Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/3133312e3139362e31362e302f32342d3234203d3e20323635383939.roa
File:                     3133312e3139362e31362e302f32342d3234203d3e20323635383939.roa (raw, json)
Hash identifier:          bVDhicS20n96C3ornIIs4S1kNj+jjRIdLkuDgNyqSu0=
Subject key identifier:   EC:59:2F:1A:EA:EF:12:FA:A0:80:E1:CF:B9:81:FC:7E:F5:FF:71:6F
Certificate issuer:       /CN=5096373658543AD02A3562D6EBE37A8A75AF47A3
Certificate serial:       509C5C85F6F0804B46757B8EFE23F53236E9F9BD
Authority key identifier: 50:96:37:36:58:54:3A:D0:2A:35:62:D6:EB:E3:7A:8A:75:AF:47:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/3133312e3139362e31362e302f32342d3234203d3e20323635383939.roa
Signing time:             Tue 31 Dec 2024 18:17:57 +0000
ROA not before:           Tue 31 Dec 2024 18:12:57 +0000
ROA not after:            Tue 30 Dec 2025 18:17:57 +0000
asID:                     265899
IP address blocks:        131.196.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.crl
                          rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 04:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9c:5c:85:f6:f0:80:4b:46:75:7b:8e:fe:23:f5:32:36:e9:f9:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5096373658543AD02A3562D6EBE37A8A75AF47A3
        Validity
            Not Before: Dec 31 18:12:57 2024 GMT
            Not After : Dec 30 18:17:57 2025 GMT
        Subject: CN=EC592F1AEAEF12FAA080E1CFB981FC7EF5FF716F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ba:45:bf:19:ae:d3:fe:1f:89:47:95:29:fd:
                    61:ae:16:38:98:c0:1c:de:10:09:83:71:ec:04:5d:
                    71:88:b5:17:0f:60:ba:03:8b:bc:72:83:a5:5f:2b:
                    fd:d4:5b:b6:de:23:d7:44:54:4f:5c:d9:af:cb:fc:
                    e1:dc:76:ab:c0:8e:39:94:55:22:a1:b6:8a:b9:90:
                    bf:ab:5f:19:9c:b2:2c:fc:fc:85:02:4a:f8:f8:09:
                    c1:3a:8d:4b:84:65:bd:8c:9b:08:b5:dc:91:16:23:
                    9a:e0:43:1e:5f:21:a8:2b:f8:1c:10:dd:ec:b6:82:
                    2b:d5:74:fe:5e:bc:93:cb:ad:74:57:21:c2:50:eb:
                    4a:2d:63:cc:57:c5:28:d2:fa:ee:62:3e:96:7b:9e:
                    44:79:ed:62:e9:46:1c:8e:1a:b1:31:ac:b4:00:98:
                    3f:c1:2a:aa:54:93:f1:4a:2d:94:5d:82:e8:d1:32:
                    48:b2:ab:ea:b9:c0:e6:18:02:ea:2a:e5:2a:60:64:
                    9f:4a:ca:b9:67:18:de:5f:63:e9:9f:c0:6e:f3:a8:
                    21:b4:b4:bd:f6:66:b7:03:82:2b:fe:f5:ae:da:06:
                    c2:29:e8:77:79:29:10:13:70:30:1b:35:02:64:80:
                    b2:57:7a:bd:11:b4:17:46:29:5f:f9:d9:c3:6b:09:
                    99:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:59:2F:1A:EA:EF:12:FA:A0:80:E1:CF:B9:81:FC:7E:F5:FF:71:6F
            X509v3 Authority Key Identifier:
                keyid:50:96:37:36:58:54:3A:D0:2A:35:62:D6:EB:E3:7A:8A:75:AF:47:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/3133312e3139362e31362e302f32342d3234203d3e20323635383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:b3:6c:b2:ca:c7:33:5c:2e:e4:5f:dd:aa:80:e9:9c:56:d9:
         d1:58:8c:2f:40:94:46:b1:6a:dc:d4:54:5f:85:c7:65:0d:60:
         50:42:1b:e9:a4:78:a9:1f:85:3b:86:e4:ee:5d:88:3a:61:94:
         2e:45:c5:86:f8:90:e8:71:2a:c7:15:f3:0f:e4:68:09:bb:c6:
         71:09:ed:be:3c:c8:1b:c5:b0:8b:ef:b0:e7:74:25:9e:28:1a:
         4b:85:a2:3d:23:90:9f:f2:ab:bb:df:dd:54:bf:a3:ad:3d:a2:
         96:0d:da:52:a5:02:c3:58:e8:c2:99:83:bb:45:f5:ed:ff:dc:
         d1:79:66:8c:84:18:ed:ce:d7:03:6f:8b:3c:4c:4d:0b:4d:c7:
         cd:11:24:00:53:a2:e8:9e:8b:29:13:a4:48:85:3a:7a:84:6d:
         2a:8b:73:4d:97:f3:68:39:49:a6:2f:85:41:f8:5c:d0:c7:78:
         03:1b:fd:1f:28:3c:21:03:77:42:b2:53:ec:08:68:f6:64:3b:
         2c:d4:74:c5:b0:2c:5f:89:09:ef:31:31:fd:47:bb:73:c0:f6:
         2c:a3:54:17:f3:a0:f4:6c:dc:a3:00:a9:e5:84:cf:2f:88:da:
         76:1e:17:ab:ab:35:43:88:3d:dc:1e:95:c5:33:cc:c0:23:9b:
         4e:db:f6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:32 2025 by rpki-client