Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130352e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3130352e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          ayR4qyhmikFAEB0Cvp5VCEEhYPCi9p6bCXGptmZtAto=
Subject key identifier:   5B:92:52:11:37:FC:0B:4A:0B:63:8A:46:88:A0:F6:74:53:58:FA:93
Certificate issuer:       /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial:       0EAD27E32901D224EA81ED341C4DD5E1D7C98815
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130352e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 04 Dec 2024 15:42:40 +0000
ROA not before:           Wed 04 Dec 2024 15:37:40 +0000
ROA not after:            Wed 03 Dec 2025 15:42:40 +0000
asID:                     53153
IP address blocks:        186.209.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 11:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ad:27:e3:29:01:d2:24:ea:81:ed:34:1c:4d:d5:e1:d7:c9:88:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
        Validity
            Not Before: Dec  4 15:37:40 2024 GMT
            Not After : Dec  3 15:42:40 2025 GMT
        Subject: CN=5B92521137FC0B4A0B638A4688A0F6745358FA93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:3c:c8:24:d1:ea:f0:96:d8:6e:4f:d7:e7:
                    d2:66:85:97:52:d2:65:9d:6b:23:a0:41:d2:10:7f:
                    36:be:d3:92:78:1a:f8:24:50:7d:ef:30:af:be:c9:
                    db:78:ac:7a:ff:26:7a:de:f6:bd:78:01:05:5e:f4:
                    7c:b1:8e:32:f2:0f:b9:e7:56:9a:40:f6:f3:af:0e:
                    65:50:2e:ba:96:96:d7:77:79:10:b9:e5:13:87:cf:
                    35:6f:8e:50:87:76:d2:b8:de:04:73:69:39:c9:fe:
                    b6:7d:44:46:62:ab:48:dc:2f:94:96:fb:c7:ca:cd:
                    c5:35:7b:38:94:f2:28:cc:e7:98:f8:30:b7:32:f4:
                    ad:8e:fd:ff:ff:35:e9:bc:2d:ec:33:cc:83:e3:23:
                    fb:c7:f3:98:62:e6:e5:b0:7e:72:54:ec:1a:98:7a:
                    a7:0b:fd:d9:9f:d4:aa:34:41:58:b0:3e:1d:61:47:
                    b8:51:c4:d9:df:a0:10:e0:77:43:a2:72:c2:6e:3f:
                    83:fd:38:7e:3c:eb:ce:7d:06:31:e8:58:6e:d6:c7:
                    d6:41:91:5c:58:c7:f7:4d:af:a4:43:69:78:eb:99:
                    bd:3c:4c:b1:5b:a7:0a:29:a8:05:32:08:e6:df:eb:
                    c4:e1:a6:16:14:c6:e5:5d:c2:a7:d6:3a:cd:53:0d:
                    3c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:92:52:11:37:FC:0B:4A:0B:63:8A:46:88:A0:F6:74:53:58:FA:93
            X509v3 Authority Key Identifier:
                keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130352e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:3d:bf:ed:47:3f:ae:2c:be:99:47:b3:56:e0:f8:cd:d7:81:
         19:32:7d:a7:a4:7f:af:19:cc:7f:92:1d:cc:c3:b8:e3:3e:38:
         f1:d4:86:11:a2:af:e3:09:26:23:9e:90:b9:0b:50:80:10:b0:
         0d:3b:f3:0a:aa:3f:63:e5:7b:0d:b8:a0:28:b8:c4:42:e5:cb:
         f5:f4:db:cc:54:80:01:71:c5:38:d4:53:fb:ff:58:c9:fb:cd:
         42:81:89:42:a3:fd:b9:a2:7b:94:97:cc:2d:09:52:e9:6b:e5:
         29:cf:a4:e8:d7:e7:5b:62:a2:68:eb:c2:bb:7d:52:04:b9:c8:
         c4:7f:0d:ce:41:6c:cc:50:7d:d2:ea:35:05:f4:2d:f9:17:cf:
         99:a6:e1:e4:01:eb:0a:bd:bb:f4:38:7f:39:0b:cf:8f:5e:f3:
         f6:8e:67:8f:0c:14:66:dd:ff:32:a0:aa:8d:95:50:5e:41:24:
         a4:93:d4:d1:d0:a8:19:58:7b:fc:b1:25:97:db:81:1e:3f:53:
         9b:1f:05:b9:76:18:43:eb:c8:2c:94:e4:ce:06:b5:1e:02:3e:
         15:52:5c:7f:ad:1a:7a:96:38:d6:ec:32:72:1d:09:d4:f0:e4:
         e4:05:49:35:e3:b6:52:b0:c7:85:7f:47:5d:10:99:83:30:ce:
         42:8b:69:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:37:56 2025 by rpki-client