Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/3133382e39392e3136372e302f32342d3234203d3e20323634323131.roa
File:                     3133382e39392e3136372e302f32342d3234203d3e20323634323131.roa (raw, json)
Hash identifier:          xwyfDyY2mTMay4FVrwj88J698mEK144HIqKr3wKQFYs=
Subject key identifier:   5E:89:40:26:92:75:58:0A:8D:BD:B6:1D:EB:C6:8C:7F:A6:F9:53:72
Certificate issuer:       /CN=916B2689E54D248C6020BC30FDA122F25B14FE87
Certificate serial:       446E3F26BB8603CB95DFEDC61DA1FC3EDF488CED
Authority key identifier: 91:6B:26:89:E5:4D:24:8C:60:20:BC:30:FD:A1:22:F2:5B:14:FE:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/3133382e39392e3136372e302f32342d3234203d3e20323634323131.roa
Signing time:             Sun 08 Sep 2024 17:07:25 +0000
ROA not before:           Sun 08 Sep 2024 17:02:25 +0000
ROA not after:            Sun 07 Sep 2025 17:07:25 +0000
asID:                     264211
IP address blocks:        138.99.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.crl
                          rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 18:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6e:3f:26:bb:86:03:cb:95:df:ed:c6:1d:a1:fc:3e:df:48:8c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916B2689E54D248C6020BC30FDA122F25B14FE87
        Validity
            Not Before: Sep  8 17:02:25 2024 GMT
            Not After : Sep  7 17:07:25 2025 GMT
        Subject: CN=5E8940269275580A8DBDB61DEBC68C7FA6F95372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:14:18:28:5a:8b:3b:c6:1a:95:cf:87:31:c9:
                    3c:81:9b:d6:d7:80:80:cb:99:ba:bf:ca:32:bd:1c:
                    8e:55:ab:70:29:a4:58:32:55:e3:09:37:cb:a7:3b:
                    d9:ec:71:c0:d9:04:69:a4:8b:bb:5a:15:44:da:ce:
                    2a:06:75:55:02:00:5e:cd:ab:40:32:e7:7c:94:15:
                    47:68:cb:7b:67:2a:eb:0a:78:f6:22:36:d9:87:58:
                    5d:c7:c5:40:bf:d5:9e:82:47:86:3c:8c:01:92:92:
                    5f:91:18:42:8a:70:a5:0e:b1:81:9d:fa:73:ff:69:
                    80:39:ab:8d:87:db:70:e2:ff:9d:91:8d:fa:11:1d:
                    96:8d:44:d9:d4:b3:9b:72:3a:f3:e1:2c:9b:fb:ab:
                    c5:88:a6:95:90:1c:3b:20:eb:b8:d8:59:33:b3:4d:
                    db:c3:fa:c6:a2:4f:a4:0b:4b:7e:95:bc:ee:ec:17:
                    51:f7:51:56:2b:a2:8b:f7:40:a3:48:30:ff:ad:d0:
                    6c:15:0b:85:50:32:cf:e4:e3:d0:35:03:20:de:14:
                    67:b1:fc:9d:55:0f:90:77:c5:33:c5:ed:ff:7b:d9:
                    06:fa:ee:9b:d6:7c:0d:66:62:79:4e:ef:6a:52:50:
                    86:47:61:c6:26:7f:58:c2:6e:ca:76:46:61:38:a5:
                    cd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:89:40:26:92:75:58:0A:8D:BD:B6:1D:EB:C6:8C:7F:A6:F9:53:72
            X509v3 Authority Key Identifier:
                keyid:91:6B:26:89:E5:4D:24:8C:60:20:BC:30:FD:A1:22:F2:5B:14:FE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/3133382e39392e3136372e302f32342d3234203d3e20323634323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:a7:ff:cb:5c:62:5b:93:fb:49:79:fd:d0:c0:f2:1f:fd:bf:
         06:fb:23:9c:eb:0d:cf:23:14:22:1e:52:2b:6c:84:75:f6:dd:
         63:d8:a3:1e:d2:19:cc:a3:cb:ff:6f:d9:d8:fa:96:ac:ec:ea:
         2b:db:2d:3a:8c:a4:d7:2b:42:9e:00:76:45:a2:dd:cb:50:a6:
         e0:20:0e:99:8e:3a:0e:c1:f2:47:07:4e:97:2e:e3:42:61:01:
         e7:ad:53:4f:f5:34:dd:d8:1a:68:fd:b1:f2:a1:ed:5e:a0:74:
         14:c7:b3:72:cc:87:89:00:f4:fc:98:dd:79:bd:d4:e0:d5:c9:
         d9:09:d9:b3:8b:64:50:02:23:d8:7b:f9:fc:f1:c2:bc:0a:e3:
         8b:c8:21:e2:29:9b:95:3a:7d:c7:ab:45:0d:38:4a:4e:0f:a8:
         3b:37:8b:10:e7:c4:88:e4:f8:a1:eb:72:66:60:99:00:e4:24:
         aa:66:55:57:59:25:c0:05:23:bc:a6:8d:3e:71:31:72:a2:ea:
         0e:3d:3b:87:63:4a:b9:b6:19:26:92:a5:a1:8a:ac:d3:6f:6d:
         f9:25:01:96:1e:0c:f8:49:86:79:8a:15:30:5e:3b:ed:b2:1d:
         de:65:2a:06:08:a5:cd:58:24:6f:99:87:43:be:ac:32:fc:d1:
         47:75:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:23 2025 by rpki-client