Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/1/3133382e39372e36382e302f32322d3234203d3e20323634313437.roa
File:                     3133382e39372e36382e302f32322d3234203d3e20323634313437.roa (raw, json)
Hash identifier:          UJVzIe92SGVkEx8k2Jb+hwT8UDyJmVs03AzFGda+4P0=
Subject key identifier:   05:5F:3E:0A:9A:21:57:CD:7E:FB:18:74:48:4A:7A:FE:64:D0:B1:A2
Certificate issuer:       /CN=58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08
Certificate serial:       5E8E9F440ED7416273641BD4BB1052B3A77D88AC
Authority key identifier: 58:DB:73:64:C6:7F:7B:C3:1B:4F:78:54:DC:F1:B0:55:0C:5C:FC:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/1/3133382e39372e36382e302f32322d3234203d3e20323634313437.roa
Signing time:             Thu 13 Mar 2025 12:15:25 +0000
ROA not before:           Thu 13 Mar 2025 12:10:25 +0000
ROA not after:            Thu 12 Mar 2026 12:15:25 +0000
asID:                     264147
IP address blocks:        138.97.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/1/58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08.crl
                          rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/1/58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8e:9f:44:0e:d7:41:62:73:64:1b:d4:bb:10:52:b3:a7:7d:88:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08
        Validity
            Not Before: Mar 13 12:10:25 2025 GMT
            Not After : Mar 12 12:15:25 2026 GMT
        Subject: CN=055F3E0A9A2157CD7EFB1874484A7AFE64D0B1A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:01:fb:6a:7e:2e:57:ef:44:a0:49:64:18:
                    94:5a:58:8c:10:ed:5c:36:39:a2:26:52:24:db:f0:
                    2d:98:94:56:d4:56:6f:f6:77:34:3b:b6:c7:5c:8d:
                    7b:29:ed:af:70:fe:94:e9:e2:58:b9:dd:41:db:15:
                    7f:b4:8b:2c:be:ed:21:d5:98:70:2a:bb:8c:b1:7e:
                    37:da:12:91:43:2e:b4:af:c6:68:64:1c:bb:1e:a1:
                    26:60:4a:cf:39:db:9a:91:f5:bb:9f:b0:5c:f0:78:
                    44:8f:d2:14:5d:73:51:e3:dd:a5:4f:0f:79:4e:b5:
                    35:e2:39:57:aa:3e:f0:95:fa:a7:7a:16:71:90:70:
                    33:19:9c:7c:7a:89:9e:3a:66:2c:9d:62:18:5e:07:
                    22:f2:11:cd:fc:90:16:18:ef:d5:77:83:bd:b5:7f:
                    3a:2b:f5:e5:78:fc:ce:eb:41:1b:4f:9e:4d:27:5f:
                    8d:3d:0b:80:a9:f7:ad:a8:97:6f:30:46:5f:0a:bb:
                    e7:d7:02:cf:d3:2d:c7:6a:ce:22:2d:97:74:21:75:
                    42:30:fb:a9:24:d5:92:95:c2:9c:61:ed:06:a9:47:
                    d6:6b:c0:15:b8:61:98:c9:39:46:67:3c:c2:fd:1d:
                    d7:00:33:b9:4e:4a:c6:e2:c7:da:32:4b:29:f1:50:
                    2c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5F:3E:0A:9A:21:57:CD:7E:FB:18:74:48:4A:7A:FE:64:D0:B1:A2
            X509v3 Authority Key Identifier:
                keyid:58:DB:73:64:C6:7F:7B:C3:1B:4F:78:54:DC:F1:B0:55:0C:5C:FC:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/1/58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/1/3133382e39372e36382e302f32322d3234203d3e20323634313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:75:95:e7:ea:42:17:b5:14:94:09:7c:88:80:64:32:ae:cd:
         2f:1f:da:1e:53:6d:9b:00:07:28:d0:a1:f0:e2:c7:48:30:95:
         63:f2:c4:1d:17:7c:3c:50:c6:be:99:5f:7e:3e:50:9c:58:9f:
         dd:b8:eb:6b:e8:9f:90:fb:9f:e4:c3:61:c1:ec:49:91:fd:0e:
         f5:74:90:d8:4c:fd:09:89:91:75:7a:56:8f:e3:a1:b9:cc:09:
         bc:ec:84:83:20:bf:e2:87:c3:95:e0:67:43:f9:28:a2:8b:61:
         f4:6f:9b:ac:01:e3:81:65:be:ac:be:b8:88:3b:9f:25:65:ab:
         9f:ae:5f:2f:75:c4:ac:58:63:aa:3f:9c:c6:bc:2e:a6:57:b2:
         2e:e4:73:08:8b:8a:71:12:52:32:65:41:3f:42:65:8c:43:64:
         da:c1:be:35:a7:2b:e9:ba:f5:df:89:cc:06:8f:05:d8:64:6b:
         29:14:a2:62:5b:90:d4:12:04:ca:7f:c8:ca:28:fc:7e:1b:37:
         73:46:2e:88:05:e5:90:84:89:b7:76:0e:30:5c:65:29:4c:9b:
         f3:5f:c2:da:11:80:bb:1b:96:af:24:2d:af:b6:0a:96:a6:56:
         7f:86:f6:63:6f:23:8c:8b:c1:94:1d:5b:b7:c7:3d:5c:d7:1c:
         9c:83:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:47:43 2025 by rpki-client