Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133342e302f32342d3234203d3e20323634353437.roa
File:                     3133382e302e3133342e302f32342d3234203d3e20323634353437.roa (raw, json)
Hash identifier:          IyVKGTVLkDxjT5idLVFJ2W1VY6j/C7oZY0Eju2IHdr4=
Subject key identifier:   F2:D9:F5:1B:1E:02:0F:AD:8E:F7:46:0B:D2:63:1C:29:05:1A:43:03
Certificate issuer:       /CN=464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC
Certificate serial:       705EA06B294A65183A4BBA2E8E5B76C4C076BD15
Authority key identifier: 46:4F:7E:BA:13:C4:3D:1F:B8:EA:CC:BC:C0:D4:2E:9A:28:BC:5E:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133342e302f32342d3234203d3e20323634353437.roa
Signing time:             Fri 03 Jan 2025 20:40:55 +0000
ROA not before:           Fri 03 Jan 2025 20:35:55 +0000
ROA not after:            Fri 02 Jan 2026 20:40:55 +0000
asID:                     264547
IP address blocks:        138.0.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.crl
                          rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 12:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5e:a0:6b:29:4a:65:18:3a:4b:ba:2e:8e:5b:76:c4:c0:76:bd:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC
        Validity
            Not Before: Jan  3 20:35:55 2025 GMT
            Not After : Jan  2 20:40:55 2026 GMT
        Subject: CN=F2D9F51B1E020FAD8EF7460BD2631C29051A4303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:85:a0:23:b7:f6:d8:95:7f:6f:44:56:54:be:
                    8c:81:22:bc:ca:8d:d0:77:01:cf:70:0c:68:9a:44:
                    17:bc:29:fd:c8:6e:27:c2:e4:66:08:30:06:da:7a:
                    98:4f:63:cc:ae:01:af:75:15:90:bf:ab:68:5d:b8:
                    19:46:f2:77:60:d3:78:b2:14:6e:25:2e:83:f0:09:
                    af:a2:c5:d4:e0:c0:6d:eb:33:91:6f:a3:f4:1b:40:
                    a3:44:dd:e7:2a:bd:f7:64:c0:d0:d9:1c:fc:35:2d:
                    b5:c4:51:6b:e9:f3:fe:c9:19:ac:84:b9:8e:a3:2c:
                    70:78:07:20:2a:db:74:c1:10:92:a9:41:1b:66:4d:
                    5a:4a:02:0a:5e:65:f1:67:8f:b4:9a:a4:ef:2c:7b:
                    dc:61:a4:51:ec:ae:28:df:c3:40:13:4b:88:a2:c4:
                    d9:c9:de:dc:d6:5f:ef:3e:70:5e:4a:af:d2:de:07:
                    84:81:ce:9d:be:17:fa:34:0d:e2:e3:4d:49:c3:28:
                    74:41:8e:16:fe:50:fa:f2:d9:55:eb:53:5d:ec:89:
                    bf:ca:35:cb:a5:4e:56:b3:a2:47:4d:ba:b1:7b:ef:
                    3c:f0:55:68:0c:34:a4:01:25:0e:6c:19:fd:20:74:
                    5c:c4:bd:0b:89:ec:54:8a:78:f8:b2:c5:23:5e:79:
                    be:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D9:F5:1B:1E:02:0F:AD:8E:F7:46:0B:D2:63:1C:29:05:1A:43:03
            X509v3 Authority Key Identifier:
                keyid:46:4F:7E:BA:13:C4:3D:1F:B8:EA:CC:BC:C0:D4:2E:9A:28:BC:5E:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133342e302f32342d3234203d3e20323634353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:0d:23:a6:a5:7b:8d:ec:05:9b:83:e1:48:94:f6:fc:cd:69:
         aa:a1:4a:fb:0b:61:25:65:8a:25:79:e6:ce:fa:b0:49:e9:ba:
         0c:9b:fa:05:fa:e5:e3:72:35:c5:ba:f4:dd:c5:39:6a:5f:48:
         22:3d:81:be:53:71:69:b4:00:89:08:25:89:bb:53:30:9d:00:
         05:bf:91:20:42:f2:a8:4b:dc:a6:c2:a9:70:41:51:df:05:20:
         78:31:46:73:5f:48:cb:0e:80:58:46:2f:da:58:0f:39:8a:58:
         92:5c:2a:6b:90:61:97:77:01:2a:c3:f3:7b:5f:a9:1b:46:c2:
         e3:66:63:e7:91:ca:e7:4f:5d:8c:dc:ea:ea:55:0d:92:9c:c0:
         8b:07:50:92:df:86:4c:b8:bf:20:54:32:7b:20:fd:44:b6:19:
         34:d3:4e:be:e2:c5:d7:35:d4:e6:94:0e:d9:03:78:11:d3:24:
         e7:95:25:9e:1c:fc:a0:90:df:ec:a5:4c:b4:3b:40:ce:db:0f:
         0d:92:21:58:25:2a:f7:27:aa:58:5d:44:97:9e:4f:b8:3b:c7:
         a0:50:b6:f2:66:3a:1e:24:d8:3a:b0:aa:dd:11:06:fa:47:ee:
         d4:28:d4:b2:fe:40:bd:fa:8c:ed:3d:57:a2:50:78:85:0b:f3:
         5e:ba:e5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:08:25 2025 by rpki-client