Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/3138372e31392e3131322e302f32302d3332203d3e203533313630.roa
File:                     3138372e31392e3131322e302f32302d3332203d3e203533313630.roa (raw, json)
Hash identifier:          hlTdjCamVe+IoeC5hO2rAezjOwSZOE9yeN5SZY2PAYs=
Subject key identifier:   B0:EE:EE:3B:25:5B:82:B3:78:4F:35:94:59:C7:C6:0F:C0:51:7A:63
Certificate issuer:       /CN=A4EB551354D73BB4306DB510E741AB54435DC5FE
Certificate serial:       645D3DDAD102E26E0F58A06BD7F9E7927A061933
Authority key identifier: A4:EB:55:13:54:D7:3B:B4:30:6D:B5:10:E7:41:AB:54:43:5D:C5:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EB551354D73BB4306DB510E741AB54435DC5FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/3138372e31392e3131322e302f32302d3332203d3e203533313630.roa
Signing time:             Tue 01 Apr 2025 21:34:15 +0000
ROA not before:           Tue 01 Apr 2025 21:29:15 +0000
ROA not after:            Tue 31 Mar 2026 21:34:15 +0000
asID:                     53160
IP address blocks:        187.19.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/A4EB551354D73BB4306DB510E741AB54435DC5FE.crl
                          rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/A4EB551354D73BB4306DB510E741AB54435DC5FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EB551354D73BB4306DB510E741AB54435DC5FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 15:05:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5d:3d:da:d1:02:e2:6e:0f:58:a0:6b:d7:f9:e7:92:7a:06:19:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4EB551354D73BB4306DB510E741AB54435DC5FE
        Validity
            Not Before: Apr  1 21:29:15 2025 GMT
            Not After : Mar 31 21:34:15 2026 GMT
        Subject: CN=B0EEEE3B255B82B3784F359459C7C60FC0517A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:93:41:3f:1b:ef:59:d0:0b:e5:6c:e4:04:
                    b7:3a:bf:07:ec:a6:7a:47:e2:49:e3:5a:2a:bd:51:
                    17:ca:cf:d0:08:96:10:77:2d:eb:17:3e:ac:2e:4c:
                    1a:6b:2d:aa:5a:9b:cd:00:28:db:93:4a:bc:75:f1:
                    4b:7b:a0:e6:ea:9e:f8:02:1d:c9:ed:d9:3e:4f:71:
                    92:d6:e9:9b:79:80:69:e7:cc:fe:f2:56:f8:d2:bb:
                    f1:7e:ab:19:2f:93:1e:33:c9:53:8e:c0:35:fe:6e:
                    3c:a1:9d:3b:a3:fa:b2:5d:88:c1:3a:4d:1b:4a:33:
                    cf:8e:00:4f:f1:b5:74:1a:f7:91:36:7f:cf:b4:5f:
                    84:a0:b9:6b:3c:19:35:50:9f:15:4d:db:6b:5d:43:
                    14:a6:9d:49:b7:7e:d2:4e:44:f9:2a:0a:39:39:6e:
                    59:f8:9e:cc:15:52:3d:ff:58:7c:47:62:1d:02:03:
                    54:76:a8:1f:7e:5b:26:70:b4:7d:a2:fe:9a:3b:d9:
                    f9:dc:ec:6b:b7:3c:06:b8:c9:1d:1d:f7:3f:58:65:
                    16:2c:f6:a4:5a:ef:ed:bd:d6:0b:ae:39:3a:a3:3d:
                    6b:24:3e:1f:4b:64:65:62:8b:24:7b:d8:9d:f5:ef:
                    30:e3:1b:b8:80:81:c3:7d:76:e3:3e:79:e5:64:cd:
                    8a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EE:EE:3B:25:5B:82:B3:78:4F:35:94:59:C7:C6:0F:C0:51:7A:63
            X509v3 Authority Key Identifier:
                keyid:A4:EB:55:13:54:D7:3B:B4:30:6D:B5:10:E7:41:AB:54:43:5D:C5:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/A4EB551354D73BB4306DB510E741AB54435DC5FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EB551354D73BB4306DB510E741AB54435DC5FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/3138372e31392e3131322e302f32302d3332203d3e203533313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:9f:cc:ea:88:1f:20:13:c6:20:42:93:71:e6:bd:91:30:69:
         4e:cf:10:62:96:70:a0:47:8d:f7:77:4a:c3:ad:1f:97:8b:2e:
         e3:04:3e:7f:f3:ae:98:44:a8:87:e3:d2:d2:22:fd:4c:0d:76:
         9d:38:63:f5:b6:2c:de:6c:6f:4f:ef:fc:7d:04:1b:b1:d0:3d:
         27:17:73:2a:10:a0:a4:b1:f4:e8:a5:d3:de:1f:63:b0:a4:f5:
         5f:4c:cb:24:df:90:2b:f3:75:33:dd:01:8d:eb:12:13:bc:89:
         51:ba:35:1a:29:ae:5b:3c:ff:7a:c1:22:60:23:d0:5f:75:43:
         79:69:96:e3:7e:a5:39:68:56:59:e5:f7:07:39:99:cb:c3:e8:
         3b:bd:a5:21:e5:86:af:43:5a:6c:b7:a8:fc:81:89:38:82:d7:
         7d:80:34:31:50:5f:51:56:83:df:bf:e4:2e:33:c6:d6:19:aa:
         b9:34:4a:26:65:40:b7:d4:80:4e:a4:2a:34:3d:c1:00:9b:40:
         e7:50:37:70:db:53:48:f7:fd:56:64:70:56:f5:9d:b1:6e:72:
         41:0c:13:14:fd:48:2c:49:65:f0:25:67:87:a2:9f:da:00:79:
         66:67:90:a2:6b:ad:5f:e1:60:6e:22:80:10:f9:19:e3:00:8f:
         9f:fa:c8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:20:51 2025 by rpki-client