Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3138392e35312e34302e302f32332d3332203d3e20323730373235.roa
File:                     3138392e35312e34302e302f32332d3332203d3e20323730373235.roa (raw, json)
Hash identifier:          BqLQha74KDtppF7T3QZ5OxMFjGkWPH/hI5cH+aGR4ek=
Subject key identifier:   9E:E3:C1:84:BE:F6:46:EF:6C:0D:F5:C2:A4:20:FE:66:52:9E:6B:86
Certificate issuer:       /CN=3A643A755DDC15D6F86DC11230B9F76A2774D614
Certificate serial:       47A5BCE768C6648DF4B24210D1BB3EDCFCED0551
Authority key identifier: 3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3138392e35312e34302e302f32332d3332203d3e20323730373235.roa
Signing time:             Wed 28 May 2025 13:52:09 +0000
ROA not before:           Wed 28 May 2025 13:47:09 +0000
ROA not after:            Wed 27 May 2026 13:52:09 +0000
asID:                     270725
IP address blocks:        189.51.40.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl
                          rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 10:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a5:bc:e7:68:c6:64:8d:f4:b2:42:10:d1:bb:3e:dc:fc:ed:05:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A643A755DDC15D6F86DC11230B9F76A2774D614
        Validity
            Not Before: May 28 13:47:09 2025 GMT
            Not After : May 27 13:52:09 2026 GMT
        Subject: CN=9EE3C184BEF646EF6C0DF5C2A420FE66529E6B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:43:8e:86:41:97:c0:fa:53:04:2b:96:e5:
                    8e:a8:7c:ce:20:e6:e3:0b:b8:e2:0a:21:5d:39:e8:
                    d2:d0:4e:11:ad:2a:11:e2:00:37:23:8e:f6:bc:b7:
                    2d:e0:59:00:9e:b2:cd:5d:70:50:e7:27:5d:4a:53:
                    27:98:77:83:ca:1d:ea:c3:2d:5a:f7:8a:ad:d8:4d:
                    de:62:df:ec:7b:c6:16:28:d4:38:6e:81:f2:63:60:
                    90:dd:af:89:0a:3b:33:f4:47:63:bb:80:e8:a3:e6:
                    a3:bd:0d:80:d4:cd:0c:b0:67:19:22:b4:96:a3:2d:
                    8c:10:83:95:df:1b:89:06:1d:b9:cf:1b:dd:89:92:
                    07:31:af:3f:04:24:94:07:b1:c4:48:17:91:1d:85:
                    e9:d2:d1:44:c9:96:39:c2:32:36:81:88:6b:38:2e:
                    1a:9b:5b:93:4c:69:73:d4:55:e4:36:fa:43:e1:69:
                    21:8d:33:5f:6a:53:f4:ea:dd:a5:aa:50:19:8d:a5:
                    9b:c2:55:64:09:18:3f:09:6c:c9:bf:ec:95:8e:88:
                    d7:9c:bb:50:94:cd:bd:b5:db:ec:42:6b:03:88:dc:
                    86:27:0b:70:6d:d1:9b:28:b4:06:d3:15:b9:ae:d8:
                    3e:b0:81:da:d8:3d:72:f1:73:c7:be:84:64:01:7e:
                    91:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E3:C1:84:BE:F6:46:EF:6C:0D:F5:C2:A4:20:FE:66:52:9E:6B:86
            X509v3 Authority Key Identifier:
                keyid:3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3138392e35312e34302e302f32332d3332203d3e20323730373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:8f:70:eb:46:b2:f2:eb:45:a9:7a:19:71:71:c9:6c:62:77:
         8a:9b:49:58:b5:95:ba:7d:2e:da:f5:0b:b0:74:09:ff:b1:81:
         7c:16:b5:59:1d:00:90:45:45:be:9b:e5:5a:71:21:81:a7:8e:
         3c:d4:48:c2:81:13:de:cd:e5:9f:9c:2f:c3:30:71:42:b1:ef:
         a9:2c:bb:f5:6a:f9:67:41:a1:3f:81:28:9f:54:d7:3a:59:32:
         53:dd:78:c2:eb:dc:e2:9f:62:56:50:34:86:74:88:cc:61:b5:
         75:e0:a5:48:e4:cc:55:e6:42:ca:86:a1:5b:a1:85:10:90:f8:
         3e:1b:53:35:8f:52:16:90:71:92:78:85:64:6b:2c:28:1c:8b:
         d4:12:a2:ef:d8:d2:28:72:8b:fe:bc:f5:65:d5:22:da:c0:e9:
         df:ac:dd:1d:03:f6:60:c8:22:e5:c2:44:28:c1:f0:a0:37:c3:
         f9:ab:c3:2a:c0:f5:13:38:54:da:99:6b:8f:35:57:38:fe:fe:
         05:b0:38:c1:aa:5b:66:c1:3a:e9:82:16:98:d8:0f:6d:9b:7a:
         ef:0a:ec:13:00:94:27:e1:40:c6:48:db:8c:29:76:43:e4:a6:
         69:dc:dc:d5:4f:6a:61:20:1d:80:d0:d3:43:76:fa:fc:8b:e9:
         63:24:ee:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:04:12 2025 by rpki-client