Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/3133382e39342e3136382e302f32322d3232203d3e20323730383736.roa
File:                     3133382e39342e3136382e302f32322d3232203d3e20323730383736.roa (raw, json)
Hash identifier:          s+5Ne+ruwuee94iefO6qySoUqtiZ27tUVu85dvhZvqk=
Subject key identifier:   DA:5B:DB:32:CA:37:FF:80:5A:6D:96:9B:F1:36:82:AB:DB:AC:AB:AB
Certificate issuer:       /CN=AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83
Certificate serial:       5587EFFE554701C2094E643C062AF406F3CB0376
Authority key identifier: AE:59:A4:8B:AA:81:6C:14:CB:96:DA:B0:CA:10:6B:59:B3:B8:DC:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/3133382e39342e3136382e302f32322d3232203d3e20323730383736.roa
Signing time:             Thu 06 Mar 2025 06:43:03 +0000
ROA not before:           Thu 06 Mar 2025 06:38:03 +0000
ROA not after:            Thu 05 Mar 2026 06:43:03 +0000
asID:                     270876
IP address blocks:        138.94.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.crl
                          rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 05:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:87:ef:fe:55:47:01:c2:09:4e:64:3c:06:2a:f4:06:f3:cb:03:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83
        Validity
            Not Before: Mar  6 06:38:03 2025 GMT
            Not After : Mar  5 06:43:03 2026 GMT
        Subject: CN=DA5BDB32CA37FF805A6D969BF13682ABDBACABAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:38:67:91:46:c2:b5:31:19:dc:3c:dd:96:d1:
                    d7:4b:ff:09:76:95:d0:ae:14:4d:f4:b5:f0:cf:50:
                    8a:d5:1c:34:57:8d:8b:10:b2:a3:3f:29:87:48:42:
                    8a:0d:33:64:59:3b:d4:b0:20:4a:3d:37:e9:65:59:
                    d0:35:a2:54:ad:82:5b:9b:18:8c:69:96:12:69:35:
                    69:cb:bf:ba:56:b3:9c:cb:81:40:a8:e3:94:a1:17:
                    85:16:59:73:e0:ad:4d:d4:09:b7:ee:73:9f:cd:b7:
                    1e:ac:a1:b2:ec:cc:29:9b:95:e9:02:5d:d8:22:ad:
                    73:ba:4e:73:39:81:74:21:d7:fb:c8:f9:f4:25:57:
                    a3:97:fb:97:75:45:17:2a:58:16:95:a2:36:b2:7e:
                    6c:52:3e:ef:ff:ea:82:3a:5c:cc:a0:26:95:64:ca:
                    24:d9:6a:9c:94:bd:a0:2b:a6:f5:63:e8:f5:61:05:
                    99:6a:6f:63:19:64:0f:8b:f3:c8:7f:47:34:87:6d:
                    78:ae:40:61:73:74:ec:22:43:08:cc:dc:71:d1:95:
                    80:5c:85:d1:12:de:77:53:19:79:a7:1c:4a:dc:b8:
                    73:17:8f:37:a6:68:6a:c0:ff:d5:f4:e3:92:55:58:
                    fa:2d:0e:cd:66:d7:b1:4d:bd:ac:c1:8b:0e:e6:d6:
                    97:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5B:DB:32:CA:37:FF:80:5A:6D:96:9B:F1:36:82:AB:DB:AC:AB:AB
            X509v3 Authority Key Identifier:
                keyid:AE:59:A4:8B:AA:81:6C:14:CB:96:DA:B0:CA:10:6B:59:B3:B8:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/3133382e39342e3136382e302f32322d3232203d3e20323730383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:59:51:70:75:2c:0a:82:1f:1d:dc:4b:85:ac:f2:27:b9:47:
         cb:2e:06:79:ff:66:28:73:55:16:78:4d:3d:de:a2:9e:d6:c3:
         8f:31:42:3a:9e:48:00:bf:5e:c6:d5:44:05:22:a6:ff:0b:4b:
         3c:23:be:2a:9b:34:e6:0d:5f:ef:69:8f:ac:45:64:8d:24:ec:
         c6:1b:ae:31:18:4b:d1:79:fe:d1:22:ab:4b:ba:74:f8:44:c9:
         85:21:28:81:89:c5:38:3e:0b:d9:57:36:79:4e:2e:e5:70:54:
         b5:53:51:a3:70:a5:a5:ac:d4:1a:f5:25:9a:91:db:1a:30:c2:
         bc:bb:61:e1:e9:a4:b3:13:c2:08:bb:8c:3e:90:af:b2:a8:a4:
         48:ff:98:ca:28:46:f0:a2:6a:ff:11:eb:05:5e:de:ca:78:bf:
         f4:97:73:cf:78:d1:da:1a:ed:5e:01:ba:3c:48:4c:31:21:f2:
         00:98:66:fc:62:2b:3f:bb:f9:b7:b9:a6:f1:b6:03:19:80:c7:
         0d:fa:25:2a:a5:fe:b6:66:01:ce:a3:6f:87:22:99:d9:49:d0:
         cd:40:31:64:64:73:3a:07:67:4b:2c:a8:20:8b:25:bd:4c:b8:
         94:1a:8d:c9:42:c6:46:eb:52:aa:a5:7a:c3:ff:9c:14:4c:32:
         c3:05:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:16:18 2025 by rpki-client