Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130352e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e3130352e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          QBdk75SjH7c0TbujxyonjvFhAzF31yu8H5JiSq152Ik=
Subject key identifier:   0B:F9:10:88:1F:D9:07:06:81:7C:CE:CE:D0:EC:90:A1:2C:4C:CF:5F
Certificate issuer:       /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial:       1EA4C3F19432D186B36036A7AB900B5D0BD12016
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130352e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 04 Dec 2024 15:43:09 +0000
ROA not before:           Wed 04 Dec 2024 15:38:09 +0000
ROA not after:            Wed 03 Dec 2025 15:43:09 +0000
asID:                     53153
IP address blocks:        187.61.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 07:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a4:c3:f1:94:32:d1:86:b3:60:36:a7:ab:90:0b:5d:0b:d1:20:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
        Validity
            Not Before: Dec  4 15:38:09 2024 GMT
            Not After : Dec  3 15:43:09 2025 GMT
        Subject: CN=0BF910881FD90706817CCECED0EC90A12C4CCF5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cb:89:51:cc:56:bc:2f:f5:72:cf:0f:1e:f6:
                    a7:b6:0d:d9:67:e1:d1:1b:09:49:98:b7:f6:cf:e1:
                    49:48:b4:d5:66:95:aa:51:2e:fc:6a:68:f1:ee:5e:
                    7c:6e:4b:ba:bc:d7:1e:5f:0f:31:d8:fb:ac:9b:0b:
                    d7:ce:7f:f5:65:1e:ac:2b:86:e4:fe:17:14:84:db:
                    40:51:f9:41:35:1e:c4:33:19:df:43:de:e8:3a:d5:
                    5f:be:2e:a0:fa:4e:1b:8b:66:9b:bd:63:91:c4:59:
                    2b:21:0b:f8:62:48:e9:58:ed:48:b7:0d:f6:f8:00:
                    92:94:a2:fb:99:2b:e4:35:dc:14:78:5d:7f:8e:c0:
                    29:41:03:cb:0d:33:c3:49:9b:ff:48:f9:75:bb:9f:
                    94:dc:7e:c2:18:66:a7:fb:9a:14:d0:9a:ab:0d:6c:
                    6a:60:89:e7:b3:9c:a5:d1:75:61:3a:9c:1a:83:84:
                    d3:e6:a7:e5:61:22:6c:5e:f1:ac:17:90:54:75:0b:
                    ef:d4:9e:77:1a:a3:9d:9f:ba:9e:31:67:da:7a:c7:
                    0c:eb:81:83:98:07:a3:ce:84:67:a8:3a:56:22:b0:
                    41:82:4c:1a:fd:58:14:e6:ac:8d:81:8a:31:49:71:
                    62:0a:d8:ef:25:07:f8:d6:d1:e5:e9:ab:bd:24:51:
                    80:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F9:10:88:1F:D9:07:06:81:7C:CE:CE:D0:EC:90:A1:2C:4C:CF:5F
            X509v3 Authority Key Identifier:
                keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130352e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:d4:69:f3:b6:e6:3c:20:54:6e:21:ad:41:d8:d2:aa:2a:4c:
         66:a2:f3:6e:7a:4b:ca:df:47:9b:47:82:c1:5b:3d:39:48:37:
         84:08:f9:4f:c0:ed:1c:42:25:d7:8c:26:f9:22:dd:ab:de:a0:
         9f:3d:45:30:3c:2b:61:e3:c2:1d:97:02:c3:c0:ab:24:b4:61:
         d1:74:c2:03:bc:d8:42:56:81:e3:53:88:cd:e7:74:a9:1a:24:
         bd:5b:2e:5c:f8:0c:67:8d:e2:df:0f:2d:17:fa:28:18:6d:8f:
         09:78:11:22:bf:30:d4:35:93:c5:e5:5d:8e:47:28:6f:a9:70:
         d2:56:bf:3c:ae:70:7c:38:94:a5:e7:91:e7:eb:2d:4a:f1:76:
         46:59:d1:77:12:3f:ae:13:ad:b0:30:c7:ca:80:98:1c:fc:82:
         79:99:22:86:76:46:23:31:0d:86:3b:9e:85:d6:0f:22:c7:ef:
         39:57:54:0a:f4:90:7d:d4:d6:b0:67:aa:f7:e8:c5:7f:1b:f9:
         90:9b:1d:db:3a:39:32:09:ba:25:bc:e6:1e:06:8a:7b:95:5e:
         e1:c0:23:c7:f7:1a:0c:3c:56:5f:f6:86:a7:77:84:a2:ba:f6:
         8e:5d:34:8c:a8:63:ce:71:dc:f1:1c:c6:85:70:33:ef:33:90:
         33:23:b4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:27 2025 by rpki-client