Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/3133382e3131382e31362e302f32322d3332203d3e20323632323930.roa
File:                     3133382e3131382e31362e302f32322d3332203d3e20323632323930.roa (raw, json)
Hash identifier:          x+tsC071/9HhMNhpXXs01SPRPK/goJmqEl6J4MtnBv4=
Subject key identifier:   8E:9E:2D:8E:A8:97:B9:ED:3E:DD:92:9F:F9:85:81:33:91:FE:FB:80
Certificate issuer:       /CN=63CF3814814F9F8799D1D11C2BBD8F541A383E8E
Certificate serial:       1DB7EC758825B5FAEFF1E04A2BCD3A5E245FC4FA
Authority key identifier: 63:CF:38:14:81:4F:9F:87:99:D1:D1:1C:2B:BD:8F:54:1A:38:3E:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63CF3814814F9F8799D1D11C2BBD8F541A383E8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/3133382e3131382e31362e302f32322d3332203d3e20323632323930.roa
Signing time:             Tue 22 Apr 2025 12:50:35 +0000
ROA not before:           Tue 22 Apr 2025 12:45:35 +0000
ROA not after:            Tue 21 Apr 2026 12:50:35 +0000
asID:                     262290
IP address blocks:        138.118.16.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/63CF3814814F9F8799D1D11C2BBD8F541A383E8E.crl
                          rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/63CF3814814F9F8799D1D11C2BBD8F541A383E8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63CF3814814F9F8799D1D11C2BBD8F541A383E8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b7:ec:75:88:25:b5:fa:ef:f1:e0:4a:2b:cd:3a:5e:24:5f:c4:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63CF3814814F9F8799D1D11C2BBD8F541A383E8E
        Validity
            Not Before: Apr 22 12:45:35 2025 GMT
            Not After : Apr 21 12:50:35 2026 GMT
        Subject: CN=8E9E2D8EA897B9ED3EDD929FF985813391FEFB80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:5f:43:3e:7c:dd:5d:5d:d6:e5:63:38:a8:88:
                    d3:f1:a3:d5:dd:14:53:c6:23:0b:21:5f:ec:83:af:
                    d6:89:f4:20:cf:a9:40:a7:49:f4:cc:c5:09:76:17:
                    04:75:33:33:34:84:49:b6:2f:15:54:94:c4:ad:91:
                    30:a4:7a:46:a8:54:51:ac:a9:ce:d7:40:0d:a8:2d:
                    37:44:3a:3b:f9:a7:c4:69:cb:1c:a9:ce:b0:83:30:
                    27:4d:ca:27:66:89:1f:57:9a:be:ed:69:9f:e3:3f:
                    6b:92:30:4d:e8:49:86:44:b0:0c:b3:21:2d:ea:7c:
                    d2:7c:d6:6c:8f:05:e7:29:03:9c:fa:cb:cf:db:6e:
                    bc:94:7a:1e:96:87:42:14:fc:f9:33:ee:1f:64:56:
                    64:e0:81:45:42:a0:5d:66:f8:34:ef:64:46:fe:ff:
                    1c:42:a8:9e:dd:ef:98:8e:04:9d:6c:76:e4:d8:70:
                    3d:f7:95:c0:d9:85:86:d0:76:20:a5:b9:be:c3:71:
                    0f:20:ac:b1:08:0a:9c:38:da:6e:2a:ab:5c:e8:88:
                    2d:b7:0a:46:81:f0:eb:08:08:70:ff:57:00:2c:a5:
                    b0:99:40:bf:91:81:80:e5:83:48:17:ab:6e:91:44:
                    0d:d9:74:a6:1c:f8:37:93:1e:32:0d:07:fa:a5:85:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9E:2D:8E:A8:97:B9:ED:3E:DD:92:9F:F9:85:81:33:91:FE:FB:80
            X509v3 Authority Key Identifier:
                keyid:63:CF:38:14:81:4F:9F:87:99:D1:D1:1C:2B:BD:8F:54:1A:38:3E:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/63CF3814814F9F8799D1D11C2BBD8F541A383E8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63CF3814814F9F8799D1D11C2BBD8F541A383E8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/3133382e3131382e31362e302f32322d3332203d3e20323632323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:66:a4:b4:3a:a2:d9:49:77:79:25:d8:cc:f0:cc:51:7d:6e:
         9e:49:6e:6b:f2:39:6c:49:a0:7c:80:c8:1a:a8:80:96:7e:5e:
         ff:24:19:a2:63:3b:d3:72:63:0f:33:de:ee:35:d5:26:da:37:
         f1:1a:b2:c0:e4:b7:16:33:8f:63:d4:a8:e7:61:d6:39:b8:ba:
         16:d7:46:1c:ba:a0:d1:94:57:96:3e:a7:b4:51:eb:7a:b5:e5:
         ca:c4:c7:6c:12:cb:7b:9c:ce:2d:6e:a3:c9:36:7e:b9:12:b6:
         5f:e6:8d:f0:6b:f8:56:96:52:26:e8:47:d2:83:fe:70:13:a1:
         fe:e0:31:b9:ab:3f:1e:d1:f4:3e:40:2e:ea:92:37:63:91:6f:
         78:04:ec:95:ba:d7:d1:17:c1:cc:9b:7c:29:61:9f:ec:ed:92:
         07:12:b2:4a:20:2b:4e:c1:85:3b:ca:14:e9:a4:de:ce:e6:40:
         c7:8b:b5:53:7d:15:0b:80:08:92:b8:e7:28:f9:63:65:3c:43:
         ef:4a:b2:4c:86:18:44:ae:8c:98:16:05:e6:ff:a3:08:f0:f8:
         fc:f3:3f:1f:bf:75:0c:d3:e5:40:50:e3:8c:0e:ad:a8:58:d0:
         c5:24:9b:58:8d:de:e7:e5:22:d1:47:80:4a:a1:98:5e:e7:6c:
         f2:39:b8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:32 2025 by rpki-client on console.sobornost.net