Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32322d3332203d3e203631373531.roa
File:                     3136382e3232382e34302e302f32322d3332203d3e203631373531.roa (raw, json)
Hash identifier:          efmPVoVspdg5rQLOAZMfkpjSOnS1ZFS+4ItllO7dqLE=
Subject key identifier:   FF:DD:CB:FB:9E:11:2E:58:90:7C:76:FC:9C:DB:0E:50:B7:0C:3C:22
Certificate issuer:       /CN=1B4381A700D83209483A0BD2D3A2787F6A191AD4
Certificate serial:       6EC8C52FCBA39357C64A0170954D92F4C2E6EDC7
Authority key identifier: 1B:43:81:A7:00:D8:32:09:48:3A:0B:D2:D3:A2:78:7F:6A:19:1A:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4381A700D83209483A0BD2D3A2787F6A191AD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32322d3332203d3e203631373531.roa
Signing time:             Tue 11 Feb 2025 18:13:22 +0000
ROA not before:           Tue 11 Feb 2025 18:08:22 +0000
ROA not after:            Tue 10 Feb 2026 18:13:22 +0000
asID:                     61751
IP address blocks:        168.228.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/1B4381A700D83209483A0BD2D3A2787F6A191AD4.crl
                          rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/1B4381A700D83209483A0BD2D3A2787F6A191AD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4381A700D83209483A0BD2D3A2787F6A191AD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 21:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c8:c5:2f:cb:a3:93:57:c6:4a:01:70:95:4d:92:f4:c2:e6:ed:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B4381A700D83209483A0BD2D3A2787F6A191AD4
        Validity
            Not Before: Feb 11 18:08:22 2025 GMT
            Not After : Feb 10 18:13:22 2026 GMT
        Subject: CN=FFDDCBFB9E112E58907C76FC9CDB0E50B70C3C22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:37:e1:e6:7a:ea:54:33:d9:3e:29:94:fe:64:
                    08:56:5f:b2:b6:08:54:f4:c1:7b:31:33:3a:ae:08:
                    dc:bd:0a:14:22:c5:8c:4d:a4:a6:07:f1:19:74:47:
                    0b:13:e0:3a:49:af:38:fd:ae:22:26:66:d4:bb:f2:
                    b8:81:e9:c2:2f:e9:d1:08:e9:dd:46:10:3a:13:23:
                    c8:7b:3d:13:2a:8a:f2:29:6f:5e:e6:dc:e7:21:c6:
                    07:07:6f:86:3f:68:7a:c9:d5:3e:b0:a9:68:76:ce:
                    3f:1b:d8:1e:c0:24:45:5b:1b:b3:a2:49:2e:cd:8f:
                    82:b5:47:dd:97:ad:be:18:ac:79:20:ea:7f:31:31:
                    4f:4d:95:69:10:bb:49:4f:74:43:67:2c:8d:25:8d:
                    b2:c7:b3:28:9e:d9:cd:8b:3f:1b:2c:71:a2:d6:5f:
                    37:ff:81:04:aa:31:11:f3:13:a1:41:07:6b:ff:2a:
                    ad:a6:ec:f1:c1:f5:d0:0a:e4:6a:01:e2:32:ae:9c:
                    17:61:93:f8:06:35:3d:6c:3a:90:21:f9:4d:df:f4:
                    3c:f8:3f:c6:6c:c3:d9:1f:0a:2f:4d:9a:4f:60:13:
                    b1:42:5d:24:27:9e:5c:5d:5c:9c:07:21:9f:e0:7d:
                    2a:99:44:04:cf:00:36:31:56:13:85:96:15:2c:80:
                    e3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DD:CB:FB:9E:11:2E:58:90:7C:76:FC:9C:DB:0E:50:B7:0C:3C:22
            X509v3 Authority Key Identifier:
                keyid:1B:43:81:A7:00:D8:32:09:48:3A:0B:D2:D3:A2:78:7F:6A:19:1A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/1B4381A700D83209483A0BD2D3A2787F6A191AD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4381A700D83209483A0BD2D3A2787F6A191AD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32322d3332203d3e203631373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:2b:a3:11:8e:bd:99:e9:66:c2:2e:2a:09:2a:8d:13:84:27:
         79:b1:2c:54:7b:91:42:15:6e:da:f7:ac:ad:22:79:74:29:52:
         79:e4:e5:63:74:e5:75:0d:8d:fb:5a:61:52:13:86:29:11:ee:
         1a:8e:89:0c:57:ba:76:e7:e3:15:49:a1:47:e2:f1:52:09:c2:
         71:fb:dd:20:33:11:f4:ee:c1:42:aa:f5:ff:93:e1:01:8f:6d:
         72:7f:61:08:25:d9:5c:f3:52:59:bd:4f:6e:f2:67:d1:03:ce:
         ad:00:34:bd:78:81:36:2e:74:98:f1:23:65:3d:3a:22:43:ea:
         6c:94:25:ed:60:75:54:29:79:67:0c:82:22:e9:23:a0:0a:81:
         7a:bb:11:5c:6e:93:6a:17:fe:d0:6d:86:a2:42:c3:bb:51:7d:
         ce:eb:89:c0:73:16:be:d0:87:b6:ba:c7:ff:b6:3d:43:c3:99:
         98:ee:90:c8:5e:34:de:75:2a:1d:0c:4e:33:84:13:c3:e5:12:
         a9:61:57:4d:da:21:25:f5:be:31:b2:a8:da:72:cf:e8:31:6c:
         39:60:fc:84:15:aa:b4:e5:1e:a6:d3:61:46:0e:c6:9b:98:fa:
         b3:ff:3f:e5:6e:8a:26:71:1a:7a:7e:2f:da:a9:ca:cb:40:3f:
         5a:50:63:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:12:44 2025 by rpki-client