Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/3138312e3138392e3130312e302f32342d3234203d3e20323731333938.roa
File:                     3138312e3138392e3130312e302f32342d3234203d3e20323731333938.roa (raw, json)
Hash identifier:          l0XRimwnM/MgmDNKBW1UTDJNtCdBnfc2denU3cuFvPo=
Subject key identifier:   1A:45:AD:BF:BF:D4:D2:34:9E:D3:D5:44:AD:90:60:2B:65:5E:16:2E
Certificate issuer:       /CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
Certificate serial:       6CD6F4A49FA955B982C9B29495595D58BEBB76D3
Authority key identifier: 7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/3138312e3138392e3130312e302f32342d3234203d3e20323731333938.roa
Signing time:             Tue 18 Feb 2025 18:40:45 +0000
ROA not before:           Tue 18 Feb 2025 18:35:45 +0000
ROA not after:            Tue 17 Feb 2026 18:40:45 +0000
asID:                     271398
IP address blocks:        181.189.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl
                          rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 08:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d6:f4:a4:9f:a9:55:b9:82:c9:b2:94:95:59:5d:58:be:bb:76:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
        Validity
            Not Before: Feb 18 18:35:45 2025 GMT
            Not After : Feb 17 18:40:45 2026 GMT
        Subject: CN=1A45ADBFBFD4D2349ED3D544AD90602B655E162E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:67:36:96:c1:1a:d5:f0:39:a0:27:b2:f7:cd:
                    55:09:65:ca:af:f4:4a:82:e3:c4:60:e3:2b:7a:4b:
                    3b:f0:32:87:9d:c4:97:a0:92:37:e8:68:8c:51:44:
                    cd:9d:2c:0b:87:cd:54:a9:1c:81:d4:2d:0a:9c:9d:
                    c3:fa:19:ad:14:a4:88:d7:e0:42:77:3b:9f:4b:46:
                    6b:30:7f:d7:57:ca:71:31:22:76:cd:a9:1a:bc:f9:
                    ce:87:39:7b:9b:13:38:0c:69:a9:3f:b8:b7:6c:9b:
                    cb:6e:a1:b7:e7:54:5c:0d:8a:c5:8b:30:ff:52:3b:
                    38:f4:73:7b:69:2e:2a:3f:e5:52:76:04:d0:16:88:
                    db:49:46:4e:5a:f5:a9:f9:28:a3:54:d5:d6:64:98:
                    65:b9:b7:6f:f5:a1:ac:64:10:9b:50:32:bf:4d:13:
                    92:07:0a:d8:d7:b1:bd:d0:91:8e:66:e1:98:ae:34:
                    2e:10:41:bc:cc:8b:e7:a5:b7:a6:7b:01:0b:c4:cb:
                    18:fd:4b:b6:0f:a2:d1:0d:82:be:71:f9:87:69:fb:
                    84:75:84:f5:55:0b:17:2b:5e:19:82:3a:62:7c:77:
                    8a:11:d4:57:8a:ae:6b:28:4a:0c:6b:e6:2c:fe:78:
                    dd:7c:04:c2:c9:89:2a:4b:07:ff:44:37:27:3d:c3:
                    18:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:45:AD:BF:BF:D4:D2:34:9E:D3:D5:44:AD:90:60:2B:65:5E:16:2E
            X509v3 Authority Key Identifier:
                keyid:7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/3138312e3138392e3130312e302f32342d3234203d3e20323731333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:41:43:c4:9a:51:97:49:1b:3b:e4:68:64:29:b2:d7:14:43:
         fe:d0:6d:23:f9:67:be:34:6d:28:30:d1:b6:3f:1d:67:1f:ef:
         c5:52:23:84:c6:ed:08:de:00:17:74:73:1f:c1:c4:1d:6d:e7:
         a2:30:a2:00:49:b8:13:78:a6:17:ba:fc:35:88:d9:9d:27:64:
         93:6f:29:93:04:fd:11:ea:55:33:55:c9:1b:24:cf:27:69:85:
         74:4f:e6:b9:2c:62:84:29:d0:7c:0e:49:0e:26:62:9e:5f:85:
         10:49:9a:50:41:b0:7f:b7:28:5b:cb:35:a0:b7:b4:bc:1d:2d:
         13:fe:69:4f:29:3b:02:ec:5c:95:2e:7d:9a:48:1d:06:ea:8c:
         53:65:5c:c0:2e:94:34:08:37:e7:65:d4:cb:37:05:7b:db:a0:
         b8:ee:f6:7f:2a:47:f9:f4:81:0f:58:e7:08:50:78:a6:51:c0:
         04:1f:56:28:74:a3:b2:81:b0:94:be:75:11:ee:ab:dc:4d:b8:
         ca:c2:95:01:45:43:e1:ae:58:e5:22:8b:34:47:c1:01:2c:61:
         01:74:f1:c0:8b:b4:fe:cf:b4:40:3b:fc:bd:94:a3:e2:e8:0e:
         c7:21:c0:f2:45:ee:87:e9:1b:4c:95:33:4f:e3:d0:6d:cb:af:
         49:29:b3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:41:49 2025 by rpki-client