Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135362e302f32332d3233203d3e20323636363335.roa
File:                     3132382e3230312e3135362e302f32332d3233203d3e20323636363335.roa (raw, json)
Hash identifier:          dzViNs+c83tUjXDrDO3oKxCkU85rIOrrKry2IfWZVVo=
Subject key identifier:   ED:55:64:30:E4:D3:A1:14:E7:17:22:A8:95:04:F0:40:AF:9D:49:46
Certificate issuer:       /CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Certificate serial:       31323A50A6E96DD57D68909D408DC7D2CE2FF5E6
Authority key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135362e302f32332d3233203d3e20323636363335.roa
Signing time:             Thu 06 Mar 2025 02:52:44 +0000
ROA not before:           Thu 06 Mar 2025 02:47:44 +0000
ROA not after:            Thu 05 Mar 2026 02:52:44 +0000
asID:                     266635
IP address blocks:        128.201.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl
                          rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 11:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:32:3a:50:a6:e9:6d:d5:7d:68:90:9d:40:8d:c7:d2:ce:2f:f5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Validity
            Not Before: Mar  6 02:47:44 2025 GMT
            Not After : Mar  5 02:52:44 2026 GMT
        Subject: CN=ED556430E4D3A114E71722A89504F040AF9D4946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1c:b1:59:75:91:3c:30:a2:4e:3b:8b:1e:94:
                    7f:88:57:f7:ca:b9:f6:54:bc:50:c1:6b:8c:87:2a:
                    69:7e:82:2d:f0:71:3e:5c:11:b1:a7:72:f8:dd:95:
                    a3:0e:40:0f:5a:df:66:b8:4b:ce:45:6b:d1:37:36:
                    b7:2a:ce:4d:a0:e9:37:a7:d1:02:ab:36:5b:5b:b0:
                    cc:f3:7c:e3:74:f0:60:11:85:0e:09:c7:c2:a4:2f:
                    9b:bb:89:16:fe:50:88:f8:23:44:ec:7d:bd:6d:c2:
                    0e:89:b5:21:f4:dc:3f:ef:0d:15:83:69:4a:21:6b:
                    b8:f2:82:c4:20:eb:ba:37:dc:4d:53:4c:f0:24:71:
                    50:33:44:89:2d:2e:a1:bc:bd:98:46:88:be:fd:65:
                    88:89:8f:dd:69:ff:27:ea:42:db:18:d8:79:8f:81:
                    66:67:38:ae:e8:64:60:b2:dc:65:64:4c:1d:51:58:
                    5c:43:81:df:a2:c8:5c:73:1e:03:4d:b4:fa:a6:d9:
                    ab:af:89:42:e9:fd:cf:da:b0:16:c6:d1:a9:12:ea:
                    89:b3:36:17:94:3c:8e:cc:09:c1:dd:f6:34:05:aa:
                    39:88:13:44:80:c3:cd:3b:a2:7f:59:b9:7a:8c:ac:
                    d1:75:2f:cf:0b:4d:0b:a2:8c:0e:94:ff:50:e3:29:
                    46:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:55:64:30:E4:D3:A1:14:E7:17:22:A8:95:04:F0:40:AF:9D:49:46
            X509v3 Authority Key Identifier:
                keyid:EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135362e302f32332d3233203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:0e:35:34:fc:67:3c:33:61:92:b3:62:0b:86:d5:79:8a:03:
         2f:fc:ae:75:16:4b:29:61:7c:cf:bd:77:a2:90:26:77:e0:a8:
         36:49:eb:c5:92:f1:79:f0:2a:ee:4b:d3:26:01:9f:25:46:5a:
         fe:fa:dc:5a:d5:23:7f:20:c9:99:ca:65:4b:f2:10:99:bd:fe:
         7c:9c:a3:cf:c4:f6:c5:de:12:42:a3:f2:5f:2c:f1:c1:3e:1c:
         2b:ec:32:c2:c0:10:89:c2:ae:d9:62:06:14:2c:19:c2:f8:90:
         79:ed:57:fb:eb:70:f1:67:4f:af:cd:3c:e2:71:21:97:ca:a9:
         4f:a5:07:15:23:39:67:a5:84:72:b4:17:b9:da:b8:56:11:a7:
         b3:b8:79:ce:ec:4e:09:ce:d0:0d:6e:82:d4:7f:85:5c:e1:fb:
         22:65:1c:d2:9f:4e:4f:65:10:d2:89:b1:f1:db:ba:fc:3c:48:
         a5:8c:f2:69:e2:2a:1c:f9:03:36:53:71:32:8c:1e:c7:19:aa:
         6e:68:33:e3:65:f9:93:3a:1f:02:89:a9:58:9f:11:40:f4:c0:
         37:d4:bc:75:9d:3b:62:bf:5c:5a:2e:e1:74:4c:5d:2c:f8:82:
         60:2e:eb:f1:f9:5c:42:22:ef:aa:21:57:f7:0b:20:8e:cc:6b:
         bc:c6:cd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:02:22 2025 by rpki-client