Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa
File:                     3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa (raw, json)
Hash identifier:          2wuK83kGggWH4E8N6EQeR0Ft9R1UVymLSxczmk6VfBc=
Subject key identifier:   83:3F:CA:39:8A:9D:46:DA:48:8F:4E:B1:ED:69:06:40:0B:53:E9:93
Certificate issuer:       /CN=B27B85F02C63CD742721D85E375F5A98C91ED00B
Certificate serial:       6CDEEE9A3B5FC615FCD8FA8DE2937ACDFDF6CF33
Authority key identifier: B2:7B:85:F0:2C:63:CD:74:27:21:D8:5E:37:5F:5A:98:C9:1E:D0:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27B85F02C63CD742721D85E375F5A98C91ED00B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa
Signing time:             Wed 07 May 2025 07:43:15 +0000
ROA not before:           Wed 07 May 2025 07:38:15 +0000
ROA not after:            Wed 06 May 2026 07:43:15 +0000
asID:                     263905
IP address blocks:        138.204.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.crl
                          rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27B85F02C63CD742721D85E375F5A98C91ED00B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 17:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:de:ee:9a:3b:5f:c6:15:fc:d8:fa:8d:e2:93:7a:cd:fd:f6:cf:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B27B85F02C63CD742721D85E375F5A98C91ED00B
        Validity
            Not Before: May  7 07:38:15 2025 GMT
            Not After : May  6 07:43:15 2026 GMT
        Subject: CN=833FCA398A9D46DA488F4EB1ED6906400B53E993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:24:a5:78:33:5a:fd:0d:26:9b:99:c6:f3:ea:
                    0b:92:93:f6:a4:71:de:f2:10:11:93:12:44:b6:6a:
                    3e:06:94:12:23:0d:7d:a7:f6:68:33:ce:ef:99:4b:
                    df:ca:cb:22:29:c4:f0:2f:af:23:c9:34:e2:06:ce:
                    9f:ae:61:00:3e:be:01:51:ab:9e:9e:00:90:b1:57:
                    d5:9f:72:5f:d0:f9:af:b1:14:50:5c:99:57:5c:ac:
                    8f:88:4f:ec:6a:f6:93:f9:00:c6:00:d5:ef:c6:9b:
                    0b:14:87:3e:c1:ce:ee:47:e7:6f:54:31:21:81:1f:
                    d4:7e:29:d9:d5:81:5d:27:c9:ae:d4:9d:18:33:19:
                    8c:a2:df:3e:bf:70:0f:84:85:98:81:e9:3e:56:a9:
                    0a:c9:89:22:46:10:dd:be:f5:9e:3d:5b:75:79:bc:
                    a5:2a:31:83:5f:2d:48:35:40:74:73:ee:23:02:6e:
                    57:cc:b5:1c:2c:3b:56:88:84:db:e2:8b:96:de:ca:
                    55:b2:73:dd:87:2b:dd:3e:b7:72:6c:d3:bb:9a:a4:
                    56:67:72:12:d6:b8:0b:99:3d:6d:7a:91:62:c4:b7:
                    98:07:e4:c8:57:9b:04:64:49:cb:08:7b:ba:a3:f9:
                    7c:1f:4f:70:b2:ee:fa:6d:f7:57:40:ef:ae:84:50:
                    fe:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3F:CA:39:8A:9D:46:DA:48:8F:4E:B1:ED:69:06:40:0B:53:E9:93
            X509v3 Authority Key Identifier:
                keyid:B2:7B:85:F0:2C:63:CD:74:27:21:D8:5E:37:5F:5A:98:C9:1E:D0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27B85F02C63CD742721D85E375F5A98C91ED00B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:50:8b:f4:ea:70:e1:73:a6:1e:c0:83:17:fe:7f:44:04:e8:
         5d:0a:1c:0a:74:99:a9:94:e9:5b:67:9e:7b:38:43:8a:0e:ab:
         bf:3a:55:e1:63:3e:da:dc:de:e1:d2:f0:56:66:0a:da:12:f4:
         d3:36:db:60:4c:48:69:f6:50:d9:ca:21:c2:9c:ca:6e:3d:95:
         61:51:9a:10:f1:21:f4:51:9e:e7:31:99:f1:25:26:09:31:dd:
         9b:28:58:e4:04:17:7a:9f:27:f7:2f:af:64:6f:6f:6e:b3:f6:
         ac:67:01:79:4b:73:50:e7:d3:35:d8:b0:68:28:3b:36:7a:e3:
         14:1a:c6:76:1d:08:05:5b:7e:79:98:2f:cb:35:1d:db:08:73:
         d2:97:3a:f2:7a:87:70:dd:a5:15:5c:ac:f8:dc:49:db:09:d8:
         0c:19:1b:7e:9a:c8:ac:49:f3:8f:46:f6:6b:24:af:36:15:5c:
         12:44:31:18:99:1e:a0:d9:d3:6e:c7:ee:d5:7b:b5:cb:51:5f:
         0d:95:1d:15:39:23:d2:bb:24:c1:61:d6:26:46:be:de:7c:6d:
         97:e2:74:86:ac:fb:d9:08:5a:96:a6:8f:bf:77:ba:df:d9:81:
         37:d9:eb:32:3b:8c:4e:7d:86:65:82:08:b7:85:c3:72:dd:81:
         83:88:1d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 02:52:40 2025 by rpki-client