Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136302e302f32332d3233203d3e20323637343236.roa
File:                     3138312e3139312e3136302e302f32332d3233203d3e20323637343236.roa (raw, json)
Hash identifier:          6jGnGlxhFhQOd9r2ZQEMlwHi5yaZAYrCy3xC0swcAEk=
Subject key identifier:   6D:06:01:61:14:2B:D9:83:89:1E:40:96:EC:85:C1:AC:55:9F:3D:5F
Certificate issuer:       /CN=474B51CEB662EF010C6B1DDD845BC89A81122C37
Certificate serial:       26E6083F98517FEACDEC75823A53190BFD845BB7
Authority key identifier: 47:4B:51:CE:B6:62:EF:01:0C:6B:1D:DD:84:5B:C8:9A:81:12:2C:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474B51CEB662EF010C6B1DDD845BC89A81122C37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136302e302f32332d3233203d3e20323637343236.roa
Signing time:             Wed 09 Apr 2025 19:14:51 +0000
ROA not before:           Wed 09 Apr 2025 19:09:51 +0000
ROA not after:            Wed 08 Apr 2026 19:14:51 +0000
asID:                     267426
IP address blocks:        181.191.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.crl
                          rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474B51CEB662EF010C6B1DDD845BC89A81122C37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 18:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e6:08:3f:98:51:7f:ea:cd:ec:75:82:3a:53:19:0b:fd:84:5b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474B51CEB662EF010C6B1DDD845BC89A81122C37
        Validity
            Not Before: Apr  9 19:09:51 2025 GMT
            Not After : Apr  8 19:14:51 2026 GMT
        Subject: CN=6D060161142BD983891E4096EC85C1AC559F3D5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e9:c7:b4:c3:fe:15:f4:8a:73:c7:ef:89:02:
                    25:06:50:c8:ce:b9:58:f1:55:f2:89:e4:89:36:a1:
                    48:20:34:93:45:ad:a9:c5:7f:ec:e8:fc:c5:9b:b1:
                    ad:32:93:77:73:b7:08:50:50:ed:48:84:d4:c4:09:
                    8f:79:4e:51:8f:a7:23:64:56:b6:c7:6d:94:32:c4:
                    33:6c:e4:96:c7:2d:e6:2c:a2:14:d0:92:3a:2c:31:
                    b3:64:da:b7:0f:4f:d2:06:ed:e0:41:7a:cd:6b:3e:
                    ae:be:6e:83:d3:e8:5d:25:6e:e6:6b:3b:52:d6:fc:
                    df:3d:6b:4c:c2:4e:38:10:2d:8f:ec:8e:a4:5b:7d:
                    da:ad:dd:bc:56:9a:03:9a:10:21:a7:70:e9:96:6f:
                    03:4a:1f:50:f2:bf:f1:1e:43:f5:3c:52:93:6d:6b:
                    7f:15:f0:32:50:aa:19:84:2c:8f:c8:dc:fa:14:20:
                    e1:71:80:03:a5:1a:0b:7f:b6:ab:91:83:9c:fc:66:
                    52:36:a4:8c:92:1f:0b:97:03:9c:ab:f7:fa:c7:39:
                    5e:73:20:ab:d2:37:67:bc:ea:a2:d5:bc:0e:37:89:
                    71:a2:73:e1:a3:09:79:34:86:1c:60:48:be:14:5b:
                    9e:1c:1e:2b:e0:0b:23:79:38:a8:57:9a:69:94:a1:
                    3e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:06:01:61:14:2B:D9:83:89:1E:40:96:EC:85:C1:AC:55:9F:3D:5F
            X509v3 Authority Key Identifier:
                keyid:47:4B:51:CE:B6:62:EF:01:0C:6B:1D:DD:84:5B:C8:9A:81:12:2C:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474B51CEB662EF010C6B1DDD845BC89A81122C37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136302e302f32332d3233203d3e20323637343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:96:38:07:5c:32:32:77:89:52:24:92:d8:e6:4e:61:21:dc:
         0e:b2:b6:d8:cf:4c:ed:d5:e7:24:6b:63:06:ed:fc:d2:32:9c:
         56:23:54:5b:b9:55:b7:b6:3f:72:0d:8d:50:6f:c7:e8:7c:07:
         20:05:1f:26:d7:bf:b0:c7:59:5b:43:d8:3d:2a:54:c5:4a:bb:
         8d:5d:26:62:04:d9:6b:90:49:af:f6:98:56:bd:99:52:e6:2b:
         f9:7b:42:52:89:99:1c:b1:b2:72:c5:f4:02:97:d6:ae:4a:b5:
         a6:42:2a:a5:37:28:2d:0a:09:3d:2b:a1:3b:5b:5e:7d:5f:2d:
         3b:a5:87:29:78:fa:b2:a6:30:d7:ed:64:a0:51:d5:f3:d6:9c:
         fd:b7:c9:75:32:38:de:72:18:75:18:d0:45:0f:3c:43:7c:b3:
         b7:e0:9c:6a:6f:c8:a7:01:53:05:89:96:98:0b:a4:ca:d2:d3:
         1c:61:38:51:0e:0e:72:4e:ca:68:83:bc:41:90:fe:1c:a6:8c:
         14:95:56:1f:6b:ba:3e:61:20:4e:5f:ae:20:38:ec:ed:8b:8a:
         8d:c2:4c:28:c8:05:18:7d:ab:7f:26:54:06:7f:69:43:ba:53:
         9b:e6:26:e2:73:cc:6b:e5:76:f0:ec:86:e8:57:6c:ba:ad:45:
         ba:e0:aa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:26:28 2025 by rpki-client