Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3138362e3235302e3138342e302f32322d3234203d3e20323632393738.roa
File:                     3138362e3235302e3138342e302f32322d3234203d3e20323632393738.roa (raw, json)
Hash identifier:          QERobPtxsXGL8BIqf84LaGqdlf5U+mtMw+yLV2vDuOs=
Subject key identifier:   69:59:F9:D0:00:70:4E:F7:18:BF:B7:65:38:3A:88:FD:1F:F1:3D:C7
Certificate issuer:       /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Certificate serial:       220EFCE275A62C941A6A28B9145B8DA6C1D0C683
Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3138362e3235302e3138342e302f32322d3234203d3e20323632393738.roa
Signing time:             Thu 06 Mar 2025 06:09:48 +0000
ROA not before:           Thu 06 Mar 2025 06:04:48 +0000
ROA not after:            Thu 05 Mar 2026 06:09:48 +0000
asID:                     262978
IP address blocks:        186.250.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl
                          rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0e:fc:e2:75:a6:2c:94:1a:6a:28:b9:14:5b:8d:a6:c1:d0:c6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
        Validity
            Not Before: Mar  6 06:04:48 2025 GMT
            Not After : Mar  5 06:09:48 2026 GMT
        Subject: CN=6959F9D000704EF718BFB765383A88FD1FF13DC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:69:a4:37:56:93:25:1b:2f:28:f3:d2:41:
                    96:65:f0:4d:6a:cc:47:dd:80:c9:8a:cb:ea:e3:d1:
                    c2:14:3c:5e:73:4f:0d:83:cd:28:02:9a:17:f1:4b:
                    0f:c9:61:f1:5b:4b:87:04:39:6f:d1:41:a4:86:da:
                    0f:9f:fb:bf:c1:ee:d9:e9:25:8f:c2:b3:58:4c:b6:
                    9c:c2:90:33:ba:77:fb:76:27:92:16:4c:16:2b:36:
                    d3:9a:1b:b6:dd:7d:6d:01:85:1d:ca:c9:6c:b6:15:
                    b2:4f:8c:e2:3b:20:19:c2:0f:56:b3:52:2a:79:49:
                    af:4d:c7:f1:70:90:37:a9:97:38:ee:3c:db:50:fa:
                    6c:ba:a1:b5:27:04:27:10:b2:18:ba:33:dd:88:86:
                    77:85:7d:16:95:f9:1a:17:41:ca:33:4c:11:e8:30:
                    f5:d8:15:1c:dc:5f:84:bd:d8:6d:fb:9c:34:ef:01:
                    d6:f4:a2:b5:c4:1e:6b:0c:81:ba:70:67:4f:ab:67:
                    bf:19:7b:ba:49:ac:0f:06:21:a0:df:99:fe:cf:ec:
                    99:dc:48:52:ad:27:8d:f9:a6:a8:75:aa:cc:6d:26:
                    b3:b1:14:83:55:e2:a1:d9:87:8b:1f:68:b7:2f:3f:
                    16:5b:61:e6:23:0c:86:49:6e:aa:17:67:db:ed:82:
                    5d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:59:F9:D0:00:70:4E:F7:18:BF:B7:65:38:3A:88:FD:1F:F1:3D:C7
            X509v3 Authority Key Identifier:
                keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3138362e3235302e3138342e302f32322d3234203d3e20323632393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:61:d4:d9:43:b9:fd:52:3e:8d:1c:fb:11:44:ba:be:7a:d6:
         bf:aa:c2:10:d4:91:6d:a6:1d:43:94:16:0f:0c:9a:b3:72:15:
         7a:30:bf:62:59:1e:60:a8:3a:a8:bb:ba:2d:28:92:d9:bc:86:
         d3:17:f7:51:5f:67:37:4e:71:17:74:82:c7:13:10:1e:f9:dc:
         8f:86:78:f5:cf:73:db:7c:53:cb:e3:1f:27:c3:be:03:a7:a3:
         12:e5:ff:ba:2d:06:60:c6:04:e6:b8:e9:40:82:e8:44:52:fb:
         d8:3e:4e:fc:91:47:e1:c1:ed:8d:74:84:78:86:76:90:96:04:
         b0:1f:b0:a1:4c:fa:c5:c4:66:33:ae:35:10:f9:93:69:c6:fe:
         92:f4:e8:26:81:cc:03:59:30:ca:8b:9f:f0:ad:4c:36:01:be:
         c8:63:c8:b1:60:4a:fc:61:e9:34:d6:d7:f2:5a:f7:ec:c2:06:
         31:87:eb:b8:9d:7a:5f:52:d4:fc:29:00:94:d4:35:9a:8b:fa:
         68:74:29:78:96:66:b4:88:c3:c1:c7:bc:38:ac:d9:f8:36:ed:
         59:3e:b7:ef:78:63:5d:15:c4:ff:cc:49:03:b4:72:e9:a9:7d:
         7f:f5:a6:a0:1e:b7:65:2d:be:e8:bc:71:57:7e:fb:55:e4:c4:
         63:e2:e4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:51:08 2025 by rpki-client