Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/3133382e39392e3134302e302f32322d3234203d3e20323633353734.roa
File:                     3133382e39392e3134302e302f32322d3234203d3e20323633353734.roa (raw, json)
Hash identifier:          ESm8GnPFYQDPt5xt6FRZeZkEfGs4DvcIjZejr0aFAoI=
Subject key identifier:   3A:69:D3:05:E0:62:F6:B3:7E:B3:ED:4E:72:D3:E9:3C:5F:47:BF:A3
Certificate issuer:       /CN=8D0F799DDE369B44B3A0931DBECC6483E27050C6
Certificate serial:       53F9B40258E6480741D2D54A500DA5A0D5EB5528
Authority key identifier: 8D:0F:79:9D:DE:36:9B:44:B3:A0:93:1D:BE:CC:64:83:E2:70:50:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/3133382e39392e3134302e302f32322d3234203d3e20323633353734.roa
Signing time:             Fri 14 Mar 2025 12:26:34 +0000
ROA not before:           Fri 14 Mar 2025 12:21:34 +0000
ROA not after:            Fri 13 Mar 2026 12:26:34 +0000
asID:                     263574
IP address blocks:        138.99.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.crl
                          rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f9:b4:02:58:e6:48:07:41:d2:d5:4a:50:0d:a5:a0:d5:eb:55:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0F799DDE369B44B3A0931DBECC6483E27050C6
        Validity
            Not Before: Mar 14 12:21:34 2025 GMT
            Not After : Mar 13 12:26:34 2026 GMT
        Subject: CN=3A69D305E062F6B37EB3ED4E72D3E93C5F47BFA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:83:da:7c:d0:d3:ad:de:a0:6a:b6:39:10:9f:
                    6e:3f:e7:98:d1:53:c1:fa:5d:9c:0b:89:f1:33:b3:
                    3f:75:75:83:0c:e9:9d:cc:ae:40:c0:17:4a:f0:31:
                    01:a6:0a:9a:8b:0b:1c:a9:30:1c:4d:d3:26:32:e2:
                    55:b2:8f:f2:d0:c6:48:20:ee:d3:01:3e:29:bc:ac:
                    6d:d6:c1:4a:da:c7:cb:ed:a0:74:20:59:db:e0:54:
                    50:ff:f5:ac:6f:79:4e:db:8a:aa:db:11:f1:88:83:
                    21:a0:4e:60:88:ae:f3:1b:f8:05:f3:bd:dd:39:d7:
                    c3:93:34:bf:0c:ad:19:3c:02:0f:a3:18:8b:07:e6:
                    6e:4c:fc:3c:10:15:40:fb:5f:0b:14:32:c3:53:c9:
                    96:5d:62:84:40:82:c9:7f:6e:4f:fb:2b:e7:fa:ca:
                    18:04:f0:f1:81:d5:4e:cd:db:7a:d6:74:bf:ed:2b:
                    2e:53:05:34:e0:74:26:7f:8a:d7:7a:5a:7a:79:98:
                    da:ac:68:2e:b7:a4:a0:dd:16:2c:86:41:10:8d:58:
                    40:3e:2a:03:d8:32:44:b9:5b:dc:a2:dc:98:06:10:
                    5b:56:23:e3:33:68:9e:c5:d7:79:03:87:61:d6:61:
                    50:28:07:6b:49:5e:bc:45:c1:cc:1a:38:d7:0a:55:
                    ea:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:69:D3:05:E0:62:F6:B3:7E:B3:ED:4E:72:D3:E9:3C:5F:47:BF:A3
            X509v3 Authority Key Identifier:
                keyid:8D:0F:79:9D:DE:36:9B:44:B3:A0:93:1D:BE:CC:64:83:E2:70:50:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/3133382e39392e3134302e302f32322d3234203d3e20323633353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:b6:82:5d:88:8e:8e:79:27:dd:de:90:59:e1:80:4b:bc:41:
         7c:08:21:61:3f:af:db:f8:71:12:44:a7:17:14:7e:c2:b7:3e:
         20:5d:16:b3:b4:6d:d9:71:88:cd:a7:d3:60:69:06:04:65:4e:
         64:c4:86:19:80:63:c3:4d:33:55:bf:8e:9e:1e:80:3a:85:f7:
         5e:90:f0:a1:3a:94:54:88:bb:99:ec:3e:53:15:7e:1f:a4:6a:
         fb:9e:e8:69:ba:9f:c8:a6:01:00:cc:c3:57:94:09:17:1c:ac:
         65:89:2c:35:c8:ae:90:7d:eb:42:3c:5c:0d:f9:d9:4f:5a:ba:
         dd:be:79:e9:80:dd:19:bb:b4:4b:cd:a2:9b:19:91:be:4b:64:
         ea:0e:d4:d0:8b:ad:55:3b:5f:22:8a:aa:b3:74:41:c5:cf:f4:
         04:66:ef:fb:7a:da:f6:c3:8b:93:00:e3:0f:59:fb:85:e3:ed:
         7d:b3:5d:5e:82:2c:09:b8:49:09:66:99:ea:e6:b0:59:d7:36:
         05:8e:00:96:a2:30:76:d0:af:5d:ce:f9:5c:49:fb:94:9d:95:
         3a:a1:d6:f8:a9:06:73:e3:ea:fc:b4:42:ab:8d:d9:03:60:f9:
         67:94:7a:14:09:c3:08:c6:84:c3:3f:ba:3c:cd:f9:32:ca:38:
         cb:4d:8c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:29:01 2025 by rpki-client