Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/3138372e38342e3135322e302f32322d3234203d3e20323732353439.roa
File:                     3138372e38342e3135322e302f32322d3234203d3e20323732353439.roa (raw, json)
Hash identifier:          88Oyt4SvBIiJaIaQSNPFg5v321OQ5Fgtzv8WaDmJVwo=
Subject key identifier:   1B:32:29:CE:20:A3:03:2D:73:A1:E8:3E:68:46:3F:E5:33:0E:7E:8F
Certificate issuer:       /CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
Certificate serial:       3A08F05E9E4E52F7695DC3A2BF007359EF1616D8
Authority key identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/3138372e38342e3135322e302f32322d3234203d3e20323732353439.roa
Signing time:             Sat 05 Apr 2025 12:51:11 +0000
ROA not before:           Sat 05 Apr 2025 12:46:11 +0000
ROA not after:            Sat 04 Apr 2026 12:51:11 +0000
asID:                     272549
IP address blocks:        187.84.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl
                          rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:08:f0:5e:9e:4e:52:f7:69:5d:c3:a2:bf:00:73:59:ef:16:16:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
        Validity
            Not Before: Apr  5 12:46:11 2025 GMT
            Not After : Apr  4 12:51:11 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e6:73:74:39:d3:89:2d:32:53:b5:09:59:b6:
                    27:75:83:67:72:54:fe:02:d9:ba:a5:c4:18:30:22:
                    00:9b:36:b5:ca:19:c6:ae:35:4c:81:80:8e:76:18:
                    79:79:27:ad:05:f8:e2:91:98:8f:8f:23:27:5e:a0:
                    2e:4b:90:75:8e:a2:f0:bc:24:ed:5d:93:60:cb:da:
                    dc:28:ee:00:83:09:3d:ae:81:fb:4d:4a:7f:d2:af:
                    8f:c1:5b:68:fa:64:aa:25:cd:d8:7f:d2:65:95:f3:
                    c8:48:21:ed:e8:e9:46:16:6b:c6:91:e3:57:2d:0e:
                    fe:1f:22:de:25:35:14:7a:fc:bc:10:66:30:c1:2b:
                    61:8e:09:3f:6d:d8:87:78:96:3e:84:86:96:69:8d:
                    00:dc:80:34:7f:2d:8b:b3:c6:f6:a8:ef:d2:33:2e:
                    58:36:1f:1c:25:3f:6a:5b:ba:b4:a8:8c:65:7f:5e:
                    46:2f:37:37:ef:9b:3c:2d:4c:d2:8f:b6:3d:d5:88:
                    50:0d:78:c4:83:63:b8:21:25:d5:d8:d5:80:e9:b7:
                    d1:20:d6:21:6f:b6:a7:df:48:dd:3a:3e:33:88:78:
                    40:82:bd:bc:dd:cc:6b:df:f2:72:42:98:f7:ad:e4:
                    a0:5d:9a:42:de:4d:f2:41:98:c4:b1:a2:2e:52:4d:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:32:29:CE:20:A3:03:2D:73:A1:E8:3E:68:46:3F:E5:33:0E:7E:8F
            X509v3 Authority Key Identifier:
                keyid:2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/3138372e38342e3135322e302f32322d3234203d3e20323732353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:82:99:b8:2a:49:ad:36:30:30:56:65:d4:d8:87:f7:fc:73:
         d5:c7:5a:8d:35:38:1d:40:c7:0c:b3:3a:0d:fb:0b:47:f4:b6:
         42:80:ad:3b:fa:a2:88:e1:d6:45:b3:da:b2:7b:9e:11:45:b5:
         a6:a4:ac:f8:53:38:34:33:71:3f:6a:9a:db:c1:ab:45:75:db:
         40:f3:cc:ca:db:db:4d:66:1b:d9:1c:f9:18:d1:63:90:38:c1:
         ee:0b:8f:98:ec:97:1b:33:46:6b:10:45:cb:d9:38:4b:8f:0e:
         60:e9:51:9c:6d:59:05:b0:87:c5:64:c9:28:9f:29:c4:5e:9d:
         12:5b:4e:2f:98:d4:cc:3a:bd:7b:59:fb:ca:27:87:94:03:24:
         3e:74:bd:39:52:4b:6a:4b:9d:0b:b3:04:9d:e6:75:b0:12:1c:
         7e:2b:63:0c:06:5b:db:c7:c0:de:3a:49:d0:04:60:13:ad:9d:
         8a:5c:41:10:4d:4d:34:02:f2:a7:5a:f8:24:2a:07:0e:08:94:
         a8:7e:1a:05:ce:ae:c2:71:1e:d9:c3:35:44:97:db:a9:1c:16:
         56:c1:a7:c5:4c:52:ab:84:95:15:6d:cf:ed:b9:ec:d8:df:e4:
         73:97:e3:0b:a5:1e:9b:c4:5c:19:af:42:f9:b1:a4:a1:95:57:
         c0:7d:2b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:08:41 2025 by rpki-client