Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131362e302f32322d3332203d3e20323634353737.roa
File:                     3133382e33362e3131362e302f32322d3332203d3e20323634353737.roa (raw, json)
Hash identifier:          qtigUfXLKipkQRmm55ruOhOsTVQ1n5IDW8TziTDo1Vk=
Subject key identifier:   B8:2C:38:1A:2A:6D:B7:FE:36:1A:4F:CA:C0:DE:22:72:A5:DA:1C:F9
Certificate issuer:       /CN=6DED749AD5161FBE936E3278FDD4EFC06A5D5EF8
Certificate serial:       4A83D6F87D806E1D86B1FD7907DE1B7FF8BFFB09
Authority key identifier: 6D:ED:74:9A:D5:16:1F:BE:93:6E:32:78:FD:D4:EF:C0:6A:5D:5E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DED749AD5161FBE936E3278FDD4EFC06A5D5EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131362e302f32322d3332203d3e20323634353737.roa
Signing time:             Thu 09 Jan 2025 20:58:48 +0000
ROA not before:           Thu 09 Jan 2025 20:53:48 +0000
ROA not after:            Thu 08 Jan 2026 20:58:48 +0000
asID:                     264577
IP address blocks:        138.36.116.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/6DED749AD5161FBE936E3278FDD4EFC06A5D5EF8.crl
                          rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/6DED749AD5161FBE936E3278FDD4EFC06A5D5EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DED749AD5161FBE936E3278FDD4EFC06A5D5EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 18:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:83:d6:f8:7d:80:6e:1d:86:b1:fd:79:07:de:1b:7f:f8:bf:fb:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DED749AD5161FBE936E3278FDD4EFC06A5D5EF8
        Validity
            Not Before: Jan  9 20:53:48 2025 GMT
            Not After : Jan  8 20:58:48 2026 GMT
        Subject: CN=B82C381A2A6DB7FE361A4FCAC0DE2272A5DA1CF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4b:0c:62:ac:c0:77:1f:98:20:94:44:d1:a2:
                    57:0e:17:78:a0:ae:7b:91:5b:e1:bc:22:55:0e:29:
                    b9:9a:e7:28:f8:34:23:d3:49:54:66:9b:0e:b1:3c:
                    c3:bf:7f:3e:b2:44:0a:7b:6b:11:b7:49:66:b2:66:
                    69:60:6a:c8:f2:30:cf:f2:bb:f2:ee:5e:c1:eb:f3:
                    88:61:7a:19:a9:70:6a:65:39:4e:c5:2b:c1:dd:10:
                    cc:54:b4:6e:e9:64:01:d9:e6:18:51:1b:5d:03:47:
                    ac:e5:67:84:74:0a:3c:e8:3e:b7:50:ed:ba:ed:5e:
                    8d:db:40:2b:53:2a:36:50:20:11:3c:cf:30:0c:e6:
                    14:46:fc:30:97:4b:3c:b2:c1:db:91:b0:d0:70:97:
                    9e:57:95:cb:39:b9:07:46:21:58:ab:c5:4a:ab:54:
                    d3:f5:04:61:9e:19:18:df:7d:c5:28:df:ca:af:f9:
                    39:57:25:c3:56:d2:7b:ae:eb:92:3f:a5:a9:98:68:
                    ed:bc:3b:e2:33:89:bd:14:95:cd:02:00:15:b5:96:
                    e6:d3:a6:bf:2e:54:c2:4b:77:81:10:1b:13:e8:68:
                    ac:3c:6e:53:85:b7:d3:73:62:a2:f8:9a:b0:6c:94:
                    a4:c2:48:84:5d:23:01:37:77:45:6b:0e:fd:a5:aa:
                    d8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2C:38:1A:2A:6D:B7:FE:36:1A:4F:CA:C0:DE:22:72:A5:DA:1C:F9
            X509v3 Authority Key Identifier:
                keyid:6D:ED:74:9A:D5:16:1F:BE:93:6E:32:78:FD:D4:EF:C0:6A:5D:5E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/6DED749AD5161FBE936E3278FDD4EFC06A5D5EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DED749AD5161FBE936E3278FDD4EFC06A5D5EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131362e302f32322d3332203d3e20323634353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:1c:06:68:90:73:fe:48:4a:2c:ff:a6:78:a8:56:28:c9:3e:
         7d:b6:03:25:85:2b:89:69:31:ee:c8:b0:97:e9:9f:11:ce:66:
         83:57:9f:66:f1:0a:68:42:6f:02:26:bb:68:97:ae:c9:a8:38:
         9d:8a:8d:b5:ae:7c:c7:7d:43:d4:95:df:6c:49:c3:6e:32:cd:
         58:50:ce:de:fc:d0:a9:64:96:65:16:78:04:51:d5:12:07:75:
         75:55:c6:1e:7f:36:a0:f7:b7:dd:e9:a3:15:f8:b7:3e:cd:45:
         2e:eb:34:11:2e:f2:4e:cb:9b:f9:96:43:1e:05:c6:c7:35:7d:
         79:24:79:c3:3b:e9:b5:31:d8:69:a2:e4:b4:ec:da:35:34:7b:
         9d:95:88:8d:e1:41:6d:df:e0:ec:bb:82:c6:49:5a:45:cd:24:
         d5:c2:cf:10:bf:f1:f7:0e:fd:e1:a0:1e:31:2c:d3:e5:09:6a:
         25:88:4a:85:d8:e4:e9:28:86:b4:61:3e:ca:1f:f5:61:c6:ce:
         79:10:92:20:7d:0e:f0:b0:93:06:ef:8f:6d:df:12:08:f2:71:
         38:57:3a:9e:7c:f6:82:c8:d3:5a:73:6e:3c:25:11:2a:65:15:
         de:3e:e6:58:47:aa:6b:36:bc:d5:e1:24:b1:1b:8e:6e:8d:e7:
         86:0b:39:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:16 2025 by rpki-client