Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/3138312e3233322e3234302e302f32322d3234203d3e20323731353530.roa
File:                     3138312e3233322e3234302e302f32322d3234203d3e20323731353530.roa (raw, json)
Hash identifier:          Zul0HI8JzVNV7YyNcgJPXjz43wLccQx3J1AEq/Ialfk=
Subject key identifier:   36:D6:54:F0:C7:E9:72:68:D0:64:3D:CF:D3:D2:07:B1:79:71:B3:1E
Certificate issuer:       /CN=5D88506E9E4CEFFA0495A2DC722396EE08FC529D
Certificate serial:       78A498415F91FCD380ACBC52B15AD55E3CC219F6
Authority key identifier: 5D:88:50:6E:9E:4C:EF:FA:04:95:A2:DC:72:23:96:EE:08:FC:52:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/3138312e3233322e3234302e302f32322d3234203d3e20323731353530.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     271550
IP address blocks:        181.232.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.crl
                          rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 19:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a4:98:41:5f:91:fc:d3:80:ac:bc:52:b1:5a:d5:5e:3c:c2:19:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D88506E9E4CEFFA0495A2DC722396EE08FC529D
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:9b:42:89:d2:ba:6d:39:18:93:98:7f:a3:
                    42:66:c7:76:3d:87:d1:09:a8:74:3a:6d:3d:ce:10:
                    52:cb:de:31:c7:57:c5:3e:ec:f7:33:ae:8f:18:ad:
                    c1:f0:c9:88:9f:00:5b:68:1c:43:a1:3c:d8:0d:dd:
                    1a:de:80:aa:9e:e6:ea:cf:39:4d:ca:7b:7d:f4:30:
                    35:85:b5:eb:02:a4:4b:c4:a2:c8:58:dc:87:be:82:
                    0d:cf:d0:f1:1e:d6:5d:e5:e3:72:c4:cb:8e:0c:46:
                    45:e6:07:30:4a:3c:7c:26:65:51:56:46:c9:c7:41:
                    5b:6b:01:d0:79:dd:c2:4c:11:38:39:b3:f2:71:b9:
                    69:1e:89:3b:05:bf:58:3e:84:b6:0c:34:d1:c2:8c:
                    2a:29:78:ba:93:82:b0:50:1e:ce:41:67:66:e9:9e:
                    47:53:8e:37:97:1e:02:35:1e:f1:d1:0c:80:6c:2d:
                    e3:20:80:6a:66:6e:22:9d:5b:73:b8:5a:eb:24:d3:
                    d2:a1:82:94:a6:7f:ab:68:76:42:e6:1e:91:ac:d6:
                    ce:60:0e:ce:6d:f0:93:24:85:48:af:3a:cd:66:30:
                    88:cd:4e:14:ca:d4:f9:2d:29:1c:25:9b:81:41:76:
                    18:b9:f1:b0:f3:1a:8a:c4:3c:c2:4a:db:80:19:33:
                    7d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D6:54:F0:C7:E9:72:68:D0:64:3D:CF:D3:D2:07:B1:79:71:B3:1E
            X509v3 Authority Key Identifier:
                keyid:5D:88:50:6E:9E:4C:EF:FA:04:95:A2:DC:72:23:96:EE:08:FC:52:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/3138312e3233322e3234302e302f32322d3234203d3e20323731353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:ec:bd:01:7c:9e:29:1f:a3:3d:37:58:92:38:31:10:94:a5:
         73:ad:1e:8f:e2:a7:f5:90:7f:1b:e0:b4:4a:08:ee:e1:e8:79:
         e3:74:1f:51:12:12:66:28:40:04:5b:44:50:1c:99:6d:da:d0:
         22:0c:28:02:2a:b3:67:96:67:20:68:42:e0:6a:ac:d1:76:4c:
         28:19:be:5b:68:e6:62:85:3d:b4:e7:50:fb:94:6f:08:47:a0:
         9a:2c:84:f2:a5:aa:a5:f7:ed:6a:ce:77:f0:53:5a:73:01:ac:
         de:f7:db:da:f8:41:d2:03:84:09:32:37:0b:2d:9c:44:13:f0:
         32:6a:23:5a:80:7d:67:00:71:57:55:90:99:ff:74:6d:64:6c:
         7f:b7:46:bd:86:3c:63:cc:c2:79:dd:d4:4b:7f:94:35:27:a8:
         dc:28:91:b7:29:d1:d0:a9:d7:80:ec:b4:9e:62:46:6d:d2:08:
         a8:94:d8:03:d3:57:3d:4a:de:f6:21:32:5e:78:f7:3b:6e:10:
         01:17:14:16:eb:d2:69:61:e1:c7:56:a1:66:cd:9b:36:37:9b:
         b0:76:6d:2c:6a:fc:5e:8a:8f:50:df:7f:f0:b4:c9:ec:52:8d:
         1f:0a:03:19:d6:a6:85:0b:9a:17:ba:53:6c:96:c7:e4:5a:ca:
         c4:7d:75:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:22:50 2025 by rpki-client