Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/3138312e3138392e36302e302f32322d3234203d3e20323731333435.roa
File:                     3138312e3138392e36302e302f32322d3234203d3e20323731333435.roa (raw, json)
Hash identifier:          8Zu5Z//M7rudR/s7wz0d6xSIRORpRccODXHuO6XXd8o=
Subject key identifier:   6B:8C:7D:D0:6F:FB:7A:5E:18:1C:7B:91:3D:97:DD:E5:0A:1C:A4:C2
Certificate issuer:       /CN=14965CE2206A073FBCD58BA22CB5BF760827E0AF
Certificate serial:       7752FAE27927AF491ADB62C7C3F2DC6B42DC486C
Authority key identifier: 14:96:5C:E2:20:6A:07:3F:BC:D5:8B:A2:2C:B5:BF:76:08:27:E0:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14965CE2206A073FBCD58BA22CB5BF760827E0AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/3138312e3138392e36302e302f32322d3234203d3e20323731333435.roa
Signing time:             Mon 17 Mar 2025 20:31:17 +0000
ROA not before:           Mon 17 Mar 2025 20:26:17 +0000
ROA not after:            Mon 16 Mar 2026 20:31:17 +0000
asID:                     271345
IP address blocks:        181.189.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.crl
                          rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14965CE2206A073FBCD58BA22CB5BF760827E0AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:52:fa:e2:79:27:af:49:1a:db:62:c7:c3:f2:dc:6b:42:dc:48:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14965CE2206A073FBCD58BA22CB5BF760827E0AF
        Validity
            Not Before: Mar 17 20:26:17 2025 GMT
            Not After : Mar 16 20:31:17 2026 GMT
        Subject: CN=6B8C7DD06FFB7A5E181C7B913D97DDE50A1CA4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e1:4a:ad:c2:f1:91:00:be:7a:82:74:bb:dc:
                    f9:53:6e:27:3e:1e:88:98:57:23:ff:54:dd:45:e8:
                    18:3b:a8:6c:84:3a:1c:1f:0c:90:35:9f:7c:1b:3d:
                    2c:42:99:79:68:fe:a6:61:e5:77:59:bd:89:3d:be:
                    a6:d2:73:1e:e4:66:dd:58:b4:11:e1:e2:b8:75:2b:
                    94:de:43:82:84:61:b5:da:ff:41:6e:13:46:a6:6c:
                    8a:74:97:2b:4c:b4:dd:ac:77:39:ab:98:3e:d8:eb:
                    da:f7:af:fd:b7:14:a0:92:db:34:ac:86:21:1b:b5:
                    6e:4f:ac:52:e1:cd:54:4a:60:7f:e0:92:cb:7e:a9:
                    ab:4a:8a:2c:b2:94:76:86:02:07:75:7f:7c:45:82:
                    35:a5:9c:ce:0c:a1:9e:e5:39:99:95:28:f5:ec:35:
                    58:cd:f5:6b:50:e1:5c:d0:0e:91:3b:8b:03:e1:82:
                    25:96:3c:26:9c:e4:7f:a6:18:68:40:68:dd:82:d7:
                    07:e7:53:33:3d:d9:21:a1:7b:eb:26:0c:42:d1:6a:
                    99:81:45:f1:d4:27:49:a6:ab:5c:41:4e:d8:5d:2e:
                    30:08:f6:18:e0:a7:e4:51:8c:27:99:5d:6c:ac:bd:
                    2f:c6:9b:ea:19:d7:9f:3c:1a:6a:81:dd:12:24:6a:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8C:7D:D0:6F:FB:7A:5E:18:1C:7B:91:3D:97:DD:E5:0A:1C:A4:C2
            X509v3 Authority Key Identifier:
                keyid:14:96:5C:E2:20:6A:07:3F:BC:D5:8B:A2:2C:B5:BF:76:08:27:E0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14965CE2206A073FBCD58BA22CB5BF760827E0AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/3138312e3138392e36302e302f32322d3234203d3e20323731333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:ad:e5:c8:57:45:45:05:b4:84:e8:c1:7c:8f:dc:6b:75:c8:
         7d:8c:db:34:d7:dc:a7:79:59:f4:f2:cb:92:68:16:df:8a:fe:
         ac:f1:65:04:de:f6:a1:88:75:02:74:8e:76:93:75:53:98:38:
         c0:d2:d8:99:67:9f:9e:fe:16:0f:de:6b:72:69:d8:9e:da:a1:
         53:60:5b:53:32:c6:75:1e:8d:0f:af:82:61:99:c3:0d:1d:a3:
         15:87:71:b5:08:39:25:27:3a:78:31:2b:73:68:70:0c:6c:75:
         ad:a7:7f:0a:67:7b:be:9e:24:c8:dc:88:d2:b8:09:a2:60:28:
         15:3a:2f:a4:91:55:72:f1:7c:c7:b9:49:88:74:d4:07:b5:99:
         4a:63:e3:21:5e:b2:47:40:8d:d6:81:91:52:7d:c9:23:3a:bd:
         fa:81:bf:a2:2f:10:6c:53:71:74:5c:f1:55:2f:5f:0b:e9:ee:
         96:28:62:e6:eb:be:4d:ac:27:33:55:35:d6:e6:db:47:03:9e:
         20:04:0f:d9:91:57:e6:b7:38:2f:f6:1d:53:bd:7a:e0:be:a7:
         2d:e5:7a:ca:02:0e:47:4a:27:67:02:06:8a:d7:79:36:89:a6:
         65:7d:97:db:64:7f:0e:48:22:c6:0b:2a:83:e3:68:52:f0:74:
         7e:b5:06:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:23:25 2025 by rpki-client