Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa
File:                     3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa (raw, json)
Hash identifier:          qpGsSbRwsQekbl0J4eYUguy5NUIwfzgO7koyvHn7CTI=
Subject key identifier:   CD:93:6E:C3:AA:55:AD:4E:CE:DF:69:8E:36:2C:54:18:89:67:24:4F
Certificate issuer:       /CN=8E1E54DB030D4E86E9AF9B44C4588E78821D597A
Certificate serial:       083A695F7C9B815FBC0F399E5D50A809CABA8F10
Authority key identifier: 8E:1E:54:DB:03:0D:4E:86:E9:AF:9B:44:C4:58:8E:78:82:1D:59:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     264201
IP address blocks:        138.97.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.crl
                          rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3a:69:5f:7c:9b:81:5f:bc:0f:39:9e:5d:50:a8:09:ca:ba:8f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1E54DB030D4E86E9AF9B44C4588E78821D597A
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:03:e2:b9:ce:74:be:3a:f3:82:ae:ad:e4:45:
                    96:5c:e2:21:2e:52:13:b8:b5:3e:5c:4b:24:e2:ce:
                    3d:68:99:a6:97:0f:9e:6b:bf:b6:98:36:f7:d0:fa:
                    53:e1:e5:05:d3:b7:ee:f3:20:49:84:cf:de:ea:5d:
                    64:51:3b:da:46:86:5d:9e:3a:4a:87:46:52:ff:fb:
                    7a:e9:57:d6:aa:a8:4f:e4:82:c3:93:e8:b7:3c:05:
                    5f:d3:b2:9f:aa:ad:e3:e8:18:88:40:b2:5f:12:58:
                    55:a6:85:42:ef:81:8c:bf:e8:59:82:04:69:78:60:
                    a8:47:e9:2e:e6:14:c9:33:5f:08:23:5e:09:37:25:
                    a7:60:1d:e9:e5:b7:76:20:48:29:6e:33:c4:a7:2f:
                    cc:a3:f2:06:26:9b:1b:64:fd:8b:cf:48:de:15:7e:
                    12:a6:74:24:b4:0f:ca:fa:45:bd:56:bc:33:47:d6:
                    d1:f3:87:6f:06:ed:39:a5:25:d4:17:31:8b:56:9a:
                    1b:4e:64:39:e6:61:05:12:b8:b4:7d:3c:8d:f9:66:
                    ca:31:63:aa:a8:b9:b8:5c:e1:a0:3c:9d:ab:ed:f0:
                    25:81:9d:2c:68:7e:e8:94:a4:8b:a0:88:ce:1b:fd:
                    05:76:32:7c:cb:f3:a6:28:c8:20:43:5c:5a:f3:0f:
                    cd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:93:6E:C3:AA:55:AD:4E:CE:DF:69:8E:36:2C:54:18:89:67:24:4F
            X509v3 Authority Key Identifier:
                keyid:8E:1E:54:DB:03:0D:4E:86:E9:AF:9B:44:C4:58:8E:78:82:1D:59:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:3a:4d:99:ac:81:8d:a5:d8:9b:a3:2a:55:87:e5:2e:5d:7b:
         ff:2f:11:49:1b:b6:4d:ad:32:21:f9:4f:77:16:31:44:c8:57:
         09:10:07:bf:c2:0e:fa:85:ef:5d:13:4c:8f:b2:9d:29:2a:98:
         19:e1:4c:4a:06:fc:4e:22:32:55:d5:c4:80:e9:99:ab:20:a6:
         b0:b2:8e:be:5a:4c:ac:da:62:59:82:82:e4:b5:6d:f8:35:26:
         db:d7:dd:9c:18:fa:75:ca:0c:89:f3:ab:48:f5:80:df:0f:05:
         96:9a:8e:91:1b:53:ff:93:8e:88:49:96:14:66:dc:44:30:3a:
         99:d6:01:12:00:99:d3:36:cf:07:eb:c8:43:ec:5f:a3:5d:01:
         8e:58:1a:e9:54:4a:55:72:e6:cb:21:1a:fa:13:68:80:9a:92:
         cc:17:8e:fc:5b:5b:4f:60:39:87:ad:a3:42:9e:3d:fa:22:3b:
         f5:b1:79:4f:ee:4e:c8:9d:ff:44:3b:85:ce:d6:2f:de:19:df:
         8a:b3:61:30:da:8e:d8:13:4d:da:54:d2:5d:ab:54:23:4f:66:
         81:9e:de:31:59:35:61:3c:9d:c6:4c:da:52:17:57:e8:37:b8:
         74:9f:e0:fa:c3:54:28:d9:1b:e7:f4:87:60:8d:2b:c9:3a:e6:
         20:87:77:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:48 2025 by rpki-client