Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3138382e302f32322d3232203d3e203631383838.roa
File:                     3138362e3233352e3138382e302f32322d3232203d3e203631383838.roa (raw, json)
Hash identifier:          0yRyvy8XKt7kGPi85be1EdJXn1/4HpfpCRl+3MvDeZI=
Subject key identifier:   D4:27:40:A1:BA:89:E2:02:18:8D:23:99:60:C0:07:65:8B:36:08:37
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       72963609A66F972CB9967743B22BA6E0EDE73EB3
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3138382e302f32322d3232203d3e203631383838.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     61888
IP address blocks:        186.235.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 05:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:96:36:09:a6:6f:97:2c:b9:96:77:43:b2:2b:a6:e0:ed:e7:3e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=D42740A1BA89E202188D239960C007658B360837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:4e:13:cb:6b:e9:b9:a1:f4:49:3f:87:5b:
                    2e:4c:20:0c:34:40:58:34:d7:32:81:4f:6a:99:8e:
                    e0:06:fd:37:af:20:9e:c9:cb:ed:bc:3b:80:7a:d6:
                    db:29:e2:80:af:d5:61:08:3c:39:6f:c4:dd:43:4f:
                    d2:40:ba:76:ce:3e:ca:79:3a:fb:a6:e7:0f:32:db:
                    5e:f0:bc:e5:91:19:4d:6c:86:cf:45:44:b5:93:8c:
                    7b:fe:48:18:49:68:37:97:45:55:4f:7a:99:3a:5e:
                    9f:61:72:3c:4f:61:93:3d:53:ec:fd:88:a6:c2:26:
                    22:f7:da:6a:cd:6d:c6:b8:8e:f5:1c:04:b6:ce:ab:
                    b8:0d:a6:15:ba:ed:a8:33:f3:80:a6:a7:e8:67:1b:
                    7f:0b:e0:70:5c:28:a9:c6:e6:2f:82:e8:b0:18:e7:
                    b2:1a:44:69:a7:6c:00:35:36:4b:f3:f1:33:ce:d0:
                    21:27:ae:11:e2:ce:d6:c5:38:14:b1:10:47:00:ee:
                    24:7c:6a:a1:c9:16:44:eb:b1:20:e0:b8:db:b5:dc:
                    75:59:84:18:a9:a0:94:30:1a:6b:fc:e2:28:87:3e:
                    62:d7:6f:92:b5:91:22:5e:c8:37:f3:54:9f:e9:1b:
                    1e:22:1b:c3:d5:63:fd:e7:66:75:ba:29:52:c1:24:
                    a9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:27:40:A1:BA:89:E2:02:18:8D:23:99:60:C0:07:65:8B:36:08:37
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3138382e302f32322d3232203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e3:b7:ea:3f:82:89:aa:87:be:86:b9:4a:24:fd:c1:1f:7d:24:
         a8:26:c0:a1:a4:9c:b6:28:ce:d2:16:78:2b:84:38:ac:4d:3e:
         96:8a:a8:1d:65:97:23:a6:b2:8d:bd:26:5f:fd:54:fe:6c:d6:
         4a:a6:be:69:16:5a:e1:1b:bf:b2:92:b9:8e:1d:e6:94:f8:8a:
         17:fe:c2:ea:b2:19:3e:d7:f6:4a:e8:d6:03:ef:7e:94:00:f7:
         fc:c7:06:36:c6:84:83:d6:6f:2f:8c:35:52:88:64:b7:fd:06:
         d9:6f:4b:ba:40:48:00:ed:78:68:b7:6c:af:b5:aa:c4:95:86:
         b4:01:59:29:80:e1:b7:74:3a:f8:50:1a:64:1f:53:64:60:f9:
         d1:6f:6d:c5:0e:20:3c:3f:a8:dd:7e:39:a3:f3:df:06:4d:98:
         e7:b6:8c:a2:3a:e1:14:a3:93:e2:07:27:ef:83:a3:f7:76:a9:
         d6:d6:83:5a:b1:f4:5c:00:3d:b5:11:f5:1c:36:e1:26:85:a4:
         1f:8d:4c:47:e4:ac:b9:93:6e:9b:f8:0d:a7:6b:f6:75:f8:83:
         a2:5a:a7:90:d7:82:3d:1d:5b:9d:82:a3:48:e9:c2:d0:41:96:
         c7:4f:21:77:58:1c:49:d1:68:33:fd:3c:bc:26:04:58:37:fc:
         78:fa:fc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:46:17 2025 by rpki-client