Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/3139302e3130392e39322e302f32322d3234203d3e20323731323836.roa
File:                     3139302e3130392e39322e302f32322d3234203d3e20323731323836.roa (raw, json)
Hash identifier:          UorHW48liadui/vZzDlZqlwQu4gzOj9TEa+SFlFYc/w=
Subject key identifier:   CD:3A:51:0E:B2:A9:83:37:45:A0:35:DA:A6:4F:2F:D3:AB:0F:EA:AF
Certificate issuer:       /CN=6689F5CF61182A36307EEB7C011D8636B6340149
Certificate serial:       79DC433AEED5D1F13CF3F5120D11A90E83FDC60A
Authority key identifier: 66:89:F5:CF:61:18:2A:36:30:7E:EB:7C:01:1D:86:36:B6:34:01:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6689F5CF61182A36307EEB7C011D8636B6340149.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/3139302e3130392e39322e302f32322d3234203d3e20323731323836.roa
Signing time:             Thu 06 Mar 2025 06:52:15 +0000
ROA not before:           Thu 06 Mar 2025 06:47:15 +0000
ROA not after:            Thu 05 Mar 2026 06:52:15 +0000
asID:                     271286
IP address blocks:        190.109.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/6689F5CF61182A36307EEB7C011D8636B6340149.crl
                          rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/6689F5CF61182A36307EEB7C011D8636B6340149.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6689F5CF61182A36307EEB7C011D8636B6340149.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 14:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:dc:43:3a:ee:d5:d1:f1:3c:f3:f5:12:0d:11:a9:0e:83:fd:c6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6689F5CF61182A36307EEB7C011D8636B6340149
        Validity
            Not Before: Mar  6 06:47:15 2025 GMT
            Not After : Mar  5 06:52:15 2026 GMT
        Subject: CN=CD3A510EB2A9833745A035DAA64F2FD3AB0FEAAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:db:24:3a:4c:60:c0:1a:91:ae:ba:b9:6d:
                    04:da:f2:4d:61:7a:3e:ac:8c:63:9c:7b:fb:1e:67:
                    36:8d:94:8e:15:e1:e0:96:d3:cd:d2:59:c6:5f:bf:
                    1d:33:07:06:c6:af:6e:ac:cc:ed:0b:bf:ad:25:2b:
                    64:f5:fd:61:5d:f5:b9:ac:74:d2:f7:07:65:ae:57:
                    e6:bc:c0:af:4f:e5:ed:a7:75:88:f8:4f:18:c0:ab:
                    d2:93:70:dc:86:73:9f:22:47:04:5f:3d:9b:1d:ea:
                    88:00:b5:e3:57:d8:d9:fd:47:be:8c:21:42:55:79:
                    2a:4c:80:ae:ae:76:3b:18:67:42:90:e0:4b:2b:07:
                    00:8c:40:f1:89:b1:9b:6e:cc:31:40:07:fa:e7:04:
                    e1:14:3b:2b:47:c8:18:b3:9f:85:9d:87:38:8a:be:
                    cc:05:5c:7a:78:1d:f4:fe:45:cd:2a:b0:c2:d7:14:
                    46:16:a5:73:65:ab:17:30:fa:1f:c9:d7:c0:bc:94:
                    7e:3e:c7:82:ba:5a:cf:02:c1:37:80:e2:df:10:aa:
                    7d:50:10:da:96:7f:6f:06:68:04:4b:51:b9:41:15:
                    bf:92:ef:d6:db:3b:b9:c1:68:6f:34:0c:ff:f5:24:
                    bb:07:33:e2:af:3d:61:2a:24:76:2c:3a:61:4c:98:
                    60:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3A:51:0E:B2:A9:83:37:45:A0:35:DA:A6:4F:2F:D3:AB:0F:EA:AF
            X509v3 Authority Key Identifier:
                keyid:66:89:F5:CF:61:18:2A:36:30:7E:EB:7C:01:1D:86:36:B6:34:01:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/6689F5CF61182A36307EEB7C011D8636B6340149.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6689F5CF61182A36307EEB7C011D8636B6340149.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/3139302e3130392e39322e302f32322d3234203d3e20323731323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:4b:4a:89:68:d3:a6:d5:8f:63:bc:5b:48:22:e0:c6:74:09:
         5e:e8:91:f1:43:19:f8:11:28:1d:b1:54:6e:0e:21:2e:20:6e:
         8b:79:bf:04:8c:d5:5f:8e:3f:49:76:a5:57:23:09:bb:c3:c6:
         bc:f2:55:c9:b5:8f:48:b4:bd:80:3d:5a:01:11:4a:01:85:81:
         db:5e:87:fe:9a:75:f7:5d:aa:f7:f3:82:6d:41:b5:ef:09:e6:
         08:28:5c:d6:f4:ba:38:21:b2:2e:96:ee:ec:d7:9c:72:9f:d4:
         c3:a2:73:ec:e2:1c:68:99:81:02:b9:0b:81:d9:98:54:35:06:
         f9:a1:9e:53:aa:5b:ed:9e:0b:cb:c4:03:ae:6d:d4:b1:32:d2:
         aa:b0:cf:0f:6a:88:67:d2:b6:84:78:e2:99:d0:5d:76:a6:a7:
         dc:18:b2:25:be:42:93:99:8e:98:ef:e6:0e:81:c5:b3:c1:ad:
         5c:08:9b:59:ea:4c:eb:83:4b:1a:9e:a4:71:22:55:a9:04:72:
         f6:b2:4c:95:d7:24:cf:0d:7d:3f:26:97:38:a5:b8:ec:f9:53:
         e4:8a:e8:08:e1:b2:ac:0b:c4:2c:10:e3:37:7c:63:19:6f:42:
         51:0e:dd:9e:d8:a7:58:ea:e9:a8:ee:fc:bf:2d:7d:b9:23:2b:
         14:f9:ab:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:25:48 2025 by rpki-client