Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32322d3232203d3e20323634353935.roa
File:                     3133382e35392e34342e302f32322d3232203d3e20323634353935.roa (raw, json)
Hash identifier:          PyXUMLMK9L1SqkoXYNO5lcm0Eve4ft4wL6cnlvA/F2o=
Subject key identifier:   23:95:72:54:2C:CE:25:D1:B4:DB:C2:AE:26:0F:03:FF:5F:1D:36:32
Certificate issuer:       /CN=B0B9B934434D02C9258B1024C067D277143B182B
Certificate serial:       374842A131750939D70B10E0DC5379AB2208D9E1
Authority key identifier: B0:B9:B9:34:43:4D:02:C9:25:8B:10:24:C0:67:D2:77:14:3B:18:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B9B934434D02C9258B1024C067D277143B182B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32322d3232203d3e20323634353935.roa
Signing time:             Wed 21 May 2025 18:42:21 +0000
ROA not before:           Wed 21 May 2025 18:37:21 +0000
ROA not after:            Wed 20 May 2026 18:42:21 +0000
asID:                     264595
IP address blocks:        138.59.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/B0B9B934434D02C9258B1024C067D277143B182B.crl
                          rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/B0B9B934434D02C9258B1024C067D277143B182B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B9B934434D02C9258B1024C067D277143B182B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 01:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:48:42:a1:31:75:09:39:d7:0b:10:e0:dc:53:79:ab:22:08:d9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B9B934434D02C9258B1024C067D277143B182B
        Validity
            Not Before: May 21 18:37:21 2025 GMT
            Not After : May 20 18:42:21 2026 GMT
        Subject: CN=239572542CCE25D1B4DBC2AE260F03FF5F1D3632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f4:ac:0c:eb:33:60:97:7a:9d:69:f6:8b:1b:
                    f9:11:47:b2:a3:58:33:c1:98:25:fe:44:aa:d4:dd:
                    c4:55:eb:ab:22:0d:26:69:bc:dd:64:37:4d:c5:20:
                    67:3a:51:46:b8:39:75:a4:62:cd:01:3d:25:33:85:
                    67:69:27:66:60:62:38:ee:d2:d4:bb:89:64:c2:57:
                    8c:16:80:41:dc:a9:d9:04:de:8a:3b:12:89:04:89:
                    14:32:7d:e4:ed:82:8b:e7:f1:10:7a:cf:bc:54:84:
                    67:ab:d3:3c:d2:db:b9:21:03:d1:7d:d3:4b:22:0d:
                    00:87:cc:e1:74:e0:70:36:bd:75:a8:1b:c3:78:bd:
                    d5:2a:99:55:62:60:b0:89:56:7f:af:47:1b:4d:52:
                    0f:a8:d6:ab:1c:06:ce:d2:dc:3a:ed:e0:a9:42:2a:
                    41:6b:12:4a:d1:24:74:e0:b5:04:03:d3:21:56:b2:
                    c8:83:a4:f5:3e:e0:3c:dd:06:b2:e6:7b:16:b6:79:
                    a2:09:cf:18:8f:12:b3:f5:5a:d5:31:11:18:91:18:
                    a7:16:f2:8d:2f:88:30:ec:f1:ec:f8:b5:40:7e:81:
                    57:1e:b5:b0:06:b9:e6:29:37:17:2b:07:45:cc:86:
                    99:5b:bf:17:2c:52:9c:93:fe:4f:fc:e6:2a:d1:5a:
                    70:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:95:72:54:2C:CE:25:D1:B4:DB:C2:AE:26:0F:03:FF:5F:1D:36:32
            X509v3 Authority Key Identifier:
                keyid:B0:B9:B9:34:43:4D:02:C9:25:8B:10:24:C0:67:D2:77:14:3B:18:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/B0B9B934434D02C9258B1024C067D277143B182B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B9B934434D02C9258B1024C067D277143B182B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32322d3232203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:18:f8:43:75:61:f5:bb:49:3b:db:d1:19:01:47:65:35:56:
         db:75:9e:9c:6a:62:76:7e:e5:8e:59:46:bd:76:35:33:de:71:
         2a:81:ba:cb:ec:cc:5f:bb:90:00:77:4a:9a:7c:eb:cb:9c:d3:
         e9:80:72:88:4d:a8:f0:a2:8c:d7:6f:94:ae:40:ed:a1:72:06:
         b2:4f:e3:ed:73:91:9f:14:f2:4f:1b:57:54:02:7a:53:af:0b:
         b1:f1:07:92:d9:33:06:a2:03:a2:4d:34:f2:11:25:49:8d:76:
         a4:69:e4:ab:4d:7f:8a:39:f8:70:b9:3e:7e:be:37:a5:95:8f:
         96:ea:ff:12:51:c4:ac:7e:82:c7:6b:95:40:2c:65:58:56:b1:
         8a:6d:5d:64:fc:be:48:e0:1a:2f:c7:5c:e4:db:e2:a2:7f:0f:
         77:92:27:a7:e2:9d:62:1c:11:44:49:58:a2:dd:a3:21:35:99:
         7b:f0:d7:9f:6a:1d:46:73:d0:18:36:21:48:ea:a2:a6:ec:0d:
         43:93:24:56:f2:52:5f:d3:cb:ea:17:ed:8c:fe:07:b7:a0:bf:
         c3:85:db:66:88:d3:46:d1:d6:96:af:1e:42:31:2e:90:2a:ec:
         5a:ee:7a:48:68:30:81:0d:c3:0f:c5:94:dc:91:f1:d6:00:b6:
         63:46:6c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:55:07 2025 by rpki-client