Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/3133382e3138362e3130382e302f32322d3234203d3e20323632333534.roa
File:                     3133382e3138362e3130382e302f32322d3234203d3e20323632333534.roa (raw, json)
Hash identifier:          6NwpFJ7gDANE46Jx5vikCbRoBEVySFH3yZyCVhsLd0o=
Subject key identifier:   2F:F8:D7:FA:34:77:23:4E:A0:B1:E3:C5:4A:92:50:16:0A:00:76:6B
Certificate issuer:       /CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
Certificate serial:       36254DB379077B40BFD80EF138B838233520C21A
Authority key identifier: 21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/3133382e3138362e3130382e302f32322d3234203d3e20323632333534.roa
Signing time:             Thu 06 Mar 2025 08:42:15 +0000
ROA not before:           Thu 06 Mar 2025 08:37:15 +0000
ROA not after:            Thu 05 Mar 2026 08:42:15 +0000
asID:                     262354
IP address blocks:        138.186.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl
                          rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:25:4d:b3:79:07:7b:40:bf:d8:0e:f1:38:b8:38:23:35:20:c2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
        Validity
            Not Before: Mar  6 08:37:15 2025 GMT
            Not After : Mar  5 08:42:15 2026 GMT
        Subject: CN=2FF8D7FA3477234EA0B1E3C54A9250160A00766B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3f:a5:85:9b:c5:06:42:d9:e2:41:46:c3:fe:
                    87:a3:1e:01:ae:70:5a:a6:a5:c8:de:03:78:c8:c5:
                    f9:fd:43:28:35:eb:52:a7:f7:68:12:20:80:c6:50:
                    34:00:f2:fe:25:39:0d:4f:85:22:31:fe:3c:74:c5:
                    e4:07:86:de:f6:96:b3:d5:d4:39:8f:82:51:2e:3d:
                    96:6a:f7:46:2f:fc:c6:7c:8d:ca:24:75:eb:94:1b:
                    55:5b:ae:69:60:ae:79:ec:ea:26:d1:8e:08:d3:ec:
                    7a:1a:15:76:5c:dc:fa:26:e8:3c:0d:3a:89:e2:c9:
                    06:02:e4:72:c9:de:c7:ba:f5:9b:5d:e1:b2:a3:4a:
                    b0:b2:fd:35:9e:bc:3f:9b:66:de:f1:4a:de:01:48:
                    c5:33:6b:93:43:a6:9b:7b:ca:3c:eb:20:eb:8a:74:
                    c5:65:74:ba:7a:4e:b2:43:48:4f:d5:e8:a9:08:56:
                    b6:53:70:d3:f1:ff:ae:21:88:3b:67:6d:ac:58:e2:
                    e6:59:9f:ce:c6:4c:3f:d5:32:65:a4:8b:19:6d:14:
                    e7:92:42:58:5f:92:06:ac:47:6f:aa:c5:4e:6b:72:
                    e8:4a:91:68:21:34:cb:ed:0e:a0:e8:75:d4:55:42:
                    0b:53:e2:3a:98:48:42:85:a7:27:ec:19:4e:06:55:
                    f4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F8:D7:FA:34:77:23:4E:A0:B1:E3:C5:4A:92:50:16:0A:00:76:6B
            X509v3 Authority Key Identifier:
                keyid:21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/3133382e3138362e3130382e302f32322d3234203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:8c:c3:dd:f3:e6:c5:3e:18:06:47:1c:0a:68:39:ca:18:67:
         dd:a2:ff:d2:f1:3c:ae:45:4f:c5:20:1f:db:65:43:c2:b4:c3:
         7f:66:26:e7:a3:07:e3:f9:60:8d:71:50:0f:22:14:85:1e:b5:
         2f:d3:ec:7f:5e:6f:0e:cc:ed:ca:fe:db:cc:02:94:5b:f2:26:
         6d:b7:ee:9b:c5:85:bd:e2:d0:3f:a8:1e:82:32:c1:9d:a7:9a:
         d5:74:8b:3b:cd:b7:9e:22:05:d2:fe:70:80:a6:57:dc:18:64:
         a6:9f:25:31:b5:ef:e4:6a:ee:c2:ea:ed:b8:a0:3d:53:02:56:
         b2:f2:51:72:43:89:9e:b4:7a:aa:f2:aa:2e:18:6e:c3:94:93:
         86:71:58:ad:7a:09:f7:5a:88:2f:8a:bd:7c:2f:58:e6:76:d6:
         2f:b7:15:80:66:ff:89:8d:97:b1:b5:ea:e8:ca:a6:e9:76:5b:
         52:18:51:7a:b2:23:f2:26:e3:93:10:ed:26:b1:89:de:01:fc:
         a8:3d:fa:ce:0e:9b:34:e5:41:64:c6:9a:4d:cc:e4:f9:e9:0e:
         cf:e0:ec:73:c5:fb:0e:3b:52:b0:d1:61:8a:b3:71:32:b5:82:
         c0:e2:5a:09:dd:7d:5c:43:93:55:66:a4:b5:98:64:07:bd:f2:
         7c:29:b7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:16 2025 by rpki-client