Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa
File:                     3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (raw, json)
Hash identifier:          wSJhi1S05V7GQRNGEWnijrWNvzw3gRpbBV6Jq+msVUQ=
Subject key identifier:   F6:05:8D:5B:A1:A6:77:9A:4E:AB:E5:1D:67:1F:21:F0:E4:E1:9C:1A
Certificate issuer:       /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE
Certificate serial:       5A339BB88CC2764B94C54896712F463895145C5B
Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa
Signing time:             Fri 07 Mar 2025 04:40:34 +0000
ROA not before:           Fri 07 Mar 2025 04:35:34 +0000
ROA not after:            Fri 06 Mar 2026 04:40:34 +0000
asID:                     263919
IP address blocks:        138.185.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl
                          rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 05:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:33:9b:b8:8c:c2:76:4b:94:c5:48:96:71:2f:46:38:95:14:5c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE
        Validity
            Not Before: Mar  7 04:35:34 2025 GMT
            Not After : Mar  6 04:40:34 2026 GMT
        Subject: CN=F6058D5BA1A6779A4EABE51D671F21F0E4E19C1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:82:39:ee:9f:10:34:8f:ed:04:f6:f3:09:
                    f7:4e:fd:ac:4e:89:e4:65:5b:c7:6e:91:b8:74:44:
                    3c:e6:42:06:f6:f7:1a:e1:7f:9b:7a:03:d3:1f:fc:
                    4d:c3:49:73:c1:fc:be:8f:4c:60:41:e3:b6:80:50:
                    2b:2b:48:c9:55:46:54:93:94:d7:56:4d:b9:32:02:
                    0f:a3:9e:65:a1:84:f8:13:f2:00:29:6e:f6:7f:2e:
                    be:9e:0a:dc:4d:3c:da:3c:6d:32:45:fe:a1:28:1d:
                    be:64:7e:e4:3f:e1:37:eb:92:ac:da:90:b6:00:0f:
                    b0:d9:82:cb:a5:98:3c:12:f5:97:11:b3:38:15:80:
                    58:68:7f:33:f3:41:77:fa:07:82:6a:29:bb:d0:87:
                    09:5c:1a:94:0a:c2:3e:dc:87:d1:ad:66:85:a3:1b:
                    5d:94:80:95:41:3a:d5:0a:eb:93:3c:90:53:cf:30:
                    86:b2:6c:53:57:33:8e:0c:e0:d5:06:76:bf:12:b6:
                    7e:34:39:24:d7:eb:86:1b:cc:3c:66:2e:9f:a6:c5:
                    32:d6:86:c0:9c:55:6b:40:76:b4:fb:6d:d1:40:87:
                    d0:2f:8d:31:b1:32:7b:8e:2f:1e:62:9a:cd:a7:40:
                    a8:77:bc:a6:8e:19:e7:a9:01:1e:a4:bb:18:9a:26:
                    94:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:05:8D:5B:A1:A6:77:9A:4E:AB:E5:1D:67:1F:21:F0:E4:E1:9C:1A
            X509v3 Authority Key Identifier:
                keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:95:9a:a0:43:8d:93:04:67:90:c4:93:43:b2:b5:3f:7e:90:
         d5:90:b9:15:36:fd:59:ea:2e:0e:22:7d:72:58:fa:04:68:3d:
         8c:dc:9d:44:bc:34:29:0b:63:de:db:45:66:49:95:f1:d7:3c:
         05:2c:d8:0f:f1:e1:3a:38:11:76:7e:1f:13:c6:90:64:40:b8:
         fb:61:e7:e3:d3:65:94:46:e5:a7:9d:c0:e6:c9:37:13:2c:a0:
         b4:38:83:49:a6:a1:d1:0e:97:74:1d:76:5a:1a:1b:27:9c:0f:
         87:9b:8c:17:6b:3f:f0:55:47:24:ae:a6:a1:89:43:f3:49:c7:
         81:89:31:37:9d:2b:e3:52:69:86:4b:bd:34:59:5c:4f:11:a5:
         b8:33:7a:e0:22:52:b1:7c:90:9f:3f:e1:ba:75:25:a0:10:0a:
         5e:95:47:55:76:0a:40:e0:14:3e:eb:56:93:b4:1c:c4:dc:d1:
         07:7b:90:2e:80:93:67:91:a2:46:87:9d:4a:86:76:07:18:d1:
         7c:c0:8f:2b:94:f9:9b:ae:d8:1b:b7:54:a4:0d:a4:c4:5d:0a:
         45:9a:bc:62:17:c9:8b:64:de:ad:0e:29:c4:df:aa:8a:64:e5:
         87:9f:7e:42:5c:68:1c:05:f9:f0:c9:77:c8:c3:ff:8f:6a:b5:
         71:fd:a5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:54:25 2025 by rpki-client