Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3133382e3132312e37322e302f32322d3234203d3e203532363337.roa
File:                     3133382e3132312e37322e302f32322d3234203d3e203532363337.roa (raw, json)
Hash identifier:          s0ymFGwH1/jVPlM6SUJ4hKDT6XsFnyBDjc7H7gPckwk=
Subject key identifier:   39:50:E3:41:FA:76:59:B6:4E:08:0A:82:44:C9:91:80:BA:3C:0C:26
Certificate issuer:       /CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
Certificate serial:       2C0BA360EC8EC6389FAC342F1BA842EA8E805263
Authority key identifier: BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3133382e3132312e37322e302f32322d3234203d3e203532363337.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     52637
IP address blocks:        138.121.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl
                          rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0b:a3:60:ec:8e:c6:38:9f:ac:34:2f:1b:a8:42:ea:8e:80:52:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:1f:e5:3f:93:e3:e1:07:bf:3d:d6:63:1f:
                    b1:82:80:29:2c:18:92:51:a6:8d:62:1d:45:68:23:
                    40:a4:1a:e8:ce:80:7d:fc:8a:59:d8:9a:d2:9c:39:
                    4c:27:f0:c5:af:66:ad:c7:78:ba:b8:c6:23:72:80:
                    b5:a2:86:aa:a6:38:19:88:ba:af:ca:01:1c:ae:87:
                    39:61:0f:a0:26:ae:d2:9a:2e:b6:3c:b9:ec:c6:1b:
                    de:ee:49:b0:84:a3:64:14:a4:ac:fe:0f:3a:c3:ff:
                    df:76:d9:7e:96:c4:a8:5d:fc:02:8f:bf:2a:b7:7d:
                    e0:b8:99:fe:1b:3c:73:b5:c5:85:85:7b:e1:5a:de:
                    29:c9:17:dd:78:47:25:9c:64:84:3a:d7:f9:46:d1:
                    63:e8:23:e1:3f:54:e7:77:cc:6b:79:d8:5d:55:0f:
                    dc:0e:49:9f:31:8f:29:e9:f3:36:14:2d:5f:1d:5a:
                    91:6f:ce:0e:10:fa:ba:c6:f6:a5:54:1f:fa:f3:a7:
                    7b:38:4b:03:9c:df:4c:bb:2e:cb:c8:bf:49:41:fb:
                    16:d8:31:af:b7:a2:01:92:e2:e9:aa:30:0f:b8:1d:
                    ca:08:1e:85:da:44:c4:0f:ca:62:4d:c7:74:63:78:
                    04:3f:0f:f1:74:5e:06:33:53:0d:0e:b5:cd:a9:3b:
                    c9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:50:E3:41:FA:76:59:B6:4E:08:0A:82:44:C9:91:80:BA:3C:0C:26
            X509v3 Authority Key Identifier:
                keyid:BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3133382e3132312e37322e302f32322d3234203d3e203532363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:1d:03:e2:ab:88:ea:23:a9:fe:4e:d0:7c:3c:0c:8c:4a:48:
         c1:fb:bb:b6:d7:54:cc:ba:39:78:0f:ba:7e:8e:e3:f4:4e:3f:
         4f:fe:6c:a7:06:1f:c6:b2:f8:53:07:a7:65:f8:b5:90:fd:a8:
         46:3c:5e:10:0a:96:e8:f0:53:85:73:85:e4:e4:d2:da:2f:14:
         12:4b:38:7c:b0:ca:d1:1a:03:ea:0a:6b:91:a3:7b:4f:48:11:
         43:e8:c7:7d:65:c1:14:1e:96:f9:2f:26:3b:c4:23:44:53:24:
         e5:8c:5d:45:17:5e:39:01:e1:2a:b2:a9:bf:a1:2f:a5:eb:02:
         95:61:7a:56:cc:74:5c:9f:29:63:7b:e9:99:0e:ae:4d:37:fc:
         2c:66:ad:14:9e:7c:83:77:b6:c4:e4:d6:2a:65:9c:24:6e:b7:
         c5:3c:2e:77:b9:5b:78:a9:c9:e0:ab:53:b1:87:e6:df:d7:e4:
         83:64:49:72:18:ab:c7:96:ef:14:8d:0d:84:58:de:c6:f1:eb:
         bb:d6:9d:98:16:d7:9f:a0:00:1a:e3:e3:6b:4e:fd:66:8e:a6:
         e4:2b:46:d3:17:8f:42:42:43:17:2d:8a:71:cc:02:fb:00:14:
         cd:20:7e:fa:18:8c:80:45:ff:0a:ee:c2:0d:28:53:25:4b:3a:
         db:a8:5e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:28 2025 by rpki-client on console.sobornost.net