8e:54:76:1e:32:e2:ba:
                    29:af:1e:09:55:a2:51:a8:3d:bb:6d:6a:67:ee:df:
                    08:b0:9f:78:3f:a5:2a:38:5c:47:ce:80:ad:58:8c:
                    47:02:39:6b:7b:70:3d:a4:07:69:c3:31:65:74:85:
                    12:07:3c:78:40:82:98:44:d2:80:8e:ac:63:94:6c:
                    5a:b2:3b:aa:86:b7:6f:92:20:0e:22:ea:a9:94:f1:
                    67:8f:d2:bc:62:5e:b8:00:c5:76:41:a7:fb:9a:e3:
                    15:47:f9:fe:46:89:3f:49:de:d1:e5:80:9a:6a:00:
                    5f:99:39:54:f2:2f:57:0e:ce:02:82:d7:6b:c5:fa:
                    9a:52:c3:94:5b:fc:8c:25:64:4e:51:26:38:52:63:
                    80:ca:3a:23:00:5e:38:90:8a:e2:7c:d3:88:49:a6:
                    1f:63:09:69:c2:c5:9c:54:36:e1:d8:13:87:42:fe:
                    cd:c5:c1:d5:c6:e8:63:50:a9:4c:26:f4:44:9c:20:
                    6b:06:ae:9e:12:54:b5:27:67:02:77:94:b8:03:84:
                    fb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6B:9A:B6:7A:30:FD:E2:B9:B0:7B:F8:33:19:40:4D:CF:26:8F:0C
            X509v3 Authority Key Identifier:
                keyid:EB:81:81:69:3A:9C:CB:6D:ED:5E:60:03:79:19:35:36:AE:E6:0C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8181693A9CCB6DED5E600379193536AEE60C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/3133382e39342e3130302e302f32322d3332203d3e20323632383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:c8:29:16:af:84:62:30:7e:64:58:a4:fe:80:27:7d:35:1b:
         b0:93:22:97:71:25:ab:5d:7a:f7:7f:10:ef:69:64:ad:44:38:
         76:4b:80:22:cb:6b:56:7f:7b:81:cb:21:2c:06:04:66:38:34:
         16:ae:43:fd:a1:52:c9:38:a2:f9:a9:f6:81:32:67:6b:0c:b0:
         a5:2b:09:43:11:7c:64:cc:7c:8c:7a:e9:55:88:a6:78:fb:0d:
         a7:30:9b:2b:3e:97:a8:05:53:7e:88:de:02:04:ae:27:f4:05:
         72:47:1f:7b:2d:91:4b:36:b8:11:76:48:07:73:eb:1a:24:ed:
         a9:7e:6b:5a:8a:4e:86:32:b5:0f:75:d8:ff:e2:e1:56:17:47:
         91:45:07:07:02:82:ea:9e:69:85:a5:3c:55:c1:bb:4a:17:27:
         a4:18:91:4d:ab:1d:03:79:80:d7:0e:89:03:3c:53:5f:82:44:
         d7:c3:7c:6b:fb:9d:24:5e:d5:b6:19:6d:0d:aa:c5:45:d3:eb:
         64:10:aa:f1:81:70:27:9e:06:ad:8b:a1:1d:49:fb:9a:5b:54:
         cf:1c:3a:d6:14:22:c2:09:99:13:e3:d3:a8:cc:39:99:d1:6d:
         dc:47:e8:d5:2e:31:1a:16:ff:57:1c:2f:0e:81:3e:4f:d3:34:
         1b:e2:3f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:08:17 2025 by rpki-client