Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/3138312e3233322e3136342e302f32342d3234203d3e20323731333131.roa
File:                     3138312e3233322e3136342e302f32342d3234203d3e20323731333131.roa (raw, json)
Hash identifier:          dPDvrb4dZ5u1uKgrsMdPJ3wQYgCjyT1gA7AhqZcCIbo=
Subject key identifier:   A3:AE:3A:27:C2:8C:61:A9:12:B3:1C:DF:5D:E9:B3:FF:ED:DE:C1:8D
Certificate issuer:       /CN=B6CC812D59F4308FCB1D2239555678B476218767
Certificate serial:       44B964F904050DF85B24B7C936AE9150F1DA89B0
Authority key identifier: B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/3138312e3233322e3136342e302f32342d3234203d3e20323731333131.roa
Signing time:             Wed 05 Mar 2025 21:14:51 +0000
ROA not before:           Wed 05 Mar 2025 21:09:51 +0000
ROA not after:            Wed 04 Mar 2026 21:14:51 +0000
asID:                     271311
IP address blocks:        181.232.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl
                          rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b9:64:f9:04:05:0d:f8:5b:24:b7:c9:36:ae:91:50:f1:da:89:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6CC812D59F4308FCB1D2239555678B476218767
        Validity
            Not Before: Mar  5 21:09:51 2025 GMT
            Not After : Mar  4 21:14:51 2026 GMT
        Subject: CN=A3AE3A27C28C61A912B31CDF5DE9B3FFEDDEC18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:59:c9:81:f2:ac:8f:4a:f2:5f:b6:0c:4a:86:
                    16:26:f5:58:fc:d4:83:42:47:f1:61:c4:ec:e8:b8:
                    cc:53:20:44:7d:c6:15:12:fa:51:bf:a9:54:0e:6c:
                    49:48:c5:94:18:e0:48:d4:87:17:86:29:52:15:c6:
                    fc:e5:6d:fe:93:15:e5:62:eb:e9:a6:ba:f3:1c:36:
                    e9:0b:87:5f:10:cc:6a:c3:f4:ab:9a:82:b7:9a:63:
                    b2:0e:6a:0f:1d:b9:d6:23:96:7a:a9:27:81:5d:49:
                    d6:91:0c:f3:d0:6d:94:4a:97:df:e0:0e:09:44:ca:
                    d2:9e:1a:f2:c6:e9:3f:bd:4d:5e:13:86:2b:27:88:
                    61:6d:4d:6d:da:36:00:04:e2:13:39:e9:22:70:e0:
                    33:f2:2e:28:c0:a2:88:05:9b:85:46:ce:80:17:e9:
                    34:eb:28:f7:ed:a9:e5:cc:80:8a:03:60:95:16:c7:
                    cd:13:4b:b1:eb:9b:22:30:89:ac:15:6a:fd:2b:f0:
                    cc:a7:b5:f6:15:a2:26:bb:c3:67:86:63:18:07:20:
                    98:00:1f:66:44:3a:c1:56:48:4a:85:e5:53:10:b8:
                    99:b6:74:cc:f5:e0:d8:0a:83:81:a4:60:9e:f3:1a:
                    bb:b0:2e:31:bf:b6:f2:ac:2e:ad:41:8b:c1:96:4a:
                    b7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AE:3A:27:C2:8C:61:A9:12:B3:1C:DF:5D:E9:B3:FF:ED:DE:C1:8D
            X509v3 Authority Key Identifier:
                keyid:B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/3138312e3233322e3136342e302f32342d3234203d3e20323731333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:08:6d:5d:ec:7d:a5:38:ae:81:b2:dd:b7:17:37:2a:00:f6:
         d7:73:79:a8:1f:a0:f6:99:fd:a4:ad:a2:67:c5:c6:1d:71:e6:
         6b:20:46:f6:fa:18:fe:0d:97:94:e9:0c:81:eb:7c:b9:f8:6d:
         bd:c0:55:38:f3:8a:9a:a1:5e:a0:63:ca:f1:03:b9:ed:c8:fb:
         75:e3:b8:4b:aa:eb:00:ca:b8:83:17:d1:3c:96:aa:8c:66:fa:
         8d:76:65:af:3d:5a:e6:1b:86:c2:f0:b8:2e:f1:37:99:3a:b5:
         bc:de:50:cd:09:ae:12:b0:27:80:7e:11:11:62:07:52:cb:14:
         e7:53:db:b7:91:26:77:4b:f3:c9:53:e0:94:aa:17:48:e4:6e:
         27:5e:7d:f0:6d:eb:24:a0:72:d7:ee:6a:0b:c9:0d:c0:16:4f:
         1c:6a:ef:7a:3e:75:b5:8d:28:e9:3d:85:cd:5c:d8:d4:e5:9f:
         9c:6a:a0:04:24:21:98:10:3a:24:0e:32:b3:3e:24:c3:76:35:
         03:68:38:03:b4:f5:96:44:ba:96:35:f8:7e:c9:1d:7d:94:ad:
         d5:ae:75:33:48:53:e7:0b:2f:f0:36:24:45:d8:67:d2:ab:cd:
         06:78:63:6c:26:96:b4:78:b0:17:10:88:3d:65:00:14:23:b8:
         47:2e:2f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:35 2025 by rpki-client