Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3138362e3235312e31302e302f32342d3234203d3e20323632393838.roa
File:                     3138362e3235312e31302e302f32342d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          Qq/LoL01vrQU8gQBgnLK0jJUJ9VTfeAXuTUINwZFtUw=
Subject key identifier:   77:30:BE:B7:7E:47:A3:7B:57:2D:00:A7:91:D0:93:C8:09:CB:00:B5
Certificate issuer:       /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial:       72346AE96E5CC7F519B13CB966451E6AFD2789AE
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3138362e3235312e31302e302f32342d3234203d3e20323632393838.roa
Signing time:             Mon 13 Jan 2025 14:17:25 +0000
ROA not before:           Mon 13 Jan 2025 14:12:25 +0000
ROA not after:            Mon 12 Jan 2026 14:17:25 +0000
asID:                     262988
IP address blocks:        186.251.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl
                          rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:34:6a:e9:6e:5c:c7:f5:19:b1:3c:b9:66:45:1e:6a:fd:27:89:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
        Validity
            Not Before: Jan 13 14:12:25 2025 GMT
            Not After : Jan 12 14:17:25 2026 GMT
        Subject: CN=7730BEB77E47A37B572D00A791D093C809CB00B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5c:5f:a7:97:3a:86:1d:69:36:4c:3f:7c:0c:
                    80:4d:e0:60:d0:cd:8d:ed:62:09:30:99:d4:95:21:
                    dd:6c:79:4d:65:29:dc:90:93:d6:bb:55:bf:f9:5f:
                    62:a3:7d:6e:16:62:e0:e7:98:6a:0e:db:dd:9f:e5:
                    3b:59:ce:d2:02:2f:0e:8e:86:c6:7a:c8:57:6c:c1:
                    2f:dc:8f:bc:03:64:a2:e1:4b:86:90:23:c7:f8:f6:
                    5d:7d:f9:8a:8c:33:a3:12:af:b6:24:73:22:01:71:
                    dd:aa:12:ea:f6:c4:d6:82:05:24:8f:aa:bd:2f:69:
                    b5:82:57:09:f9:c4:75:c9:05:6f:9a:40:3b:4f:02:
                    b5:ea:d0:5c:14:68:80:0f:ce:37:f4:3a:ea:18:f7:
                    fe:14:c6:2b:c5:90:07:07:05:45:c9:75:7f:a7:0b:
                    62:f4:3f:62:84:18:c0:40:67:64:86:bd:44:d3:c4:
                    70:a3:54:e0:4d:c0:15:bd:04:b4:be:00:ef:fd:f0:
                    e2:a2:58:a3:9c:6b:80:d5:d5:13:c3:83:77:9e:8c:
                    22:b8:3b:cc:1a:96:35:db:15:d8:13:26:8a:9b:ff:
                    20:69:c3:0b:b2:69:61:82:7c:47:ac:3e:cb:63:3d:
                    f8:b5:bb:3a:c0:76:2f:e5:ab:8e:55:c1:b4:a9:da:
                    ee:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:30:BE:B7:7E:47:A3:7B:57:2D:00:A7:91:D0:93:C8:09:CB:00:B5
            X509v3 Authority Key Identifier:
                keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3138362e3235312e31302e302f32342d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:23:00:e4:d8:61:04:21:ba:c9:94:4e:20:e5:b3:10:1d:3f:
         29:45:52:75:bf:b6:8f:0f:dd:de:cd:f3:a5:46:68:77:69:f4:
         b7:c8:89:50:4b:60:e1:b5:5f:41:7d:43:ee:1d:2a:c6:9d:47:
         4c:94:35:2d:c7:ec:33:5f:42:09:b4:ed:b6:21:9c:3c:6c:26:
         59:18:c2:49:5b:c0:aa:2b:7b:69:9e:7b:c7:9a:69:cd:34:71:
         1c:be:f4:62:84:09:34:b4:2b:3b:ac:e4:94:55:84:22:f6:d4:
         39:2c:83:b9:74:36:7c:6a:26:74:c4:8b:09:84:fe:a4:4b:ea:
         6d:98:d7:d1:ae:aa:fe:e2:67:e9:5d:23:dc:3f:a2:00:15:ac:
         df:90:b4:4f:de:02:3b:c9:bf:3b:0f:6f:a3:4a:6b:5f:fd:55:
         0b:7b:6f:5f:54:c0:f0:0a:28:83:3b:10:23:9a:fa:32:e5:77:
         2b:8b:0d:7e:9b:0b:48:9a:64:51:71:33:24:98:8b:3a:33:5d:
         eb:75:5d:fa:fb:ff:bb:c7:f1:b5:29:d2:7c:2c:dd:3b:59:4d:
         23:69:e2:ba:fa:31:a6:ac:ad:98:92:30:6f:61:35:46:76:df:
         7b:a9:50:2e:37:17:8d:1a:63:2b:d5:af:4e:35:e6:3e:8f:1a:
         4b:65:b4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:12 2025 by rpki-client