Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3133382e3230342e3230382e302f32322d3234203d3e203238323934.roa
File:                     3133382e3230342e3230382e302f32322d3234203d3e203238323934.roa (raw, json)
Hash identifier:          MdVENR46ToLsWATeA/bNkgIHg5l7O87J7WFVVHWtR4A=
Subject key identifier:   FF:C6:31:C1:FA:F8:F7:03:C0:F7:AB:2A:47:95:FE:8A:64:21:25:4F
Certificate issuer:       /CN=77F99B6CA31CA48560A700A53D4385030C475345
Certificate serial:       354164F24B988853F6E84749D08B0FE19A18E4CA
Authority key identifier: 77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3133382e3230342e3230382e302f32322d3234203d3e203238323934.roa
Signing time:             Thu 11 Jul 2024 11:57:15 +0000
ROA not before:           Thu 11 Jul 2024 11:52:15 +0000
ROA not after:            Thu 10 Jul 2025 11:57:15 +0000
asID:                     28294
IP address blocks:        138.204.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl
                          rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:41:64:f2:4b:98:88:53:f6:e8:47:49:d0:8b:0f:e1:9a:18:e4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F99B6CA31CA48560A700A53D4385030C475345
        Validity
            Not Before: Jul 11 11:52:15 2024 GMT
            Not After : Jul 10 11:57:15 2025 GMT
        Subject: CN=FFC631C1FAF8F703C0F7AB2A4795FE8A6421254F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a8:4d:1f:7e:b1:e4:3b:84:61:b6:6e:78:13:
                    54:47:a6:09:6e:21:6f:34:0b:74:ab:d7:06:40:5f:
                    e7:62:ef:2d:75:c6:d7:06:1a:dc:e8:0c:9c:f4:a4:
                    68:18:b6:08:87:41:ad:4c:ae:d8:bb:e1:45:fa:96:
                    9e:e1:ea:e7:d4:dc:d7:39:81:c2:33:18:31:ae:19:
                    ab:90:ac:aa:28:05:47:e9:3e:55:d6:29:27:98:d3:
                    77:62:3a:b6:41:9b:a1:46:bd:6e:94:62:84:a1:c0:
                    75:a0:cd:a1:69:3e:97:e8:83:96:47:42:0b:9e:23:
                    71:d6:9c:20:0a:a3:d9:57:3a:7b:c8:a2:16:be:d4:
                    ac:d6:fd:71:41:75:6f:81:c6:17:1a:d2:8d:bc:e3:
                    ca:b3:df:f9:37:98:ce:39:78:6f:b2:a5:7a:83:55:
                    78:ce:05:41:24:68:79:a4:4d:65:d3:70:fd:e8:4f:
                    85:84:8d:a4:b0:f6:fc:b2:6d:03:1d:a7:08:7f:f6:
                    fc:5a:55:92:88:c6:75:32:dc:ce:18:da:2c:20:31:
                    d9:21:46:f7:cc:b1:9e:62:74:fb:9e:40:c5:fb:85:
                    16:54:75:eb:81:92:32:ac:7c:f1:0c:e9:7a:89:41:
                    af:de:a3:57:59:d2:13:58:8c:0d:76:cd:03:f6:ec:
                    12:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C6:31:C1:FA:F8:F7:03:C0:F7:AB:2A:47:95:FE:8A:64:21:25:4F
            X509v3 Authority Key Identifier:
                keyid:77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3133382e3230342e3230382e302f32322d3234203d3e203238323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:91:be:55:ae:ad:a4:d8:e0:4f:bd:a3:45:ee:aa:ec:40:81:
         82:9d:36:2d:e8:89:df:8d:a4:1b:61:fe:af:63:a1:4c:e6:11:
         34:9c:65:dc:0c:55:9d:4b:d9:67:e9:98:67:8c:5b:0b:76:b2:
         62:ee:55:35:3c:68:65:79:2a:97:8b:fa:79:8c:d4:39:ea:0d:
         2d:46:16:d7:8c:6b:df:d1:3f:99:e6:6f:44:2d:8b:ac:e0:1f:
         64:4a:47:3d:9f:8c:2d:69:2f:e8:10:d3:44:c3:08:d9:ab:dc:
         6d:b1:b7:75:3f:b3:02:05:23:be:d1:89:92:df:7d:d6:c2:87:
         26:95:8b:cc:92:a5:1d:dd:c7:38:ae:15:d8:a1:25:e3:94:4c:
         da:da:55:d7:79:b6:ce:88:72:46:d1:14:07:bc:1a:f3:6a:34:
         49:62:72:cf:f9:67:a0:ff:48:f3:5b:c9:6f:e8:0b:2a:f9:ee:
         a7:24:95:09:aa:9f:71:4e:74:4d:7f:a0:e7:c0:f5:36:3d:d8:
         80:d3:d5:2a:8a:83:74:e4:e8:18:b9:ec:95:e2:8d:0c:9b:72:
         dd:6e:12:d5:89:e6:47:ce:81:66:d2:07:f4:24:8e:c6:ba:c3:
         da:ae:5d:a6:f3:8f:a4:7b:71:92:63:3a:0a:46:41:58:31:79:
         c5:a1:46:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:35:56 2025 by rpki-client