Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32302d3332203d3e203238333630.roa
File:                     3138392e37362e3230382e302f32302d3332203d3e203238333630.roa (raw, json)
Hash identifier:          uCusOwfIODi2DkSCpf8sewOTENPUEMkwYuxsEf+tFVg=
Subject key identifier:   A1:40:F1:B9:53:C0:99:5E:51:1E:A6:8C:59:4B:A8:FF:B4:7A:89:74
Certificate issuer:       /CN=011E03C9169DEFF662F6BE1D9EBF430BFA9E0453
Certificate serial:       609B2CAF9940C48AB808F3923B9DEAFCD05F3C82
Authority key identifier: 01:1E:03:C9:16:9D:EF:F6:62:F6:BE:1D:9E:BF:43:0B:FA:9E:04:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32302d3332203d3e203238333630.roa
Signing time:             Fri 10 Jan 2025 19:58:12 +0000
ROA not before:           Fri 10 Jan 2025 19:53:12 +0000
ROA not after:            Fri 09 Jan 2026 19:58:12 +0000
asID:                     28360
IP address blocks:        189.76.208.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.crl
                          rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 16:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9b:2c:af:99:40:c4:8a:b8:08:f3:92:3b:9d:ea:fc:d0:5f:3c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011E03C9169DEFF662F6BE1D9EBF430BFA9E0453
        Validity
            Not Before: Jan 10 19:53:12 2025 GMT
            Not After : Jan  9 19:58:12 2026 GMT
        Subject: CN=A140F1B953C0995E511EA68C594BA8FFB47A8974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d6:4e:c5:c1:7d:e6:7d:af:d4:75:9b:e4:b3:
                    01:91:2a:91:b0:a5:e8:2b:7c:30:08:6b:f0:7e:0a:
                    c1:4a:8b:18:65:57:5d:95:52:fc:3b:1b:f0:83:16:
                    28:04:09:48:1a:db:f0:e3:a7:8b:8b:9a:ab:05:ca:
                    cf:c1:16:3e:13:00:28:f0:a5:89:8d:39:a1:08:ff:
                    ec:02:2f:39:42:fb:75:41:bf:85:48:ac:99:d0:01:
                    7c:c4:a5:c8:e6:20:22:6e:bf:18:e2:10:aa:8b:6a:
                    0c:d4:8b:04:b0:14:21:22:70:39:f6:0a:68:17:19:
                    e8:72:5d:1a:4c:f6:0b:20:5a:ed:70:67:b2:81:60:
                    02:b7:e4:f1:ea:79:0b:3b:49:b3:e8:4d:ea:d9:89:
                    32:a4:71:83:0d:33:c2:87:04:6e:c7:b8:7b:13:26:
                    82:c1:eb:fe:81:c3:75:df:41:17:80:60:12:06:f0:
                    2d:4e:ee:7a:95:94:e4:59:37:f8:e4:78:a2:df:56:
                    ee:3d:6f:3a:f2:82:58:1b:6c:8a:de:ee:02:68:c3:
                    19:0c:18:50:84:4f:6a:e3:a5:e6:51:90:a0:bb:83:
                    31:74:83:42:f8:e7:a9:22:5c:62:93:85:c2:54:4a:
                    d5:dc:c2:81:d0:6e:7d:84:67:b2:6e:59:78:0e:cb:
                    c2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:40:F1:B9:53:C0:99:5E:51:1E:A6:8C:59:4B:A8:FF:B4:7A:89:74
            X509v3 Authority Key Identifier:
                keyid:01:1E:03:C9:16:9D:EF:F6:62:F6:BE:1D:9E:BF:43:0B:FA:9E:04:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32302d3332203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         89:e5:ba:3a:f5:bb:84:57:f4:ca:2b:34:3e:ee:46:5e:da:d0:
         8b:06:ce:5d:cc:e9:1b:68:af:bf:d6:30:2a:7c:94:3c:be:8c:
         03:c7:71:4b:ba:09:47:2b:d8:1a:ae:e0:7a:0f:66:fc:11:dc:
         83:77:02:01:e5:97:ef:55:87:d8:07:6d:e4:bf:0e:12:42:5f:
         fd:bf:5e:95:23:35:ca:5a:86:49:0c:6a:f1:e1:f9:0f:53:8c:
         dc:dc:59:99:d0:75:99:a0:27:ca:4b:2f:13:61:c7:13:10:73:
         44:41:61:c5:29:25:c7:16:75:f2:b1:98:d9:19:4b:03:71:db:
         85:f5:5b:dc:7d:bf:4e:e0:9f:49:4b:52:59:07:8e:a4:b9:32:
         76:54:4f:2e:ac:de:3b:9f:a4:18:56:88:3e:c6:6c:b5:33:83:
         69:92:da:b8:71:87:30:cc:64:9b:00:86:0a:99:0d:68:e6:2c:
         06:d3:2f:d8:f4:de:98:a8:31:83:67:d6:d2:8e:72:43:bd:8e:
         ad:89:e2:fc:27:d0:19:49:b5:f9:2b:eb:fe:0e:86:8f:b0:8b:
         cb:ff:52:e3:86:31:23:25:1f:da:85:b7:3a:bd:67:78:fe:b1:
         56:b0:13:c4:12:c9:ec:55:87:1a:1b:e6:6f:56:09:f4:9e:c3:
         bf:95:e1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:02 2025 by rpki-client