Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138362e3231362e3134342e302f32312d3234203d3e2037303438.roa
File:                     3138362e3231362e3134342e302f32312d3234203d3e2037303438.roa (raw, json)
Hash identifier:          n1hOCpDXkqYoJc+muc9wdG7hJV0QURjesr26eQI/498=
Subject key identifier:   57:95:83:1E:C1:48:C9:41:FA:CA:E4:83:97:40:18:F3:2D:B3:62:E6
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       2EE00A26FCB02AA713DD0A9E903C36F0FAA0130F
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138362e3231362e3134342e302f32312d3234203d3e2037303438.roa
Signing time:             Mon 12 May 2025 13:00:04 +0000
ROA not before:           Mon 12 May 2025 12:55:04 +0000
ROA not after:            Mon 11 May 2026 13:00:04 +0000
asID:                     7048
IP address blocks:        186.216.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 02:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e0:0a:26:fc:b0:2a:a7:13:dd:0a:9e:90:3c:36:f0:fa:a0:13:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:55:04 2025 GMT
            Not After : May 11 13:00:04 2026 GMT
        Subject: CN=5795831EC148C941FACAE483974018F32DB362E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:10:86:46:25:97:4e:5a:ff:a5:93:8b:63:6e:
                    5a:88:a8:19:b9:fc:0d:d3:86:fc:21:f9:ec:2a:38:
                    2c:f6:88:12:bd:74:38:64:26:10:00:b6:92:4a:fa:
                    8c:2f:67:94:b0:bd:4a:ae:01:53:a1:44:9b:bb:78:
                    ee:16:f7:f7:f1:7c:a0:cf:28:49:41:44:68:94:75:
                    b8:a0:c1:8c:85:8b:a1:d5:04:1a:37:3d:ff:92:c4:
                    4c:21:85:23:98:bd:23:c4:e1:a9:1d:bd:d9:e6:23:
                    a7:32:89:0f:44:e0:11:2c:d7:95:66:4e:c8:e6:0b:
                    97:6d:0c:d5:64:d6:f1:17:84:0f:b4:fc:a6:d0:18:
                    60:b9:1b:cf:8b:fc:23:94:5e:07:b5:f6:ec:9f:c9:
                    63:93:09:8e:3a:00:a1:62:3b:03:cb:00:bc:6d:96:
                    25:c6:be:3a:8e:a6:cd:0b:4d:29:7b:b9:95:40:27:
                    4d:c9:2f:76:95:cb:e6:7e:f9:0f:f6:71:86:ef:23:
                    93:f0:8d:d9:af:17:2f:75:14:cf:20:63:e2:71:de:
                    ca:c4:80:69:a6:d7:0b:33:0e:bc:b9:71:bc:95:33:
                    a0:ed:c9:be:7d:40:cc:aa:dd:8a:e9:33:1b:6b:4b:
                    79:59:6b:10:89:77:75:47:e0:67:1d:e6:3a:61:0c:
                    ec:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:95:83:1E:C1:48:C9:41:FA:CA:E4:83:97:40:18:F3:2D:B3:62:E6
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138362e3231362e3134342e302f32312d3234203d3e2037303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:6e:94:4d:d5:bc:23:11:34:da:32:23:f9:f2:1a:ee:29:35:
         22:de:5f:cf:0e:ae:5d:fb:5a:8b:5b:3a:76:eb:64:af:38:0c:
         3d:cc:5a:0d:0a:78:88:a9:5a:bb:b5:17:eb:fb:85:6b:de:74:
         82:27:0f:41:0a:86:d6:d7:12:9e:78:05:07:cf:53:b5:8c:ce:
         1d:a7:ef:df:ac:84:98:79:7f:d5:6e:f2:ee:db:11:90:ff:14:
         5b:63:50:85:3c:5c:40:32:e4:12:14:fc:87:6b:0f:7b:48:f4:
         5b:f9:3e:6d:12:b5:bf:75:83:bd:e9:58:50:81:24:1c:8d:96:
         2d:97:7e:a8:d7:ed:85:68:fc:b1:a6:69:17:f9:96:31:22:58:
         4a:3f:fe:d7:d7:d1:ee:3f:e9:1e:4f:c8:98:46:d9:c7:dc:68:
         98:b5:32:41:9d:2d:a3:4b:27:11:0a:b2:b0:03:cb:42:a7:4f:
         6e:30:6f:e4:99:29:36:62:9e:a2:36:77:1f:3a:45:84:02:7f:
         dd:3b:57:3f:68:23:e5:bd:f4:0f:e9:cb:4f:c1:34:7a:ee:18:
         fe:e5:4a:aa:bf:5c:3d:84:c1:a0:f0:70:43:f0:01:a2:7b:f2:
         30:8e:1f:76:ec:51:b3:37:10:fc:2e:81:be:a3:bc:81:1e:68:
         b3:0c:ca:f1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULuAKJvywKqcT3QqekDw28PqgEw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FCN0M5QUFFQTFEMjkyMDEwMkQwNTJFMUFDNDVFQ0Ez
NDM5QjJGMDAeFw0yNTA1MTIxMjU1MDRaFw0yNjA1MTExMzAwMDRaMDMxMTAvBgNV
BAMTKDU3OTU4MzFFQzE0OEM5NDFGQUNBRTQ4Mzk3NDAxOEYzMkRCMzYyRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEIZGJZdOWv+lk4tjblqIqBm5
/A3Thvwh+ewqOCz2iBK9dDhkJhAAtpJK+owvZ5SwvUquAVOhRJu7eO4W9/fxfKDP
KElBRGiUdbigwYyFi6HVBBo3Pf+SxEwhhSOYvSPE4akdvdnmI6cyiQ9E4BEs15Vm
TsjmC5dtDNVk1vEXhA+0/KbQGGC5G8+L/COUXge19uyfyWOTCY46AKFiOwPLALxt
liXGvjqOps0LTSl7uZVAJ03JL3aVy+Z++Q/2cYbvI5PwjdmvFy91FM8gY+Jx3srE
gGmm1wszDry5cbyVM6Dtyb59QMyq3YrpMxtrS3lZaxCJd3VH4Gcd5jphDOxXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUV5WDHsFIyUH6yuSDl0AY8y2zYuYwHwYDVR0j
BBgwFoAUerfJquodKSAQLQUuGsReyjQ5svAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZEQ2g2WDV5cktkN0NZWXZacERMOVNxU3pNQUJqUGFhNmRzMUtSSzZx
SzYvMC83QUI3QzlBQUVBMUQyOTIwMTAyRDA1MkUxQUM0NUVDQTM0MzlCMkYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBQjdDOUFBRUExRDI5MjAx
MDJEMDUyRTFBQzQ1RUNBMzQzOUIyRjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGRENoNlg1eXJLZDdDWVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzAv
MzEzODM2MmUzMjMxMzYyZTMxMzQzNDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM3
MzAzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDutiQMA0GCSqGSIb3DQEBCwUAA4IBAQB6bpRN1bwj
ETTaMiP58hruKTUi3l/PDq5d+1qLWzp262SvOAw9zFoNCniIqVq7tRfr+4Vr3nSC
Jw9BCobW1xKeeAUHz1O1jM4dp+/frISYeX/VbvLu2xGQ/xRbY1CFPFxAMuQSFPyH
aw97SPRb+T5tErW/dYO96VhQgSQcjZYtl36o1+2FaPyxpmkX+ZYxIlhKP/7X19Hu
P+keT8iYRtnH3GiYtTJBnS2jSycRCrKwA8tCp09uMG/kmSk2Yp6iNncfOkWEAn/d
O1c/aCPlvfQP6ctPwTR67hj+5Uqqv1w9hMGg8HBD8AGie/Iwjh927FGzNxD8LoG+
o7yBHmizDMrx
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:24:20 2025 by rpki-client